CVE-2025-38004

can: bcm: add locking for bcm_op runtime updates

7.3 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add locking for bcm_op runtime updates

The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via hrtimer. The content and also the length of the sequence can be changed resp reduced at runtime where the 'currframe' counter is then set to zero.

Although this appeared to be a safe operation the updates of 'currframe' can be triggered from user space and hrtimer context in bcm_can_tx(). Anderson Nascimento created a proof of concept that triggered a KASAN slab-out-of-bounds read access which can be prevented with a spin_lock_bh.

At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: Low
Availability: High

Exploit likelihood

0.28%Up 0.3 points since Jun 8, 2025

What each source reports

CVE List Score used 7.3

can: bcm: add locking for bcm_op runtime updates

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add locking for bcm_op runtime updates

At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.

Record: CVE-2025-38004
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

EUVDEUVD-2025-17384 7.3

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add locking for bcm_op runtime updates

At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.

Record: EUVD-2025-17384
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-29qg-42xm-553c 7.1

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for...

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add locking for bcm_op runtime updates

At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.

Record: GHSA-29qg-42xm-553c
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

NVD 7.3

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add locking for bcm_op runtime updates

At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.

Record: CVE-2025-38004
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVBELL-CVE-2025-38004 7.1

Record: BELL-CVE-2025-38004
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSV 7.3

can: bcm: add locking for bcm_op runtime updates

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add locking for bcm_op runtime updates

At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.

Record: CVE-2025-38004
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

Show 45 moreShow less

OSVDEBIAN-CVE-2025-38004 7.1

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op runtime updates The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via hrtimer. The content and also the length of the sequence can be changed resp reduced at runtime where the 'currframe' counter is then set to zero. Although this appeared to be a safe operation the updates of 'currframe' can be triggered from user space and hrtimer context in bcm_can_tx(). Anderson Nascimento created a proof of concept that triggered a KASAN slab-out-of-bounds read access which can be prevented with a spin_lock_bh. At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.

Record: DEBIAN-CVE-2025-38004
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2025-2120 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

[0]: ref_tracker: net notrefcnt@000000003d6e7d05 has 1/2 users at sk_alloc (./include/net/net_namespace.h:345 net/core/sock.c:2236) inet_create (net/ipv4/af_inet.c:326 net/ipv4/af_inet.c:252) __sock_create (net/socket.c:1558) udp_sock_create4 (net/ipv4/udp_tunnel_core.c:18) gtp_create_sock (./include/net/udp_tunnel.h:59 drivers/net/gtp.c:1423) gtp_create_sockets (drivers/net/gtp.c:1447) gtp_newlink (drivers/net/gtp.c:1507) rtnl_newlink (net/core/rtnetlink.c:3786 net/core/rtnetlink.c:3897 net/core/rtnetlink.c:4012) rtnetlink_rcv_msg (net/core/rtnetlink.c:6922) netlink_rcv_skb (net/netlink/af_netlink.c:2542) netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1347) netlink_sendmsg (net/netlink/af_netlink.c:1891) ____sys_sendmsg (net/socket.c:711 net/socket.c:726 net/socket.c:2583) ___sys_sendmsg (net/socket.c:2639) __sys_sendmsg (net/socket.c:2669) do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)

WARNING: CPU: 1 PID: 60 at lib/ref_tracker.c:179 ref_tracker_dir_exit (lib/ref_tracker.c:179) Modules linked in: CPU: 1 UID: 0 PID: 60 Comm: kworker/u16:2 Not tainted 6.13.0-rc5-00147-g4c1224501e9d #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Workqueue: netns cleanup_net RIP: 0010:ref_tracker_dir_exit (lib/ref_tracker.c:179) Code: 00 00 00 fc ff df 4d 8b 26 49 bd 00 01 00 00 00 00 ad de 4c 39 f5 0f 85 df 00 00 00 48 8b 74 24 08 48 89 df e8 a5 cc 12 02 90 <0f> 0b 90 48 8d 6b 44 be 04 00 00 00 48 89 ef e8 80 de 67 ff 48 89 RSP: 0018:ff11000009a07b60 EFLAGS: 00010286 RAX: 0000000000002bd3 RBX: ff1100000f4e1aa0 RCX: 1ffffffff0e40ac6 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8423ee3c RBP: ff1100000f4e1af0 R08: 0000000000000001 R09: fffffbfff0e395ae R10: 0000000000000001 R11: 0000000000036001 R12: ff1100000f4e1af0 R13: dead000000000100 R14: ff1100000f4e1af0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ff1100006ce80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9b2464bd98 CR3: 0000000005286005 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __warn (kernel/panic.c:748) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? report_bug (lib/bug.c:201 lib/bug.c:219) ? handle_bug (arch/x86/kernel/traps.c:285) ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:97 ./arch/x86/include/asm/irqflags.h:155 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:158) ? kfree (mm/slub.c:4613 mm/slub.c:4761) net_free (net/core/net_namespace.c:476 net/core/net_namespace.c:467) cleanup_net (net/core/net_namespace.c:664 (discriminator 3)) process_one_work…

Record: OESA-2025-2120
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-2121 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

Record: OESA-2025-2121
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-2122 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

