CVE-2024-26831

net/handshake: Fix handshake_req_destroy_test1

5.5 MediumFix available

CVE-2024-26831 is a medium vulnerability (CVSS 5.5) in Linux, published April 17, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 13th percentile. Fixed in linux-lts 6.12.41-r0.

What does this mean?

Severity: 5.5 MediumCVSS 3.1, NVD
Exploit chance: 0.22%EPSS, 13th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 6.12.41-r0linux-lts +167 more

Description

In the Linux kernel, the following vulnerability has been resolved:

net/handshake: Fix handshake_req_destroy_test1

Recently, handshake_req_destroy_test1 started failing:

Expected handshake_req_destroy_test == req, but handshake_req_destroy_test == 0000000000000000 req == 0000000060f99b40 not ok 11 req_destroy works

This is because "sock_release(sock)" was replaced with "fput(filp)" to address a memory leak. Note that sock_release() is synchronous but fput() usually delays the final close and clean-up.

The delay is not consequential in the other cases that were changed but handshake_req_destroy_test1 is testing that handshake_req_cancel() followed by closing the file actually does call the ->hp_destroy method. Thus the PTR_EQ test at the end has to be sure that the final close is complete before it checks the pointer.

We cannot use a completion here because if ->hp_destroy is never called (ie, there is an API bug) then the test will hang.

Reported by: Guenter Roeck linux@roeck-us.net

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.22%Up 0.2 points since Apr 18, 2024

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`Kernel` Linux	6.6.0 up to 6.6.18, 6.7.0 up to 6.7.6	6.6.186.7.6
`linux` Debian:13	before 6.7.7-1	6.7.7-1
`linux` Debian:14	before 6.7.7-1	6.7.7-1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1

