Every CVESearch/Get API key

CVE-2026-46120

ip6_gre: Use cached t->net in ip6erspan_changelink().

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

ip6_gre: Use cached t->net in ip6erspan_changelink().

After commit 5e72ce3e3980 ("net: ipv6: Use link netns in newlink() of rtnl_link_ops"), ip6erspan_newlink() correctly resolves the per-netns ip6gre hash via link_net. ip6erspan_changelink() was not converted in that series and still uses dev_net(dev), which diverges from the device's creation netns after IFLA_NET_NS_FD migration.

This re-inserts the tunnel into the wrong per-netns hash. The original netns keeps a stale entry. When that netns is later destroyed, ip6gre_exit_rtnl_net() walks the stale entry, producing a slab-use-after-free reported by KASAN, followed by a kernel BUG at net/core/dev.c (LIST_POISON1) in unregister_netdevice_many_notify().

Reachable from an unprivileged user namespace (unshare --user --map-root-user --net).

ip6gre_changelink() earlier in the same file already uses the cached t->net; only ip6erspan_changelink() has the wrong shape.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.13%Up 0.1 points since May 28, 2026
90%50%10%1%

What each source reports

CVE List Score used7.8

ip6_gre: Use cached t->net in ip6erspan_changelink().

In the Linux kernel, the following vulnerability has been resolved:

ip6_gre: Use cached t->net in ip6erspan_changelink().

After commit 5e72ce3e3980 ("net: ipv6: Use link netns in newlink() of rtnl_link_ops"), ip6erspan_newlink() correctly resolves the per-netns ip6gre hash via link_net. ip6erspan_changelink() was not converted in that series and still uses dev_net(dev), which diverges from the device's creation netns after IFLA_NET_NS_FD migration.

This re-inserts the tunnel into the wrong per-netns hash. The original netns keeps a stale entry. When that netns is later destroyed, ip6gre_exit_rtnl_net() walks the stale entry, producing a slab-use-after-free reported by KASAN, followed by a kernel BUG at net/core/dev.c (LIST_POISON1) in unregister_netdevice_many_notify().

Reachable from an unprivileged user namespace (unshare --user --map-root-user --net).

ip6gre_changelink() earlier in the same file already uses the cached t->net; only ip6erspan_changelink() has the wrong shape.

Record
CVE-2026-46120
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2026-328797.8

In the Linux kernel, the following vulnerability has been resolved:

ip6_gre: Use cached t->net in ip6erspan_changelink().

After commit 5e72ce3e3980 ("net: ipv6: Use link netns in newlink() of rtnl_link_ops"), ip6erspan_newlink() correctly resolves the per-netns ip6gre hash via link_net. ip6erspan_changelink() was not converted in that series and still uses dev_net(dev), which diverges from the device's creation netns after IFLA_NET_NS_FD migration.

This re-inserts the tunnel into the wrong per-netns hash. The original netns keeps a stale entry. When that netns is later destroyed, ip6gre_exit_rtnl_net() walks the stale entry, producing a slab-use-after-free reported by KASAN, followed by a kernel BUG at net/core/dev.c (LIST_POISON1) in unregister_netdevice_many_notify().

Reachable from an unprivileged user namespace (unshare --user --map-root-user --net).

ip6gre_changelink() earlier in the same file already uses the cached t->net; only ip6erspan_changelink() has the wrong shape.

Record
EUVD-2026-32879
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-92hv-jcvf-rqg67.8

In the Linux kernel, the following vulnerability has been resolved: ip6_gre: Use cached t->net...

In the Linux kernel, the following vulnerability has been resolved:

ip6_gre: Use cached t->net in ip6erspan_changelink().

After commit 5e72ce3e3980 ("net: ipv6: Use link netns in newlink() of rtnl_link_ops"), ip6erspan_newlink() correctly resolves the per-netns ip6gre hash via link_net. ip6erspan_changelink() was not converted in that series and still uses dev_net(dev), which diverges from the device's creation netns after IFLA_NET_NS_FD migration.