Record: OESA-2025-2122
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:64775 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:64775
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:64808 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:64808
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:64775 7.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004)
kernel: ipv6: add NULL checks for idev in SRv6 paths (CVE-2026-23442)
kernel: udp: Fix wildcard bind conflict check when using hash2 (CVE-2026-31503)
kernel: ipv6: prevent possible UaF in addrconf_permanent_addr() (CVE-2026-43339)
kernel: tcp: call sk_data_ready() after listener migration (CVE-2026-46015)
kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (CVE-2026-46266)
kernel: flow_dissector: do not dissect PPPoE PFC frames (CVE-2026-46306)
kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933)
kernel: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (CVE-2026-53075)
kernel: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (CVE-2026-53277)
kernel: ipv6: sit: reload inner IPv6 header after GSO offloads (CVE-2026-53228)
kernel: net: add pskb_may_pull() to skb_gro_receive_list() (CVE-2026-53235)
kernel: net: guard timestamp cmsgs to real error queue skbs (CVE-2026-53223)
kernel: ipv6: mcast: Fix use-after-free when processing MLD queries (CVE-2026-53275)
kernel: ipv6: anycast: insert aca into global hash under idev->lock (CVE-2026-53259)
kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)
kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (CVE-2026-63993)
kernel: fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req (CVE-2026-64265)
kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319)
kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287)
kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563)
kernel: smb: client: fix double-free in SMB2_close() replay (CVE-2026-64597)

Bug Fix(es) and Enhancement(s):

Customer needs "netfilter: nfnetlink_queue: optimize verdict lookup with hash table" patch [Rocky Linux 10.2] (JIRA:Rocky Linux-132852)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:64775
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:64808 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004)
kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933)
kernel: netfilter: nat: use kfree_rcu to release ops (CVE-2026-53000)
kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)
kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)
kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319)
kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287)
kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:64808
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2025-38004 7.1

CVE-2025-38004 in linux - Patched by Root

Root has patched CVE-2025-38004 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2025-38004
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2025-38004 7.1

CVE-2025-38004 in linux - Patched by Root

Root has patched CVE-2025-38004 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2025-38004
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2025-38004 7.1

CVE-2025-38004 in linux - Patched by Root

Root has patched CVE-2025-38004 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2025-38004
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-06

OSVROOT-OS-UBUNTU-2404-CVE-2025-38004 7.1

CVE-2025-38004 in linux - Patched by Root

Root has patched CVE-2025-38004 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-38004
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2025-38004 5.8

Record: UBUNTU-CVE-2025-38004
CVSS 4.0: 5.8 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-06

OSVALSA-2026:64808 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: can: bcm: add locking for bcm_op runtime updates (CVE-2025-38004)
kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership() (CVE-2026-52933)
kernel: netfilter: nat: use kfree_rcu to release ops (CVE-2026-53000)
kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)
kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)
kernel: nvmet-auth: validate reply message payload bounds against transfer length (CVE-2026-64319)
kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (CVE-2026-64287)
kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:64808
Updated: 2026-11-02

OSVAZL-63687 No score

CVE-2025-38004 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add locking for bcm_op runtime updates

At the rework of bcm_can_tx() the 'count' variable has been moved into the protected section as this variable can be modified from both contexts too.

Record: AZL-63687
Updated: 2026-11-02

OSVCLSA-2025-1757963029 No score

kernel-uek: Fix of 195 CVEs

rds: tcp: block BH in TCP callbacks
kexec: Improve & fix crash_exclude_mem_range() to handle overlapping ranges
module: correctly exit module_kallsyms_on_each_symbol when fn() != 0
module: potential uninitialized return in module_kallsyms_on_each_symbol()
module: use RCU to synchronize find_module
kallsyms: refactor {,module_}kallsyms_on_each_symbol
LTS tag: v5.4.295
scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320}
perf: Fix sample vs do_exit() {CVE-2025-38424}
s390/pci: Fix __pcilg_mio_inuser() inline assembly
rtc: test: Fix invalid format specifier.
jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337}
mm/huge_memory: fix dereferencing invalid pmd migration entry {CVE-2025-37958}
rtc: Make rtc_time64_to_tm() support dates before 1970
rtc: Improve performance of rtc_time64_to_tm(). Add tests.
xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create {CVE-2022-48773}
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
net: atm: add lec_mutex {CVE-2025-38323}
calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181}
tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
atm: atmtcp: Free invalid length skb in atmtcp_c_send(). {CVE-2025-38185}
mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324}
wifi: carl9170: do not ping device which has failed to load firmware {CVE-2025-38420}
aoe: clean device rq_list in aoedev_downdev() {CVE-2025-38326}
hwmon: (occ) fix unaligned accesses
drm/nouveau/bl: increase buffer size to avoid truncate warning
erofs: remove unused trace event erofs_destroy_inode
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
ALSA: hda/intel: Add Thinkpad E15 to PM deny list
Input: sparcspkr - avoid unannotated fall-through
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190}
selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
scsi: s390: zfcp: Ensure synchronous unit_add
scsi: storvsc: Increase the timeouts to storvsc_timeout
jffs2: check jffs2_prealloc_raw_node_refs() result in few other places {CVE-2025-38328}
jffs2: check that raw node were preallocated before writing summary {CVE-2025-38194}
drivers/rapidio/rio_cm.c: prevent possible heap overwrite {CVE-2025-38090}
powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
platform/x86: dell_rbu: Stop overwriting data buffer
platform: Add Surface platform directory
Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
tee: Prevent size calculation wraparound on 32-bit kernels
ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
watchdog: da9052_wdt: respect TWDMIN
i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
sock: Correct error checking condition for (assign|release)_proto_idx()
scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
vxlan: Do not treat dst cache initialization errors as fatal
clk: rockchip: rk3036: mark ddrphy as critical
wifi: mac80211: do not offer a mesh path if forwarding is disabled
net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
pinctrl: armada-37xx:…

Record: CLSA-2025-1757963029
Updated: 2026-11-02

OSVCLSA-2026-1767867153 No score

kernel: Fix of 16 CVEs

crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186}
can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403}
scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978}
ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}
ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886}
wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245}
atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}