Show 158 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.8.43.1	6.4.0-150600.8.43.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.20.6.1	6.4.0-150700.20.6.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.20.6.1	6.4.0-150700.20.6.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.20.6.1	6.4.0-150700.20.6.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1.150700.17.6.1	6.4.0-150700.53.6.1.150700.17.6.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-livepatch-SLE15-SP7_Update_2` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 253 CVEs	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.53.6.1	6.4.0-150700.53.6.1
`kernel-livepatch-SLE15-SP7-RT_Update_2` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 253 CVEs	before 1-150700.1.5.1	1-150700.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.7.8.1	6.4.0-150700.7.8.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.7.8.1	6.4.0-150700.7.8.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 253 CVEs	before 6.4.0-150700.7.8.1	6.4.0-150700.7.8.1
`kernel-livepatch-SLE15-SP6-RT_Update_13` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 94 CVEs	before 1-150600.1.5.1	1-150600.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.10.44.1	6.4.0-150600.10.44.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5.150600.12.26.4	6.4.0-150600.23.60.5.150600.12.26.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.3	6.4.0-150600.23.60.3
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.3	6.4.0-150600.23.60.3
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`kernel-livepatch-SLE15-SP6_Update_13` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 94 CVEs	before 1-150600.13.6.4	1-150600.13.6.4
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.3	6.4.0-150600.23.60.3
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5	6.4.0-150600.23.60.5
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.5.150600.12.26.4	6.4.0-150600.23.60.5.150600.12.26.4
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.3	6.4.0-150600.23.60.3
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.3	6.4.0-150600.23.60.3
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.2	6.4.0-150600.23.60.2
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 94 CVEs	before 6.4.0-150600.23.60.4	6.4.0-150600.23.60.4
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 70 CVEs	before 6.4.0-31.1	6.4.0-31.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 70 CVEs	before 6.4.0-31.1.21.9	6.4.0-31.1.21.9
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 70 CVEs	before 6.4.0-31.1	6.4.0-31.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 70 CVEs	before 6.4.0-31.1	6.4.0-31.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 70 CVEs	before 6.4.0-34.1	6.4.0-34.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 70 CVEs	before 6.4.0-34.1	6.4.0-34.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 70 CVEs	before 6.4.0-31.1	6.4.0-31.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 70 CVEs	before 6.4.0-31.1.21.9	6.4.0-31.1.21.9
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 70 CVEs	before 6.4.0-31.1	6.4.0-31.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 70 CVEs	before 6.4.0-31.1	6.4.0-31.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 70 CVEs	before 6.4.0-34.1	6.4.0-34.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 70 CVEs	before 6.4.0-34.1	6.4.0-34.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	before 6.5.0-1023.23~22.04.1, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 7 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.1	6.5.0-1023.23~22.04.1
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	before 6.5.0-1024.25~22.04.1, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 7 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.1	6.5.0-1024.25~22.04.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	before 6.5.0-1024.26~22.04.1, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 6 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.1	6.5.0-1024.26~22.04.1
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	before 6.5.0-44.44~22.04.1, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 6 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.2	6.5.0-44.44~22.04.1
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	before 6.5.0-44.44.1~22.04.1, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 6 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.1	6.5.0-44.44.1~22.04.1
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-nvidia-6.5` Ubuntu:22.04:LTS	before 6.5.0-1023.24, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 4 moreShow less 6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.23	6.5.0-1023.24
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known
`linux-oem-6.1` Ubuntu:22.04:LTS	All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less 6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36	None known
`linux-oem-6.5` Ubuntu:22.04:LTS	before 6.5.0-1027.28, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 13 moreShow less 6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.26	6.5.0-1027.28
`linux-oracle-6.5` Ubuntu:22.04:LTS	before 6.5.0-1026.26~22.04.1, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 6 moreShow less 6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.1	6.5.0-1026.26~22.04.1
`linux-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1032.35	None known
`linux-riscv` Ubuntu:22.04:LTS	All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less 5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32	None known
`linux-riscv-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1	None known
`linux-riscv-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1 Show 5 moreShow less 6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-starfive-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1	None known
`linux-starfive-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1	None known
`linux-starfive-6.5` Ubuntu:22.04:LTS	before 6.5.0-1017.18~22.04.1, plus listed versions 6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1 Show 4 moreShow less 6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.1	6.5.0-1017.18~22.04.1
`linux-raspi-realtime` Ubuntu:Pro:Realtime:24.04:LTS	before 6.8.0-2002.2, plus listed versions 6.7.0-2001.16.8.0-2001.1	6.8.0-2002.2
`linux-nvidia-6.5` Ubuntu:22.04:LTS From an advisory covering 100 CVEs	before 6.5.0-1023.24, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 4 moreShow less 6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.23	6.5.0-1023.24
`linux-azure-6.5` Ubuntu:22.04:LTS From an advisory covering 100 CVEs	before 6.5.0-1024.25~22.04.1, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 7 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.1	6.5.0-1024.25~22.04.1
`linux-gcp-6.5` Ubuntu:22.04:LTS From an advisory covering 100 CVEs	before 6.5.0-1024.26~22.04.1, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 6 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.1	6.5.0-1024.26~22.04.1
`linux-aws-6.5` Ubuntu:22.04:LTS From an advisory covering 100 CVEs	before 6.5.0-1023.23~22.04.1, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 7 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.1	6.5.0-1023.23~22.04.1
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS From an advisory covering 100 CVEs	before 6.5.0-44.44.1~22.04.1, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 6 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.1	6.5.0-44.44.1~22.04.1
`linux-oracle-6.5` Ubuntu:22.04:LTS From an advisory covering 100 CVEs	before 6.5.0-1026.26~22.04.1, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 6 moreShow less 6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.1	6.5.0-1026.26~22.04.1
`linux-starfive-6.5` Ubuntu:22.04:LTS From an advisory covering 100 CVEs	before 6.5.0-1017.18~22.04.1, plus listed versions 6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1 Show 4 moreShow less 6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.1	6.5.0-1017.18~22.04.1
`linux-oem-6.5` Ubuntu:22.04:LTS From an advisory covering 100 CVEs	before 6.5.0-1027.28, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 13 moreShow less 6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.26	6.5.0-1027.28
`linux-hwe-6.5` Ubuntu:22.04:LTS From an advisory covering 104 CVEs	before 6.5.0-44.44~22.04.1, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 6 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.2	6.5.0-44.44~22.04.1

What each source reports

NVD Score used5.5

In the Linux kernel, the following vulnerability has been resolved:

net/handshake: Fix handshake_req_destroy_test1

Recently, handshake_req_destroy_test1 started failing:

Expected handshake_req_destroy_test == req, but handshake_req_destroy_test == 0000000000000000 req == 0000000060f99b40 not ok 11 req_destroy works

This is because "sock_release(sock)" was replaced with "fput(filp)" to address a memory leak. Note that sock_release() is synchronous but fput() usually delays the final close and clean-up.