This re-inserts the tunnel into the wrong per-netns hash. The original netns keeps a stale entry. When that netns is later destroyed, ip6gre_exit_rtnl_net() walks the stale entry, producing a slab-use-after-free reported by KASAN, followed by a kernel BUG at net/core/dev.c (LIST_POISON1) in unregister_netdevice_many_notify().

Reachable from an unprivileged user namespace (unshare --user --map-root-user --net).

ip6gre_changelink() earlier in the same file already uses the cached t->net; only ip6erspan_changelink() has the wrong shape.

Record
GHSA-92hv-jcvf-rqg6
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD7.8

In the Linux kernel, the following vulnerability has been resolved:

ip6_gre: Use cached t->net in ip6erspan_changelink().

After commit 5e72ce3e3980 ("net: ipv6: Use link netns in newlink() of rtnl_link_ops"), ip6erspan_newlink() correctly resolves the per-netns ip6gre hash via link_net. ip6erspan_changelink() was not converted in that series and still uses dev_net(dev), which diverges from the device's creation netns after IFLA_NET_NS_FD migration.

This re-inserts the tunnel into the wrong per-netns hash. The original netns keeps a stale entry. When that netns is later destroyed, ip6gre_exit_rtnl_net() walks the stale entry, producing a slab-use-after-free reported by KASAN, followed by a kernel BUG at net/core/dev.c (LIST_POISON1) in unregister_netdevice_many_notify().

Reachable from an unprivileged user namespace (unshare --user --map-root-user --net).

ip6gre_changelink() earlier in the same file already uses the cached t->net; only ip6erspan_changelink() has the wrong shape.

Record
CVE-2026-46120
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2026-461207.8
Record
BELL-CVE-2026-46120
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV7.8

ip6_gre: Use cached t->net in ip6erspan_changelink().

In the Linux kernel, the following vulnerability has been resolved:

ip6_gre: Use cached t->net in ip6erspan_changelink().

After commit 5e72ce3e3980 ("net: ipv6: Use link netns in newlink() of rtnl_link_ops"), ip6erspan_newlink() correctly resolves the per-netns ip6gre hash via link_net. ip6erspan_changelink() was not converted in that series and still uses dev_net(dev), which diverges from the device's creation netns after IFLA_NET_NS_FD migration.

This re-inserts the tunnel into the wrong per-netns hash. The original netns keeps a stale entry. When that netns is later destroyed, ip6gre_exit_rtnl_net() walks the stale entry, producing a slab-use-after-free reported by KASAN, followed by a kernel BUG at net/core/dev.c (LIST_POISON1) in unregister_netdevice_many_notify().

Reachable from an unprivileged user namespace (unshare --user --map-root-user --net).

ip6gre_changelink() earlier in the same file already uses the cached t->net; only ip6erspan_changelink() has the wrong shape.

Record
CVE-2026-46120
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-461207.8

In the Linux kernel, the following vulnerability has been resolved: ip6_gre: Use cached t->net in ip6erspan_changelink(). After commit 5e72ce3e3980 ("net: ipv6: Use link netns in newlink() of rtnl_link_ops"), ip6erspan_newlink() correctly resolves the per-netns ip6gre hash via link_net. ip6erspan_changelink() was not converted in that series and still uses dev_net(dev), which diverges from the device's creation netns after IFLA_NET_NS_FD migration. This re-inserts the tunnel into the wrong per-netns hash. The original netns keeps a stale entry. When that netns is later destroyed, ip6gre_exit_rtnl_net() walks the stale entry, producing a slab-use-after-free reported by KASAN, followed by a kernel BUG at net/core/dev.c (LIST_POISON1) in unregister_netdevice_many_notify(). Reachable from an unprivileged user namespace (unshare --user --map-root-user --net). ip6gre_changelink() earlier in the same file already uses the cached t->net; only ip6erspan_changelink() has the wrong shape.