Record: CLSA-2026-1767867153
Updated: 2026-11-02

OSVCLSA-2026-1767867718 No score

kernel: Fix of 16 CVEs

crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186}
can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403}
scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978}
ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}
ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886}
wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245}
atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}

Record: CLSA-2026-1767867718
Updated: 2026-11-02

OSVCLSA-2026-1768110920 No score

kernel: Fix of 16 CVEs

crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186}
can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403}
scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978}
ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}
ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886}
wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245}
atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}

Record: CLSA-2026-1768110920
Updated: 2026-11-02

OSVCLSA-2026-1768669128 No score

kernel: Fix of 42 CVEs

Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419}
firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432}
wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408}
wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380}
wifi: mac80211_hwsim: drop short frames {CVE-2023-53321}
wifi: cfg80211: Fix use after free for wext {CVE-2023-53153}
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978}
ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886}
wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245}
atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
spec: merge oraclelinux6els changes
ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365}
ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917}
ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918}
ipvs: use explicitly signed chars
HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900}
netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
mtd: inftlcore: Add error check for inftl_read_oob() {CVE-2025-37892}
igb: Do not free q_vector unless new one was allocated {CVE-2022-50252}
scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907}
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
md-raid10: fix KASAN warning {CVE-2022-50211}
usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882}
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751}
crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014}
isofs: Prevent the use of too small fid {CVE-2025-37780}
net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789}
partitions: mac: fix handling of bogus partition table {CVE-2025-21772}

Record: CLSA-2026-1768669128
Updated: 2026-11-02

OSVCLSA-2026-1769610819 No score

kernel: Fix of 42 CVEs

Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419}
firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432}
wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408}
wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380}
wifi: mac80211_hwsim: drop short frames {CVE-2023-53321}
wifi: cfg80211: Fix use after free for wext {CVE-2023-53153}
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978}
ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886}
wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245}
atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
spec: merge oraclelinux6els changes
ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365}
ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917}
ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918}
ipvs: use explicitly signed chars
HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900}
netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
mtd: inftlcore: Add error check for inftl_read_oob() {CVE-2025-37892}
igb: Do not free q_vector unless new one was allocated {CVE-2022-50252}
scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907}
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
md-raid10: fix KASAN warning {CVE-2022-50211}
usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882}
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751}
crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014}
isofs: Prevent the use of too small fid {CVE-2025-37780}
net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789}
partitions: mac: fix handling of bogus partition table {CVE-2025-21772}

Record: CLSA-2026-1769610819
Updated: 2026-11-02

OSVCLSA-2026-1771081379 No score

kernel: Fix of 76 CVEs

HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495}
fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271}
ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
Bluetooth: ISO: Fix possible UAF on iso_conn_free {CVE-2025-40141}
Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once {CVE-2025-40318}
smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728}
pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574}
ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911}
bus: mhi: host: Detect events pointing to unexpected TREs {CVE-2025-39790}
nvmet: fix out-of-bounds access in nvmet_enable_port {CVE-2025-37825}
drm/xe: Make dma-fences compliant with the safe access rules {CVE-2025-38703}
libceph: fix invalid accesses to ceph_connection_v1_info {CVE-2025-39880}
fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass {CVE-2025-38396}
anon_inode: explicitly block ->setattr()
anon_inode: use a proper mode internally
dynamic_dname(): drop unused dentry argument
anon_inode: raise SB_I_NODEV and SB_I_NOEXEC
Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete {CVE-2025-38118}
Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync {CVE-2024-58013}
drm/xe: Fix vm_bind_ioctl double free bug {CVE-2025-38731}
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
HID: core: ensure __hid_request reserves the report ID as the first byte
wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853}
usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691}
drm/i915: Protect access to driver and timeline name
sync_file: Protect access to driver and timeline name
dma-fence: Add safe access helpers and document the rules
VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102}
net: phylink: add lock for serializing concurrent pl->phydev writes with resolver {CVE-2025-39905}
HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() {CVE-2025-39806}
vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618}
mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883}
md/raid1: Fix stack memory use after return in raid1_reshape {CVE-2025-38445}
drm/i915/gt: Fix timeline left held on VMA alloc error {CVE-2025-38389}
ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249}
i40e: remove read access to debugfs files {CVE-2025-39901}
wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
bnxt_en: Fix memory corruption when FW resources change during ifdown {CVE-2025-39810}
atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
nbd: fix uaf in nbd_genl_connect() error path {CVE-2025-38443}
Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods {CVE-2025-38395}
virtio-net: ensure the received length does not exceed allocated size {CVE-2025-38375}
ftrace: Fix UAF when lookup kallsym after ftrace disabled {CVE-2025-38346}
sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240}
net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
software node: Correct a OOB check in software_node_get_reference_args() {CVE-2025-38342}
net: atm: add lec_mutex {CVE-2025-38323} -…