We cannot use a completion here because if ->hp_destroy is never called (ie, there is an API bug) then the test will hang.

Reported by: Guenter Roeck linux@roeck-us.net

Record: CVE-2024-26831
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-401
Updated: 2026-11-02

CVE ListNo score

net/handshake: Fix handshake_req_destroy_test1

In the Linux kernel, the following vulnerability has been resolved:

net/handshake: Fix handshake_req_destroy_test1

Recently, handshake_req_destroy_test1 started failing:

Expected handshake_req_destroy_test == req, but handshake_req_destroy_test == 0000000000000000 req == 0000000060f99b40 not ok 11 req_destroy works

This is because "sock_release(sock)" was replaced with "fput(filp)" to address a memory leak. Note that sock_release() is synchronous but fput() usually delays the final close and clean-up.

We cannot use a completion here because if ->hp_destroy is never called (ie, there is an API bug) then the test will hang.

Reported by: Guenter Roeck linux@roeck-us.net

Record: CVE-2024-26831
Updated: 2026-11-02

EUVDEUVD-2024-24093No score

In the Linux kernel, the following vulnerability has been resolved:

net/handshake: Fix handshake_req_destroy_test1

Recently, handshake_req_destroy_test1 started failing:

Expected handshake_req_destroy_test == req, but handshake_req_destroy_test == 0000000000000000 req == 0000000060f99b40 not ok 11 req_destroy works

This is because "sock_release(sock)" was replaced with "fput(filp)" to address a memory leak. Note that sock_release() is synchronous but fput() usually delays the final close and clean-up.

We cannot use a completion here because if ->hp_destroy is never called (ie, there is an API bug) then the test will hang.

Reported by: Guenter Roeck linux@roeck-us.net

Record: EUVD-2024-24093
Updated: 2026-11-02

GitHub AdvisoriesGHSA-mmcw-f5qh-65q35.5

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Fix...

In the Linux kernel, the following vulnerability has been resolved:

net/handshake: Fix handshake_req_destroy_test1

Recently, handshake_req_destroy_test1 started failing:

Expected handshake_req_destroy_test == req, but handshake_req_destroy_test == 0000000000000000 req == 0000000060f99b40 not ok 11 req_destroy works

This is because "sock_release(sock)" was replaced with "fput(filp)" to address a memory leak. Note that sock_release() is synchronous but fput() usually delays the final close and clean-up.

We cannot use a completion here because if ->hp_destroy is never called (ie, there is an API bug) then the test will hang.

Reported by: Guenter Roeck linux@roeck-us.net

Record: GHSA-mmcw-f5qh-65q3
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-401
Updated: 2026-11-02

OSVBELL-CVE-2024-268315.5

Record: BELL-CVE-2024-26831
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-268315.5

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Fix handshake_req_destroy_test1 Recently, handshake_req_destroy_test1 started failing: Expected handshake_req_destroy_test == req, but handshake_req_destroy_test == 0000000000000000 req == 0000000060f99b40 not ok 11 req_destroy works This is because "sock_release(sock)" was replaced with "fput(filp)" to address a memory leak. Note that sock_release() is synchronous but fput() usually delays the final close and clean-up. The delay is not consequential in the other cases that were changed but handshake_req_destroy_test1 is testing that handshake_req_cancel() followed by closing the file actually does call the ->hp_destroy method. Thus the PTR_EQ test at the end has to be sure that the final close is complete before it checks the pointer. We cannot use a completion here because if ->hp_destroy is never called (ie, there is an API bug) then the test will hang. Reported by: Guenter Roeck linux@roeck-us.net

Record: DEBIAN-CVE-2024-26831
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 18 moreShow less

OSVUBUNTU-CVE-2024-268315.5

Record: UBUNTU-CVE-2024-26831
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVNo score

net/handshake: Fix handshake_req_destroy_test1

In the Linux kernel, the following vulnerability has been resolved:

net/handshake: Fix handshake_req_destroy_test1

Recently, handshake_req_destroy_test1 started failing:

Expected handshake_req_destroy_test == req, but handshake_req_destroy_test == 0000000000000000 req == 0000000060f99b40 not ok 11 req_destroy works

This is because "sock_release(sock)" was replaced with "fput(filp)" to address a memory leak. Note that sock_release() is synchronous but fput() usually delays the final close and clean-up.