Record
DEBIAN-CVE-2026-46120
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:572528.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:57252
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:572537.1

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:57253
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:572547.1

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:57254
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:618878.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:61887
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:626097.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:62609
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:657108.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:65710
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:772148.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:77214
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:772158.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:77215
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:572527.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)

  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)

  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)

  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)

  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)

  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)

  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)

  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)

  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)

  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)

  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)

  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)

  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)

  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)

  • kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)

  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)

  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)

  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)

  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)

  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)

  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)

  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)

  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)

  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)

  • kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)

  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:Rocky Linux-181065)

  • vhost: reset the vring metadata cache on vring reconfiguration [rhel-9.8.z] (JIRA:Rocky Linux-224549)

  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [rhel-9.8.z] (JIRA:Rocky Linux-235811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57252
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:572537.1

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)

  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)

  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)

  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)

  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)

  • kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)

  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)

  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)

  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after Rocky Linux 8.10 kernel update (JIRA:Rocky Linux-219767)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57253
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:572547.1

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)

  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)

  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)

  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)

  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)

  • kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)

  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)

  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)

  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after Rocky Linux 8.10 kernel update (JIRA:Rocky Linux-219767)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:57254
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:618878.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: seccomp: passthrough uretprobe systemcall without filtering (CVE-2025-21834)

  • kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003)

  • kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks (CVE-2026-43454)

  • kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)

  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)

  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)

  • kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053)

  • kernel: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CVE-2026-53026)

  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)

  • kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)

  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)

  • kernel: mm/list_lru: drain before clearing xarray entry on reparent (CVE-2026-53153)

  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)

  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)

  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)

  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)

  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)

  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)

  • kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)

  • kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)

  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)

  • kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438)

  • kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304)

  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)

  • kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)

  • kernel: mm: shrinker: fix shrinker_info teardown race with expansion (CVE-2026-64418)

  • kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)

  • kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)

  • kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)

  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)

  • kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086)

  • kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166)

  • kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069)

  • kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)

Bug Fix(es) and Enhancement(s):

  • Rocky Linux 10: s390: Revert support for DCACHE_WORD_ACCESS [rhel-10.2.z] (JIRA:Rocky Linux-188180)

  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [rhel-10.2.z] (JIRA:Rocky Linux-193043)

  • ss core dumped when there is an SCTP session [rhel-10.2.z] (JIRA:Rocky Linux-212393)

  • [Rocky Linux-10.2.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:Rocky Linux-218627)

  • Rocky Linux10.0 - s390/pfault: Fix virtual vs physical address confusion [rhel-10.2.z] (JIRA:Rocky Linux-222507)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:61887
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-461207.0

CVE-2026-46120 in linux - Patched by Root

Root has patched CVE-2026-46120 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-46120
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-461207.0

CVE-2026-46120 in linux - Patched by Root

Root has patched CVE-2026-46120 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-46120
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-461207.0

CVE-2026-46120 in linux - Patched by Root

Root has patched CVE-2026-46120 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-46120
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-461207.0

CVE-2026-46120 in linux - Patched by Root

Root has patched CVE-2026-46120 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-46120
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2026-461208.5

In the Linux kernel, the following vulnerability has been resolved: ip6_gre: Use cached t->net in ip6erspan_changelink(). After commit 5e72ce3e3980 ("net: ipv6: Use link netns in newlink() of rtnl_link_ops"), ip6erspan_newlink() correctly resolves the per-netns ip6gre hash via link_net. ip6erspan_changelink() was not converted in that series and still uses dev_net(dev), which diverges from the device's creation netns after IFLA_NET_NS_FD migration. This re-inserts the tunnel into the wrong per-netns hash. The original netns keeps a stale entry. When that netns is later destroyed, ip6gre_exit_rtnl_net() walks the stale entry, producing a slab-use-after-free reported by KASAN, followed by a kernel BUG at net/core/dev.c (LIST_POISON1) in unregister_netdevice_many_notify(). Reachable from an unprivileged user namespace (unshare --user --map-root-user --net). ip6gre_changelink() earlier in the same file already uses the cached t->net; only ip6erspan_changelink() has the wrong shape.