Record: CLSA-2026-1771081379
Updated: 2026-11-02

OSVCLSA-2026-1771239384 No score

kernel: Fix of 75 CVEs

net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit {CVE-2025-39766}
NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680}
scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}
KVM: x86: use array_index_nospec with indices that come from guest {CVE-2025-39823}
ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689}
ext4: improve error handling from ext4_dirhash() {CVE-2023-53473}
rcu: Protect ->defer_qs_iw_pending from data race {CVE-2025-39749}
ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}
fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271}
ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
Bluetooth: ISO: Fix possible UAF on iso_conn_free {CVE-2025-40141}
pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574}
lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484}
ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}
fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911}
libceph: fix invalid accesses to ceph_connection_v1_info {CVE-2025-39880}
bus: mhi: host: Detect events pointing to unexpected TREs {CVE-2025-39790}
nvmet: fix out-of-bounds access in nvmet_enable_port {CVE-2025-37825}
net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() {CVE-2023-54155}
wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853}
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691}
net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device {CVE-2023-54015}
x86/sev: Make enc_dec_hypercall() accept a size instead of npages {CVE-2023-53996}
page_pool: Fix use-after-free in page_pool_recycle_in_ring {CVE-2025-38129}
page_pool: fix inconsistency for page_pool_ring_[un]lock()
net: page_pool: use in_softirq() instead {CVE-2025-38129}
vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}
vsock: avoid to close connected socket after the timeout {CVE-2025-40248}
sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240}
smb: client: let recv_done verify data_offset, data_length and remaining_data_length {CVE-2025-39933}
net: phylink: add lock for serializing concurrent pl->phydev writes with resolver {CVE-2025-39905}
i40e: validate ring_len parameter against hardware-specific values
i40e: add validation for ring_len param {CVE-2025-39973}
i40e: increase max descriptors for XL710
i40e: remove read access to debugfs files {CVE-2025-39901}
mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883}
wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
i2c: tegra: check msg length in SMBUS block read {CVE-2025-38425}
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods {CVE-2025-38395}
virtio-net: ensure the received length does not exceed allocated size {CVE-2025-38375}
VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102}
vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}
can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow {CVE-2023-54102}
tcp: fix a signed-integer-overflow bug in tcp_add_backlog() {CVE-2022-50865}
tcp: minor optimization in tcp_add_backlog() {CVE-2022-50865}
block, bfq: fix uaf for bfqq in bic_set_bfqq() {CVE-2023-52983}
block, bfq: replace 0/1 with…

Record: CLSA-2026-1771239384
Updated: 2026-11-02

OSVCLSA-2026-1775224807 No score

Fix of 95 CVEs

CVE-2025-39683
- tracing: Remove unneeded goto out logic {CVE-2025-39683}
- tracing: Limit access to parser->buffer when trace_get_user failed {CVE-2025-39683}
CVE-2025-38079
- crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
CVE-2025-38159
- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
CVE-2025-38211
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
CVE-2025-38024
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024}
CVE-2025-38103
- HID: hyperv: Correctly access fields declared as __le16 {CVE-2025-38103}
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
CVE-2025-38157
- wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
CVE-2025-38230
- jfs: add sanity check for agwidth in dbMount {CVE-2025-38230}
- fs/jfs: consolidate sanity checking in dbMount {CVE-2025-38230}
- jfs: validate AG parameters in dbMount() to prevent crashes {CVE-2025-38230}
CVE-2025-39955
- tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955}
CVE-2025-38680
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
CVE-2025-38708
- drbd: add missing kref_get in handle_write_conflicts {CVE-2025-38708}
CVE-2025-39759
- btrfs: qgroup: introduce quota mode {CVE-2025-39759}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
CVE-2025-38666
- net: appletalk: Fix use-after-free in AARP proxy probe {CVE-2025-38666}
CVE-2025-40269
- ALSA: usb-audio: Improve frames size computation {CVE-2025-40269}
- ALSA: usb-audio: Replace s/frame/packet/ where appropriate {CVE-2025-40269}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
CVE-2025-40149
- net: netdevice: Add operation ndo_sk_get_lower_dev {CVE-2025-40149}
- net/tls: Device offload to use lowest netdevice in chain {CVE-2025-40149}
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149}
CVE-2025-71089
- iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089}
CVE-2026-23234
- f2fs: fix to avoid UAF in f2fs_write_end_io() {CVE-2026-23234}
CVE-2026-23089
- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
CVE-2026-23074
- net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
CVE-2026-23061
- can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061}
CVE-2026-23060
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
CVE-2026-22997
- net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts {CVE-2026-22997}
CVE-2026-22991
- libceph: make free_choose_arg_map() resilient to partial allocation {CVE-2026-22991}
CVE-2026-22990
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990}
CVE-2026-22978
- wifi: avoid kernel-infoleak from struct iw_point {CVE-2026-22978}
CVE-2026-22977
- net: sock: fix hardened usercopy panic in sock_recv_errqueue {CVE-2026-22977}
CVE-2025-71154
- net: usb: rtl8150: fix memory leak on usb_submit_urb() failure {CVE-2025-71154}
CVE-2025-71085
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085}
CVE-2025-68734
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() {CVE-2025-68734}
CVE-2025-68349
- NFSv4/pNFS: Clear…

Record: CLSA-2026-1775224807
Updated: 2026-11-02

OSVCLSA-2026-1782145985 No score

kernel: Fix of 62 CVEs

libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984}
drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}
scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827}
drm/i915/gem: add missing boundary check in vm_access {CVE-2023-28410}
ASoC: SOF: debug: Fix potential buffer overflow by snprintf() {CVE-2022-50051}
tipc: fix use-after-free Read in tipc_named_reinit {CVE-2022-49696}
wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration {CVE-2022-49022}
ethtool: do not perform operations on net devices being unregistered {CVE-2021-47517}
cxgb4: avoid accessing registers when clearing filters {CVE-2021-47138}
bpf: Fix ringbuf helper function compatibility {CVE-2021-34866}
HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}
Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366}
asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101}
kyber: fix out of bounds access when preempted {CVE-2021-46984}
can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
tls: separate no-async decryption request handling from async {CVE-2024-58240}
ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689}
Make filldir64 verify the directory entry filename is valid {CVE-2019-10220}
scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082}
proc/vmcore: fix clearing user buffer by properly using clear_user() {CVE-2021-47566}
nfsd: fix use-after-free due to delegation race {CVE-2021-47506}
drm: bridge/panel: Cleanup connector on bridge detach {CVE-2021-47063}
usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
netfilter: nfnetlink_osf: avoid OOB read {CVE-2023-39189}
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724}
ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170}
wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer {CVE-2021-47226}
kvm: LAPIC: Restore guard to prevent illegal APIC register access {CVE-2021-47255}
tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600}
macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
RDMA/cxgb4: Do not dma memory off of the stack {CVE-2019-17075}
netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) {CVE-2019-7221}
RDMA/umad: Reject negative data_len in…