We cannot use a completion here because if ->hp_destroy is never called (ie, there is an API bug) then the test will hang.

Reported by: Guenter Roeck linux@roeck-us.net

Record: CVE-2024-26831
Updated: 2026-11-02

OSVSUSE-SU-2025:02249-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag…

Record: SUSE-SU-2025:02249-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02254-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37954: smb: client: Avoid…

Record: SUSE-SU-2025:02254-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02307-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37954: smb: client: Avoid race…

Record: SUSE-SU-2025:02307-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02333-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37954: smb: client: Avoid…

Record: SUSE-SU-2025:02333-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02335-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access…

Record: SUSE-SU-2025:02335-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02538-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access…

Record: SUSE-SU-2025:02538-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02923-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073).
CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (bsc#1247097).
CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-23163: net:…

Record: SUSE-SU-2025:02923-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20475-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
ACPI: battery: negate current when discharging (stable-fixes).
ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes).
ALSA: usb-audio:…

Record: SUSE-SU-2025:20475-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20483-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
ACPI: battery: negate current when discharging (stable-fixes).
ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes). -…

Record: SUSE-SU-2025:20483-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20493-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
ACPI: battery: negate current when discharging (stable-fixes).
ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes).
ALSA: usb-audio:…

Record: SUSE-SU-2025:20493-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20498-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
CVE-2025-37938: tracing: Verify event formats that have "%*p.." (bsc#1243544).
CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
CVE-2025-37992: net_sched: Flush gso_skb list too during ->change() (bsc#1243698).
CVE-2025-37995: module: ensure that kobject_put() is safe for module type kobjects (bsc#1243827).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
CVE-2025-38018: net/tls: fix kernel panic when alloc_page failed (bsc#1244999).
CVE-2025-38053: idpf: fix null-ptr-deref in idpf_features_check (bsc#1244746).
CVE-2025-38057: espintcp: fix skb leaks (bsc#1244862).
CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
CVE-2025-38072: libnvdimm/labels: Fix divide error in nd_label_data_init() (bsc#1244743).

The following non-security bugs were fixed:

ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (git-fixes).
ACPI: battery: negate current when discharging (stable-fixes).
ACPI: bus: Bail out if acpi_kobj registration fails (stable-fixes).
ACPICA: Avoid sequence overread in call to strncmp() (stable-fixes).
ACPICA: fix acpi operand cache leak in dswstate.c (stable-fixes).
ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
ACPICA: utilities: Fix overflow check in vsnprintf() (stable-fixes).
ALSA: hda/intel: Add Thinkpad E15 to PM deny list (stable-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (git-fixes).
ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (git-fixes).
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (stable-fixes).
ALSA: usb-audio: Accept multiple protocols in GTBs (stable-fixes). -…