Record
UBUNTU-CVE-2026-46120
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-12
OSVALSA-2026:57252No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CVE-2026-43233)
  • kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CVE-2026-43206)
  • kernel: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CVE-2026-43237)
  • kernel: udf: fix partition descriptor append bookkeeping (CVE-2026-45991)
  • kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CVE-2026-45878)
  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CVE-2026-53143)
  • kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CVE-2026-53136)
  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  • kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CVE-2026-53329)
  • kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset (CVE-2026-53356)
  • kernel: drm/amdgpu: zero-initialize GART table on allocation (CVE-2026-53374)
  • kernel: drm/i915: Fix potential UAF in TTM object purge (CVE-2026-63884)
  • kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)
  • kernel: memfd: deny writeable mappings when implying SEAL_WRITE (CVE-2026-63952)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages (CVE-2026-63879)
  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
  • kernel: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CVE-2026-64219)
  • kernel: smb: client: fix double-free in SMB2_open() replay (CVE-2026-64382)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb: client: fix query_info() replay double-free (CVE-2026-64386)
  • kernel: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (CVE-2026-64560)
  • kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • kernel 5.14.0-687.5.1.el9_8 breaks wifi when using FIPS (JIRA:AlmaLinux-181065)
  • vhost: reset the vring metadata cache on vring reconfiguration [almalinux-9.8.z] (JIRA:AlmaLinux-224549)
  • cifs: smb1 directory listings from xp server returning EINVAL and EIO [almalinux-9.8.z] (JIRA:AlmaLinux-235811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57252
Updated
2026-11-02
OSVALSA-2026:57253No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)
  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after AlmaLinux 8.10 kernel update (JIRA:AlmaLinux-219767)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57253
Updated
2026-11-02
OSVALSA-2026:57254No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (CVE-2024-56602)
  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
  • kernel: sched/psi: fix race between file release and pressure write (CVE-2026-52991)
  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  • kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
  • kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
  • kernel: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CVE-2026-64048)
  • kernel: smb: client: mask server-provided mode to 07777 in modefromsid (CVE-2026-64379)
  • kernel: smb/client: handle overlapping allocated ranges in fallocate (CVE-2026-68388)

Bug Fix(es) and Enhancement(s):

  • sfc: TX queue stalls and NIC resets caused by GFP_ATOMIC allocation failures after AlmaLinux 8.10 kernel update (JIRA:AlmaLinux-219767)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:57254
Updated
2026-11-02
OSVALSA-2026:61887No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: seccomp: passthrough uretprobe systemcall without filtering (CVE-2025-21834)
  • kernel: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CVE-2026-23003)
  • kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks (CVE-2026-43454)
  • kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)
  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
  • kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
  • kernel: iommu/amd: Fix clone_alias() to use the original device's devid (CVE-2026-53053)
  • kernel: NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CVE-2026-53026)
  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)
  • kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)
  • kernel: mm/huge_memory: update file PMD counter before folio_put() (CVE-2026-53189)
  • kernel: mm/list_lru: drain before clearing xarray entry on reparent (CVE-2026-53153)
  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)
  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)
  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)
  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)
  • kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CVE-2026-64136)
  • kernel: netfilter: ipset: fix race between dump and ip_set_list resize (CVE-2026-64189)
  • kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CVE-2026-64320)
  • kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (CVE-2026-64438)
  • kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304)
  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)
  • kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)
  • kernel: mm: shrinker: fix shrinker_info teardown race with expansion (CVE-2026-64418)
  • kernel: smb: client: fix change notify replay double-free (CVE-2026-64384)
  • kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CVE-2026-64277)
  • kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CVE-2026-64276)
  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
  • kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086)
  • kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation (CVE-2026-68166)
  • kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CVE-2026-72069)
  • kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CVE-2026-72130)
  • kernel: ceph: give up on paths longer than PATH_MAX (CVE-2024-53685)
  • kernel: ceph: fix memory leaks in ceph_mdsc_build_path() (CVE-2026-43419)
  • kernel: ceph: add a bunch of missing ceph_path_info initializers (CVE-2026-43408)

Bug Fix(es) and Enhancement(s):