Record: CLSA-2026-1782145985
Updated: 2026-11-02

OSVCLSA-2026-1783414155 No score

kernel: Fix of 12 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113}
net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037}
ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() {CVE-2026-43038}
blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd {CVE-2021-47379}
can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728}
iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089}
nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
driver core: platform: use generic driver_override infrastructure {CVE-2026-31527}

Record: CLSA-2026-1783414155
Updated: 2026-11-02

OSVCLSA-2026-1784275029 No score

kernel: Fix of 8 CVEs

can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
xfs: resample the data fork mapping after cycling ILOCK
ASoC: topology: Fix route memory corruption
can: bcm: fix locking for bcm_op runtime updates {CVE-2025-38004}
xfrm: Duplicate SPI Handling {CVE-2025-39797}
nfsd: provide locking for v4_end_grace {CVE-2026-22980}
net: phylink: add lock for serializing concurrent pl->phydev writes with resolver {CVE-2025-39905}
tls: separate no-async decryption request handling from async {CVE-2024-58240}
ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892}

Record: CLSA-2026-1784275029
Updated: 2026-11-02

OSVCLSA-2026-1789037015 No score

kernel: Fix of 51 CVEs

net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
usb: free iso schedules on failed submit {CVE-2026-64348}
smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
netfilter: ebtables: zero chainstack array {CVE-2026-64413}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
sctp: validate cookie AUTH state before use {CVE-2026-74752}
drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…

Record: CLSA-2026-1789037015
Updated: 2026-11-02

OSVCLSA-2026-1789039259 No score

kernel: Fix of 51 CVEs

net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
usb: free iso schedules on failed submit {CVE-2026-64348}
smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
netfilter: ebtables: zero chainstack array {CVE-2026-64413}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
sctp: validate cookie AUTH state before use {CVE-2026-74752}
drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…

Record: CLSA-2026-1789039259
Updated: 2026-11-02

OSVCLSA-2026-1789039867 No score

kernel: Fix of 51 CVEs

net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
usb: free iso schedules on failed submit {CVE-2026-64348}
smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
netfilter: ebtables: zero chainstack array {CVE-2026-64413}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
sctp: validate cookie AUTH state before use {CVE-2026-74752}
drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…

Record: CLSA-2026-1789039867
Updated: 2026-11-02

OSVCLSA-2026-1789960079 No score

kernel: Fix of 56 CVEs

usb: free iso schedules on failed submit {CVE-2026-64348}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
USB: iowarrior: fix use-after-free on disconnect {CVE-2026-64342}
can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
dm-log: fix a bitset_size overflow on 32bit machines {CVE-2026-72105}
scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}
ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}
wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() {CVE-2026-68413}
Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-53254}
net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
netfilter: nf_conntrack_sip: don't use simple_strtoul {CVE-2026-52986}
tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198}
netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974}
Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
Bluetooth: SCO: Fix use-after-free in sco_recv_frame() {CVE-2026-31408}
ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
RDMA/srp: bound SRP_RSP sense copy by the received length {CVE-2026-53186}
inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
RDMA/umad: Reject negative data_len in ib_umad_write() {CVE-2026-23243}
can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
netfilter: xt_tcpmss: check remaining length before reading option length {CVE-2026-43190}
netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455}
netfilter: nf_conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}
drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() {CVE-2022-50185}
wifi: libertas: fix use-after-free in lbs_free_adapter() {CVE-2026-23281}
ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit {CVE-2019-15117}
vfs: introduce FMODE_UNSIGNED_OFFSET for allowing negative f_pos {CVE-2019-18675}
infiniband: fix a possible use-after-free bug {CVE-2018-14734}
phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}
Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}
netfilter: require Ethernet MAC header before using eth_hdr()…

Record: CLSA-2026-1789960079
Updated: 2026-11-02

OSVCLSA-2026-1790030905 No score

kernel: Fix of 56 CVEs

usb: free iso schedules on failed submit {CVE-2026-64348}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
USB: iowarrior: fix use-after-free on disconnect {CVE-2026-64342}
can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
dm-log: fix a bitset_size overflow on 32bit machines {CVE-2026-72105}
scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}
ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}
wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() {CVE-2026-68413}
Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-53254}
net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
netfilter: nf_conntrack_sip: don't use simple_strtoul {CVE-2026-52986}
tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198}
netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974}
Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
Bluetooth: SCO: Fix use-after-free in sco_recv_frame() {CVE-2026-31408}
ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
RDMA/srp: bound SRP_RSP sense copy by the received length {CVE-2026-53186}
inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
RDMA/umad: Reject negative data_len in ib_umad_write() {CVE-2026-23243}
can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
netfilter: xt_tcpmss: check remaining length before reading option length {CVE-2026-43190}
netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455}
netfilter: nf_conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}
drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() {CVE-2022-50185}
wifi: libertas: fix use-after-free in lbs_free_adapter() {CVE-2026-23281}
ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit {CVE-2019-15117}
vfs: introduce FMODE_UNSIGNED_OFFSET for allowing negative f_pos {CVE-2019-18675}
infiniband: fix a possible use-after-free bug {CVE-2018-14734}
phonet: pep: fix use-after-free in pep_get_sb() {CVE-2026-68144}
Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}
netfilter: require Ethernet MAC header before using eth_hdr()…