Record: SUSE-SU-2025:20498-1
Updated: 2026-11-02

OSVUSN-6895-1No score

linux, linux-gcp, linux-nvidia-6.5, linux-raspi vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Cryptographic API;
Android drivers;
Block layer subsystem;
Bluetooth drivers;
DMA engine subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
On-Chip Interconnect management framework;
Multiple devices driver;
Media drivers;
Network drivers;
PHY drivers;
MediaTek PM domains;
SCSI drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
AFS file system;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
File systems infrastructure;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Core kernel;
Memory management;
Bluetooth subsystem;
CAN network layer;
Devlink API;
Handshake API;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
RxRPC session sockets;
TIPC protocol;
Unix domain sockets;
Realtek audio codecs; (CVE-2024-26822, CVE-2024-26917, CVE-2024-26723, CVE-2024-26715, CVE-2024-26718, CVE-2024-26664, CVE-2024-26707, CVE-2024-26697, CVE-2024-26720, CVE-2024-26660, CVE-2024-26677, CVE-2024-26736, CVE-2024-26719, CVE-2024-26642, CVE-2024-26700, CVE-2024-26666, CVE-2024-26684, CVE-2024-26803, CVE-2024-26698, CVE-2024-26711, CVE-2024-26922, CVE-2024-26828, CVE-2024-26910, CVE-2024-26829, CVE-2024-26685, CVE-2024-26920, CVE-2024-26696, CVE-2024-26826, CVE-2023-52642, CVE-2024-26703, CVE-2024-26708, CVE-2024-26838, CVE-2024-26716, CVE-2023-52631, CVE-2024-26782, CVE-2024-26593, CVE-2024-26659, CVE-2024-26825, CVE-2024-26824, CVE-2024-26712, CVE-2024-26674, CVE-2024-26722, CVE-2023-52643, CVE-2024-26714, CVE-2024-26691, CVE-2024-27416, CVE-2024-26830, CVE-2023-52880, CVE-2024-26702, CVE-2023-52645, CVE-2024-26820, CVE-2024-26662, CVE-2024-26689, CVE-2024-26676, CVE-2024-26923, CVE-2024-26603, CVE-2024-26818, CVE-2023-52638, CVE-2024-26733, CVE-2024-26601, CVE-2024-26790, CVE-2024-26661, CVE-2024-26600, CVE-2024-26680, CVE-2024-26748, CVE-2024-26792, CVE-2024-26889, CVE-2024-26681, CVE-2024-26688, CVE-2024-26665, CVE-2024-26602, CVE-2024-26734, CVE-2024-35833, CVE-2024-26919, CVE-2024-26916, CVE-2024-26667, CVE-2024-26606, CVE-2024-26693, CVE-2024-26717, CVE-2023-52637, CVE-2024-26831, CVE-2024-26663, CVE-2024-26694,…

Record: USN-6895-1
Updated: 2026-11-02

OSVUSN-6895-2No score

linux-azure-6.5, linux-gcp-6.5 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Cryptographic API;
Android drivers;
Block layer subsystem;
Bluetooth drivers;
DMA engine subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
On-Chip Interconnect management framework;
Multiple devices driver;
Media drivers;
Network drivers;
PHY drivers;
MediaTek PM domains;
SCSI drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
AFS file system;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
File systems infrastructure;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Core kernel;
Memory management;
Bluetooth subsystem;
CAN network layer;
Devlink API;
Handshake API;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
RxRPC session sockets;
TIPC protocol;
Unix domain sockets;
Realtek audio codecs; (CVE-2024-26684, CVE-2024-26889, CVE-2024-26662, CVE-2024-26660, CVE-2024-26708, CVE-2024-26677, CVE-2024-26696, CVE-2024-26664, CVE-2024-26642, CVE-2023-52637, CVE-2024-26680, CVE-2024-26822, CVE-2023-52638, CVE-2024-26830, CVE-2024-26715, CVE-2024-26693, CVE-2024-26697, CVE-2024-26694, CVE-2024-26685, CVE-2023-52642, CVE-2024-26691, CVE-2024-26798, CVE-2024-26828, CVE-2024-26663, CVE-2024-26710, CVE-2024-26601, CVE-2024-26707, CVE-2024-26802, CVE-2024-26675, CVE-2024-26826, CVE-2024-26916, CVE-2024-26803, CVE-2024-26700, CVE-2024-26917, CVE-2024-26600, CVE-2024-26825, CVE-2024-26716, CVE-2024-26602, CVE-2024-26698, CVE-2024-26711, CVE-2024-26920, CVE-2024-26722, CVE-2024-26681, CVE-2024-26674, CVE-2024-26712, CVE-2024-26735, CVE-2024-26782, CVE-2024-26734, CVE-2024-26926, CVE-2024-26923, CVE-2023-52880, CVE-2024-26719, CVE-2024-26593, CVE-2024-26603, CVE-2024-26922, CVE-2024-26717, CVE-2024-26695, CVE-2023-52643, CVE-2024-35833, CVE-2024-26733, CVE-2024-26667, CVE-2024-26659, CVE-2024-26714, CVE-2024-26748, CVE-2024-26702, CVE-2024-26676, CVE-2024-26718, CVE-2024-27416, CVE-2024-26890, CVE-2024-26720, CVE-2024-26838, CVE-2024-26665, CVE-2024-26792, CVE-2024-26818, CVE-2024-26679, CVE-2024-26606, CVE-2024-26736, CVE-2024-26829, CVE-2023-52631, CVE-2024-26790, CVE-2024-26824, CVE-2024-26820, CVE-2024-26831,…