  • AlmaLinux 10: s390: Revert support for DCACHE_WORD_ACCESS [almalinux-10.2.z] (JIRA:AlmaLinux-188180)
  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-10.2.z] (JIRA:AlmaLinux-193043)
  • ss core dumped when there is an SCTP session [almalinux-10.2.z] (JIRA:AlmaLinux-212393)
  • [AlmaLinux-10.2.z] Intel CWF: CPU is unable to obtain cstate1 on idle system (JIRA:AlmaLinux-218627)
  • AlmaLinux10.0 - s390/pfault: Fix virtual vs physical address confusion [almalinux-10.2.z] (JIRA:AlmaLinux-222507)

For more details about the security…

Record
ALSA-2026:61887
Updated
2026-11-02
OSVAZL-88887No score

CVE-2026-46120 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved:

ip6_gre: Use cached t->net in ip6erspan_changelink().

After commit 5e72ce3e3980 ("net: ipv6: Use link netns in newlink() of rtnl_link_ops"), ip6erspan_newlink() correctly resolves the per-netns ip6gre hash via link_net. ip6erspan_changelink() was not converted in that series and still uses dev_net(dev), which diverges from the device's creation netns after IFLA_NET_NS_FD migration.

This re-inserts the tunnel into the wrong per-netns hash. The original netns keeps a stale entry. When that netns is later destroyed, ip6gre_exit_rtnl_net() walks the stale entry, producing a slab-use-after-free reported by KASAN, followed by a kernel BUG at net/core/dev.c (LIST_POISON1) in unregister_netdevice_many_notify().

Reachable from an unprivileged user namespace (unshare --user --map-root-user --net).

ip6gre_changelink() earlier in the same file already uses the cached t->net; only ip6erspan_changelink() has the wrong shape.

Record
AZL-88887
Updated
2026-11-02
OSVCLSA-2026-1789460387No score

Fix of 134 CVEs

  • CVE-2026-72463
    • xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
  • CVE-2026-64600
    • xfs: resample the data fork mapping after cycling ILOCK {CVE-2026-64600}
  • CVE-2026-46175
    • f2fs: fix fsck inconsistency caused by FGGC of node block {CVE-2026-46175}
  • CVE-2025-68254
    • staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing {CVE-2025-68254}
  • CVE-2025-68255
    • staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing {CVE-2025-68255}
  • CVE-2026-64268
    • RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
  • CVE-2025-68286
    • drm/amd/display: Check NULL before accessing {CVE-2025-68286}
  • CVE-2026-53024
    • greybus: raw: fix use-after-free if write is called after disconnect {CVE-2026-53024}
  • CVE-2026-53025
    • greybus: raw: fix use-after-free on cdev close {CVE-2026-53025}
  • CVE-2026-52934
    • batman-adv: tvlv: reject oversized TVLV packets {CVE-2026-52934}
  • CVE-2025-68303
    • platform/x86: intel: punit_ipc: fix memory corruption {CVE-2025-68303}
  • CVE-2026-64280
    • fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() {CVE-2026-64280}
  • CVE-2026-64188
    • net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() {CVE-2026-64188}
  • CVE-2026-64109
    • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • CVE-2026-64274
    • Input: goodix - clamp the device-reported contact count {CVE-2026-64274}
  • CVE-2026-64270
    • Input: mms114 - reject an oversized device packet size {CVE-2026-64270}
  • CVE-2026-64093
    • batman-adv: tp_meter: directly shut down timer on cleanup {CVE-2026-64093}
  • CVE-2026-64091
    • batman-adv: tt: fix TOCTOU race for reported vlans {CVE-2026-64091}
  • CVE-2026-53329
    • drm/amd/display: Use krealloc_array() in dal_vector_reserve() {CVE-2026-53329}
  • CVE-2026-64298
    • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • CVE-2026-64276
    • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • CVE-2026-64273
    • Input: iforce - bound the device-reported force-feedback effect index {CVE-2026-64273}
  • CVE-2026-64271
    • Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
  • CVE-2026-64266
    • fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
  • CVE-2026-64191
    • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • CVE-2026-64189
    • netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
  • CVE-2026-31786
    • Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786}
  • CVE-2025-68799
    • caif: fix integer underflow in cffrml_receive() {CVE-2025-68799}
  • CVE-2025-68302
    • net: sxgbe: fix potential NULL dereference in sxgbe_rx() {CVE-2025-68302}
  • CVE-2025-40243
    • hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() {CVE-2025-40243}
  • CVE-2025-40233
    • ocfs2: clear extent cache after moving/defragmenting extents {CVE-2025-40233}
  • CVE-2026-23269
    • apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
  • CVE-2026-43249
    • 9p/xen: protect xen_9pfs_front_free against concurrent calls {CVE-2026-43249}
  • CVE-2026-31657
    • batman-adv: hold claim backbone gateways by reference {CVE-2026-31657}
  • CVE-2026-31598
    • ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
  • CVE-2026-31768
    • iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() {CVE-2026-31768}
  • CVE-2026-23216
    • scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} *…
Record
CLSA-2026-1789460387
Updated
2026-11-02
OSVCLSA-2026-1792750763No score