Record: CLSA-2026-1790030905
Updated: 2026-11-02

OSVSUSE-SU-2025:02249-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag…

Record: SUSE-SU-2025:02249-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02254-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37954: smb: client: Avoid…

Record: SUSE-SU-2025:02254-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02307-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37954: smb: client: Avoid race…

Record: SUSE-SU-2025:02307-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02333-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37954: smb: client: Avoid…

Record: SUSE-SU-2025:02333-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02334-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47212: net/mlx5: Update error handler for UCTX and UMEM (bsc#1222709).
CVE-2021-47455: ptp: Fix possible memory leak in ptp_clock_register() (bsc#1225254).
CVE-2021-47527: serial: core: fix transmit-buffer reset and memleak (bsc#1227768).
CVE-2022-21546: scsi: target: Fix WRITE_SAME No Data Buffer crash (bsc#1242243).
CVE-2022-49154: KVM: SVM: fix panic on out-of-bounds guest IRQ (bsc#1238167).
CVE-2022-49622: netfilter: nf_tables: fix crash when nf_trace is enabled (bsc#1239042).
CVE-2022-49731: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() (bsc#1239071).
CVE-2022-49764: kABI: workaround 'bpf: Prevent bpf program recursion for raw tracepoint probes' changes (bsc#1242301).
CVE-2022-49780: scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (bsc#1242262).
CVE-2022-49814: kcm: close race conditions on sk_receive_queue (bsc#1242498).
CVE-2022-49879: ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1242733).
CVE-2022-49881: wifi: cfg80211: fix memory leak in query_regdb_file() (bsc#1242481).
CVE-2022-49917: ipvs: fix WARNING in ip_vs_app_net_cleanup() (bsc#1242406).
CVE-2022-49921: net: sched: Fix use after free in red_enqueue() (bsc#1242359).
CVE-2022-50055: iavf: Fix adminq error handling (bsc#1245039).
CVE-2022-50087: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (bsc#1245119).
CVE-2022-50134: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (bsc#1244802).
CVE-2022-50200: selinux: Add boundary check in put_entry() (bsc#1245149).
CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2023-53020: l2tp: fix lockdep splat (bsc#1240224).
CVE-2023-53090: drm/amdkfd: Fix an illegal memory access (bsc#1242753).
CVE-2023-53091: ext4: update s_journal_inum if it changes after journal replay (bsc#1242767).
CVE-2023-53133: bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() (bsc#1242423).
CVE-2024-26586: mlxsw: spectrum_acl_tcam: Fix stack corruption (bsc#1220243).
CVE-2024-26825: nfc: nci: free rx_data_reassembly skb on NCI device cleanup (bsc#1223065).
CVE-2024-26872: RDMA/srpt: Do not register event handler until srpt device is fully setup (bsc#1223115).
CVE-2024-26875: media: pvrusb2: fix uaf in pvr2_context_set_notify (bsc#1223118).
CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-38588: ftrace: Fix possible use-after-free issue in ftrace_location() (bsc#1226837).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-23149: tpm: do not start chip while suspended (bsc#1242758).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37781: i2c: cros-ec-tunnel: defer probe if parent EC is not present (bsc#1242575).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37810: usb: dwc3: gadget: check that event count does not exceed event buffer length (bsc#1242906).
CVE-2025-37836: PCI: Fix reference…

Record: SUSE-SU-2025:02334-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02335-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access…

Record: SUSE-SU-2025:02335-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02538-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access…

Record: SUSE-SU-2025:02538-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02923-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073).
CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (bsc#1247097).
CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-23163: net:…

Record: SUSE-SU-2025:02923-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20475-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
ACPI: battery: negate current when discharging (stable-fixes).
ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes).
ALSA: usb-audio:…

Record: SUSE-SU-2025:20475-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20483-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
ACPI: battery: negate current when discharging (stable-fixes).
ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes). -…

Record: SUSE-SU-2025:20483-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20493-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
ACPI: battery: negate current when discharging (stable-fixes).
ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes).
ALSA: usb-audio:…

Record: SUSE-SU-2025:20493-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20498-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
ACPI: battery: negate current when discharging (stable-fixes).
ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes). -…

Record: SUSE-SU-2025:20498-1
Updated: 2026-11-02

OSVUSN-7704-1 No score

linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-hwe-5.15, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Cryptographic API;
Arm Firmware Framework for ARMv8-A(FFA);
Multiple devices driver;
Media drivers;
Network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
x86 platform drivers;
TCM subsystem;
Virtio drivers;
File systems infrastructure;
SMB network file system;
LZO compression library;
Digital Audio (PCM) driver;
Tracing infrastructure;
Padata parallel execution mechanism;
CAN network layer;
Networking core;
TIPC protocol;
ALSA framework; (CVE-2025-38079, CVE-2025-38048, CVE-2025-38075, CVE-2025-38077, CVE-2025-38035, CVE-2025-38037, CVE-2025-38034, CVE-2025-38058, CVE-2025-38004, CVE-2025-38031, CVE-2025-38078, CVE-2025-38044, CVE-2025-38066, CVE-2025-38052, CVE-2025-38043, CVE-2025-38065, CVE-2025-38003, CVE-2025-38061, CVE-2025-38051, CVE-2025-38072, CVE-2025-38068)