Record: USN-6895-2
Updated: 2026-11-02

OSVUSN-6895-3No score

linux-aws-6.5, linux-lowlatency-hwe-6.5, linux-oracle-6.5, linux-starfive-6.5 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Cryptographic API;
Android drivers;
Block layer subsystem;
Bluetooth drivers;
DMA engine subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
On-Chip Interconnect management framework;
Multiple devices driver;
Media drivers;
Network drivers;
PHY drivers;
MediaTek PM domains;
SCSI drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
AFS file system;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
File systems infrastructure;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Core kernel;
Memory management;
Bluetooth subsystem;
CAN network layer;
Devlink API;
Handshake API;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
RxRPC session sockets;
TIPC protocol;
Unix domain sockets;
Realtek audio codecs; (CVE-2024-26922, CVE-2024-26691, CVE-2024-26698, CVE-2024-26696, CVE-2024-26688, CVE-2024-26734, CVE-2024-26660, CVE-2024-26736, CVE-2024-26600, CVE-2024-26826, CVE-2024-26890, CVE-2023-52643, CVE-2024-26917, CVE-2024-26676, CVE-2024-26916, CVE-2024-26919, CVE-2024-26662, CVE-2024-26714, CVE-2023-52880, CVE-2024-26679, CVE-2024-26711, CVE-2024-26707, CVE-2024-26735, CVE-2023-52631, CVE-2024-26694, CVE-2023-52637, CVE-2024-26830, CVE-2024-26675, CVE-2024-26715, CVE-2024-26642, CVE-2024-26659, CVE-2024-26838, CVE-2024-26926, CVE-2024-26684, CVE-2024-26716, CVE-2024-26825, CVE-2024-26664, CVE-2024-26666, CVE-2024-26820, CVE-2024-26680, CVE-2024-26681, CVE-2024-26829, CVE-2024-26748, CVE-2024-26920, CVE-2024-26593, CVE-2024-26831, CVE-2024-26703, CVE-2024-35833, CVE-2024-26697, CVE-2023-52638, CVE-2024-26665, CVE-2024-26603, CVE-2024-26602, CVE-2024-26824, CVE-2024-26710, CVE-2024-26828, CVE-2024-26790, CVE-2024-26722, CVE-2024-26803, CVE-2024-26798, CVE-2024-27416, CVE-2024-26661, CVE-2024-26677, CVE-2024-26720, CVE-2024-26695, CVE-2024-26726, CVE-2024-26723, CVE-2024-26889, CVE-2024-26702, CVE-2024-26606, CVE-2024-26792, CVE-2024-26733, CVE-2024-26782, CVE-2024-26923, CVE-2023-52645, CVE-2024-26700, CVE-2024-26898, CVE-2024-26822, CVE-2024-26712, CVE-2023-52642, CVE-2024-26601, CVE-2024-26667, CVE-2024-26910,…