kernel: Fix of 91 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • smb: client: harden POSIX SID length parsing {CVE-2026-64380}
  • RDMA: Fix use-after-free in rxe_queue_cleanup {CVE-2021-47616}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
  • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
  • tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}
  • xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}
  • xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}
  • net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • thunderbolt: Bound root directory content to block size {CVE-2026-53149}
  • SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
  • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • ipv6: fix possible UAF in icmpv6_rcv() {CVE-2026-53006}
  • ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() {CVE-2026-64002}
  • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • mrp: introduce active flags to prevent UAF when applicant uninit {CVE-2022-50697}
  • HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
  • net/sched: defer qdisc freeing after failed creation {CVE-2026-98017}
  • Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp {CVE-2026-53071}
  • Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails {CVE-2026-53071}
  • scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation {CVE-2026-89856}
  • drm: fix race between partial drm_dev_register() failure and ioctl {CVE-2026-89823}
  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059} -…
Record
CLSA-2026-1792750763
Updated
2026-11-02
OSVCLSA-2026-1792751700No score

kernel: Fix of 106 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
  • net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
  • SUNRPC: Fix a server shutdown leak {CVE-2023-53131}
  • libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509}
  • nvdimm/btt: reject an arena whose nfree is below the lane count {CVE-2026-89965}
  • libnvdimm/labels: Prevent integer overflow in __nd_label_validate() {CVE-2026-89559}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • wifi: mwifiex: validate scan response extents {CVE-2026-98185}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
  • qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info {CVE-2023-53066}
  • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count {CVE-2026-64277}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
  • netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state {CVE-2026-93288}
  • mpls: add seqcount to protect the platform_label{,s} pair {CVE-2026-43042}
  • Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp {CVE-2026-74540}
  • usb: dwc2: Fix use after free in debug code {CVE-2026-63927}
  • KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path {CVE-2026-63794}
  • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • x86/mm/ident_map: Use gbpages only where full GB page should be mapped. {CVE-2024-50017}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
  • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • RDMA/ucma: Lock the handler in ucma_set_ib_path() {CVE-2026-89508}
  • RDMA/srpt: fix integer overflow in immediate data length check {CVE-2026-74394}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}
  • veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
  • net: hns3: fix kernel crash when 1588 is received on HIP08 devices {CVE-2024-26881}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • net: mana: validate rx_req_idx to prevent out-of-bounds array access {CVE-2026-64018}
  • net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
  • net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() {CVE-2026-64351}
  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() {CVE-2026-63993}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
  • scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
  • fs/mbcache: cancel…
Record
CLSA-2026-1792751700
Updated
2026-11-02
OSVCLSA-2026-1792759740No score