Record: USN-7704-1
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-debug` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-debug-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-debug-devel` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-debug-devel-matched` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-debug-modules` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-devel-matched` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-modules` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-modules-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-64k-modules-extra` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-abi-stablelists` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-cross-headers` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-debug` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-debug-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-debug-devel` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-debug-devel-matched` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-debug-modules` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-debug-modules-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-debug-modules-extra` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-debug-uki-virt` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-devel` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-devel-matched` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-doc` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-headers` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-modules` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-modules-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-modules-extra` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k-debug` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k-debug-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k-debug-devel` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k-debug-modules` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k-devel` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k-modules` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k-modules-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-64k-modules-extra` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-debug` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-debug-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-debug-devel` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-debug-modules` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel-rt-debug-modules-core` AlmaLinux:9 From an advisory covering 8 CVEs	before 5.14.0-687.45.1.el9_8	5.14.0-687.45.1.el9_8
`kernel` Azure Linux:3	before 6.6.96.1-1	6.6.96.1-1
`linux-lts` Alpaquita:23	6.1.140-r0 up to 6.1.141-r0	6.1.141-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`bpftool` TuxCare:OracleLinux:7 From an advisory covering 194 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2	5.4.17-2136.338.4.2.el7uek.tuxcare.els2
`kernel-uek` TuxCare:OracleLinux:7 From an advisory covering 194 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2	5.4.17-2136.338.4.2.el7uek.tuxcare.els2
`kernel-uek-container` TuxCare:OracleLinux:7 From an advisory covering 194 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2	5.4.17-2136.338.4.2.el7uek.tuxcare.els2
`kernel-uek-container-debug` TuxCare:OracleLinux:7 From an advisory covering 194 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2	5.4.17-2136.338.4.2.el7uek.tuxcare.els2
`kernel-uek-debug` TuxCare:OracleLinux:7 From an advisory covering 194 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2	5.4.17-2136.338.4.2.el7uek.tuxcare.els2
`kernel-uek-debug-devel` TuxCare:OracleLinux:7 From an advisory covering 194 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2	5.4.17-2136.338.4.2.el7uek.tuxcare.els2
`kernel-uek-devel` TuxCare:OracleLinux:7 From an advisory covering 194 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2	5.4.17-2136.338.4.2.el7uek.tuxcare.els2
`kernel-uek-headers` TuxCare:OracleLinux:7 From an advisory covering 194 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2	5.4.17-2136.338.4.2.el7uek.tuxcare.els2
`kernel-uek-tools` TuxCare:OracleLinux:7 From an advisory covering 194 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2	5.4.17-2136.338.4.2.el7uek.tuxcare.els2
`perf` TuxCare:OracleLinux:7 From an advisory covering 194 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2	5.4.17-2136.338.4.2.el7uek.tuxcare.els2
`python-perf` TuxCare:OracleLinux:7 From an advisory covering 194 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2	5.4.17-2136.338.4.2.el7uek.tuxcare.els2
`bpftool` TuxCare:OracleLinux:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel` TuxCare:OracleLinux:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-debug` TuxCare:OracleLinux:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-debug-devel` TuxCare:OracleLinux:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-devel` TuxCare:OracleLinux:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-headers` TuxCare:OracleLinux:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-tools` TuxCare:OracleLinux:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-tools-libs` TuxCare:OracleLinux:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-tools-libs-devel` TuxCare:OracleLinux:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`perf` TuxCare:OracleLinux:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`python-perf` TuxCare:OracleLinux:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`bpftool` TuxCare:RHEL:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel` TuxCare:RHEL:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-debug` TuxCare:RHEL:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-debug-devel` TuxCare:RHEL:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-devel` TuxCare:RHEL:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-headers` TuxCare:RHEL:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-tools` TuxCare:RHEL:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-tools-libs` TuxCare:RHEL:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-tools-libs-devel` TuxCare:RHEL:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`perf` TuxCare:RHEL:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`python-perf` TuxCare:RHEL:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`bpftool` TuxCare:CentOS:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel` TuxCare:CentOS:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-debug` TuxCare:CentOS:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-debug-devel` TuxCare:CentOS:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-devel` TuxCare:CentOS:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-headers` TuxCare:CentOS:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-tools` TuxCare:CentOS:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-tools-libs` TuxCare:CentOS:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel-tools-libs-devel` TuxCare:CentOS:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`perf` TuxCare:CentOS:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`python-perf` TuxCare:CentOS:7 From an advisory covering 16 CVEs	before 3.10.0-1160.139.1.el7.tuxcare.els4	3.10.0-1160.139.1.el7.tuxcare.els4
`kernel` TuxCare:CentOS:6 From an advisory covering 39 CVEs	before 2.6.32-754.35.8.el6.tuxcare.els28	2.6.32-754.35.8.el6.tuxcare.els28
`kernel-abi-whitelists` TuxCare:CentOS:6 From an advisory covering 39 CVEs	before 2.6.32-754.35.8.el6.tuxcare.els28	2.6.32-754.35.8.el6.tuxcare.els28
`kernel-debug` TuxCare:CentOS:6 From an advisory covering 39 CVEs	before 2.6.32-754.35.8.el6.tuxcare.els28	2.6.32-754.35.8.el6.tuxcare.els28
`kernel-debug-devel` TuxCare:CentOS:6 From an advisory covering 39 CVEs	before 2.6.32-754.35.8.el6.tuxcare.els28	2.6.32-754.35.8.el6.tuxcare.els28