Record: USN-6895-3
Updated: 2026-11-02

OSVUSN-6895-4No score

linux-oem-6.5 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Cryptographic API;
Android drivers;
Block layer subsystem;
Bluetooth drivers;
DMA engine subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
On-Chip Interconnect management framework;
Multiple devices driver;
Media drivers;
Network drivers;
PHY drivers;
MediaTek PM domains;
SCSI drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
AFS file system;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
File systems infrastructure;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Core kernel;
Memory management;
Bluetooth subsystem;
CAN network layer;
Devlink API;
Handshake API;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
RxRPC session sockets;
TIPC protocol;
Unix domain sockets;
Realtek audio codecs; (CVE-2023-52638, CVE-2024-26684, CVE-2024-26659, CVE-2024-26708, CVE-2024-26663, CVE-2024-26662, CVE-2024-26789, CVE-2024-26831, CVE-2024-26703, CVE-2023-52643, CVE-2024-26688, CVE-2024-26733, CVE-2024-26818, CVE-2024-26707, CVE-2024-26820, CVE-2024-26719, CVE-2024-26726, CVE-2024-26830, CVE-2024-26694, CVE-2024-26715, CVE-2024-26829, CVE-2024-26697, CVE-2024-26916, CVE-2024-26735, CVE-2024-26717, CVE-2024-26748, CVE-2024-26696, CVE-2024-26710, CVE-2024-26642, CVE-2024-26680, CVE-2024-26675, CVE-2024-26723, CVE-2024-26718, CVE-2024-26666, CVE-2024-26720, CVE-2024-26838, CVE-2024-26824, CVE-2024-26676, CVE-2024-26665, CVE-2024-26693, CVE-2024-26698, CVE-2024-26890, CVE-2024-26601, CVE-2024-26826, CVE-2024-26711, CVE-2024-26602, CVE-2023-52645, CVE-2024-26716, CVE-2024-26660, CVE-2023-52642, CVE-2024-26898, CVE-2024-26803, CVE-2024-26923, CVE-2024-26722, CVE-2024-26677, CVE-2024-26825, CVE-2024-26606, CVE-2024-26790, CVE-2024-26828, CVE-2024-26910, CVE-2024-26681, CVE-2024-26689, CVE-2024-26667, CVE-2024-26798, CVE-2024-26679, CVE-2023-52631, CVE-2024-26926, CVE-2024-26661, CVE-2024-26700, CVE-2023-52637, CVE-2024-26919, CVE-2024-26917, CVE-2024-26712, CVE-2024-26889, CVE-2024-26674, CVE-2024-26792, CVE-2024-35833, CVE-2024-26822, CVE-2024-26734, CVE-2024-26691, CVE-2024-26685, CVE-2024-26782, CVE-2024-26702,…

Record: USN-6895-4
Updated: 2026-11-02

OSVUSN-6900-1No score

linux-hwe-6.5 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Cryptographic API;
Android drivers;
Block layer subsystem;
Bluetooth drivers;
DMA engine subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
On-Chip Interconnect management framework;
Multiple devices driver;
Media drivers;
Network drivers;
PHY drivers;
MediaTek PM domains;
SCSI drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
AFS file system;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
File systems infrastructure;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Core kernel;
Memory management;
Bluetooth subsystem;
CAN network layer;
Devlink API;
Handshake API;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
RxRPC session sockets;
TIPC protocol;
Unix domain sockets;
Realtek audio codecs; (CVE-2024-26666, CVE-2024-26691, CVE-2024-26681, CVE-2024-26715, CVE-2024-26674, CVE-2024-26790, CVE-2024-26677, CVE-2024-26675, CVE-2024-26696, CVE-2024-26925, CVE-2024-26782, CVE-2024-26798, CVE-2024-26702, CVE-2024-35833, CVE-2024-26825, CVE-2024-26680, CVE-2024-26723, CVE-2024-26703, CVE-2024-26822, CVE-2024-26718, CVE-2024-26695, CVE-2024-26693, CVE-2024-26733, CVE-2024-26659, CVE-2023-52643, CVE-2024-26667, CVE-2024-26601, CVE-2024-26923, CVE-2024-26726, CVE-2024-26676, CVE-2024-26924, CVE-2024-26889, CVE-2024-26685, CVE-2024-26720, CVE-2024-26820, CVE-2024-26919, CVE-2024-26642, CVE-2024-26890, CVE-2023-52637, CVE-2024-26602, CVE-2024-26603, CVE-2023-52880, CVE-2024-26606, CVE-2024-26708, CVE-2024-26697, CVE-2024-26643, CVE-2024-26916, CVE-2024-26661, CVE-2024-26707, CVE-2024-26910, CVE-2024-27416, CVE-2024-26716, CVE-2023-52645, CVE-2024-26600, CVE-2023-52642, CVE-2023-52631, CVE-2024-26926, CVE-2024-26593, CVE-2024-26735, CVE-2024-26917, CVE-2024-26698, CVE-2024-26838, CVE-2024-26694, CVE-2024-26664, CVE-2024-26898, CVE-2024-26719, CVE-2024-26802, CVE-2024-26826, CVE-2024-26679, CVE-2024-26824, CVE-2024-26831, CVE-2024-26792, CVE-2024-26700, CVE-2024-26818, CVE-2024-26920, CVE-2024-26829, CVE-2024-26710, CVE-2023-52638, CVE-2024-26714, CVE-2024-26809, CVE-2024-26789, CVE-2024-26689, CVE-2024-26722,…

Record: USN-6900-1
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 1 version, 994 references and the rest of 16 source descriptions. The JSON record has them.