`kernel-devel` TuxCare:CentOS:6 From an advisory covering 39 CVEs	before 2.6.32-754.35.8.el6.tuxcare.els28	2.6.32-754.35.8.el6.tuxcare.els28
`kernel-doc` TuxCare:CentOS:6 From an advisory covering 39 CVEs	before 2.6.32-754.35.8.el6.tuxcare.els28	2.6.32-754.35.8.el6.tuxcare.els28
`kernel-firmware` TuxCare:CentOS:6 From an advisory covering 39 CVEs	before 2.6.32-754.35.8.el6.tuxcare.els28	2.6.32-754.35.8.el6.tuxcare.els28
`kernel-headers` TuxCare:CentOS:6 From an advisory covering 39 CVEs	before 2.6.32-754.35.8.el6.tuxcare.els28	2.6.32-754.35.8.el6.tuxcare.els28
`Kernel` Linux	2.6.25 up to 5.4.294, 5.5.0 up to 5.10.238, 5.11.0 up to 5.15.185, 5.16.0 up to 6.1.141, 6.2.0 up to 6.6.93, 6.7.0 up to 6.12.31, 6.13.0 up to 6.14.9	5.4.2945.10.2385.15.1856.1.1416.6.936.12.316.14.9
`linux` Debian:12	before 6.1.147-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 36 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.147-1
`linux` Debian:13	before 6.12.32-1	6.12.32-1
`linux` Debian:14	before 6.12.32-1	6.12.32-1
`linux` Debian:11 From an advisory covering 331 CVEs	before 5.10.244-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 41 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.237-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.244-1
`linux-6.1` Debian:11 From an advisory covering 465 CVEs	before 6.1.153-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1 Show 6 moreShow less 6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u1	6.1.153-1~deb11u1
`linux` Debian:12 From an advisory covering 233 CVEs	before 6.1.147-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 36 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.147-1
`kernel` openEuler:24.03-LTS From an advisory covering 66 CVEs	before 6.6.0-108.0.0.100.oe2403	6.6.0-108.0.0.100.oe2403
`kernel` openEuler:24.03-LTS-SP1 From an advisory covering 69 CVEs	before 6.6.0-108.0.0.111.oe2403sp1	6.6.0-108.0.0.111.oe2403sp1
`kernel` openEuler:24.03-LTS-SP2 From an advisory covering 67 CVEs	before 6.6.0-108.0.0.114.oe2403sp2	6.6.0-108.0.0.114.oe2403sp2
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-debug-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debug-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debug-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-doc` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-rt-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-tools-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`libperf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`perf` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`perf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`python3-perf` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`python3-perf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`rtla` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`rv` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-core` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-debug` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-debug-core` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-debug-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-64k-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-abi-stablelists` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-core` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debug` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debug-core` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debug-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debug-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debug-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel-debug-uki-virt` Red Hat:enterprise_linux:10.2 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel` Rocky Linux:10 From an advisory covering 22 CVEs	before 0:6.12.0-211.52.1.el10_2	0:6.12.0-211.52.1.el10_2
`kernel` Rocky Linux:9 From an advisory covering 8 CVEs	before 0:5.14.0-687.45.1.el9_8	0:5.14.0-687.45.1.el9_8
`linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`rootio-linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.20.6.1	6.4.0-150700.20.6.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.20.6.1	6.4.0-150700.20.6.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.20.6.1	6.4.0-150700.20.6.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1.150700.17.6.1	6.4.0-150700.53.6.1.150700.17.6.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-livepatch-SLE15-SP7_Update_2` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 253 CVEs	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-livepatch-SLE15-SP7-RT_Update_2` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 253 CVEs	before 1-150700.1.5.1	1-150700.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.7.8.1	6.4.0-150700.7.8.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.7.8.1	6.4.0-150700.7.8.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.7.8.1	6.4.0-150700.7.8.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 120 CVEs	before 4.12.14-122.266.1	4.12.14-122.266.1
`kgraft-patch-SLE12-SP5_Update_70` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 120 CVEs	before 1-8.5.1	1-8.5.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 120 CVEs	before 4.12.14-122.266.1	4.12.14-122.266.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 120 CVEs	before 4.12.14-122.266.1	4.12.14-122.266.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 120 CVEs	before 4.12.14-122.266.1	4.12.14-122.266.1
`kernel-default` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 120 CVEs	before 4.12.14-122.266.1	4.12.14-122.266.1
`kernel-source` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 120 CVEs	before 4.12.14-122.266.1	4.12.14-122.266.1
`kernel-syms` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 120 CVEs	before 4.12.14-122.266.1	4.12.14-122.266.1
`kernel-livepatch-SLE15-SP6-RT_Update_13` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 94 CVEs	before 1-150600.1.5.1	1-150600.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5.150600.12.26.4	6.4.0-150600.23.60.5.150600.12.26.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.3	6.4.0-150600.23.60.3
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.3	6.4.0-150600.23.60.3
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`kernel-livepatch-SLE15-SP6_Update_13` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 94 CVEs	before 1-150600.13.6.4	1-150600.13.6.4
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.3	6.4.0-150600.23.60.3
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5.150600.12.26.4	6.4.0-150600.23.60.5.150600.12.26.4
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.3	6.4.0-150600.23.60.3
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.3	6.4.0-150600.23.60.3
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.2	6.4.0-150600.23.60.2
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`linux` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less 3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70	None known
`linux-aws` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	None known
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	None known
`linux` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	None known
`linux-aws` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-kvm` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	None known
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	None known
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	None known
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	None known
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-38004 is a high vulnerability (CVSS 7.3) in Debian Linux, published June 8, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in kernel 6.6.96.1-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 723 package rows, 2,243 versions, 3,025 references and the rest of 25 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 30 source records.