kernel: Fix of 134 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF {CVE-2026-98116}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • dm cache policy smq: check allocation under invalidate lock {CVE-2026-53265}
  • RDMA/siw: Bound fragmented header copies by the remaining length {CVE-2026-98323}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
  • RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path {CVE-2026-46189}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • net: qrtr: ns: Fix use-after-free in driver remove() {CVE-2026-46047}
  • RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv {CVE-2026-46043}
  • gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
  • gfs2: Add metapath_dibh helper {CVE-2026-45984}
  • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • gfs2: Fix slab-use-after-free in qd_put {CVE-2026-45861}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task {CVE-2026-46180}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • sctp: purge outqueue on stale COOKIE-ECHO handling {CVE-2026-52924}
  • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • netfilter: nf_queue: hold bridge skb->dev while queued {CVE-2026-52912}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • net/sched: act_api: use RCU with deferred freeing for action lifecycle {CVE-2026-53264}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • wifi: nl80211: reject oversized EMA RNR lists {CVE-2026-53182}
  • netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
  • bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
  • ppp: require CAP_NET_ADMIN in target…
Record
CLSA-2026-1792759740
Updated
2026-11-02
OSVCLSA-2026-1792762308No score

kernel: Fix of 128 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
  • ALSA: caiaq: Fix potential double-free at error path {CVE-2026-98066}
  • ASoC: Intel: avs: Disable periods-elapsed work when closing PCM {CVE-2025-40344}
  • ALSA: timer: drain a slave's callback before its master detaches it {CVE-2026-68201}
  • ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams {CVE-2026-53242}
  • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • security/keys: fix missed RCU read section on lookup {CVE-2026-64015}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • mm/hugetlb: fix list corruption in allocate_file_region_entries() {CVE-2026-74518}
  • rcu: Fix rcu_read_unlock() deadloop due to softirq {CVE-2026-45957}
  • bpf: Fix potential UAF in bpf_netns_link_update_prog {CVE-2026-90393}
  • bpf: Fix use-after-free in offloaded map/prog info fill {CVE-2026-53089}
  • NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
  • uio: Fix stale info pointer in failed registration path {CVE-2026-93054}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
  • scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
  • scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue {CVE-2025-37861}
  • scsi: csiostor: Fix dereference of null pointer rn {CVE-2026-45857}
  • scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • wifi: mwifiex: validate scan response extents {CVE-2026-98185}
  • wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
  • wifi: iwlwifi: mvm: add a check on the tid coming from the firmware {CVE-2026-93791}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
  • net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
  • net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
  • net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list {CVE-2026-53230}
  • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
  • RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}
  • RDMA/iwcm: Fix workqueue list corruption by removing work_list {CVE-2026-45898}
  • ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control {CVE-2026-72261}
  • svcrdma: Fix offset arithmetic in read_chunk_range {CVE-2026-89533}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • xprtrdma: Fix ep kref imbalance on ADDR_CHANGE {CVE-2026-72469}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • sctp: drop a chunk if its transport was removed {CVE-2026-89478}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • sctp: revalidate list cursor after…
Record
CLSA-2026-1792762308
Updated
2026-11-02
OSVopenSUSE-SU-2026:10954-1No score

kernel-devel-7.0.11-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10954-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21388-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
openSUSE-SU-2026:21388-1
Updated
2026-11-02
OSVSUSE-SU-2026:22433-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock…
Record
SUSE-SU-2026:22433-1
Updated
2026-11-02
OSVSUSE-SU-2026:22436-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
  • CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
  • CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43023: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43035: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996).
  • CVE-2026-43036: net: use skb_header_pointer() for TCPv4 GSO frag_off check (bsc#1263993).
  • CVE-2026-43049: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure (bsc#1264080).
  • CVE-2026-43053: xfs: close crash window in attr dabtree inactivation (bsc#1264084).
  • CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470).
  • CVE-2026-43083: net: ioam6: fix OOB and missing lock (bsc#1264266).
  • CVE-2026-43101: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (bsc#1264239).
  • CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).
  • CVE-2026-43119: Bluetooth: hci_sync: annotate data-races around hdev->req_status (bsc#1264561).
  • CVE-2026-43158: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595).
  • CVE-2026-43171: EFI/CPER: do not dump the entire memory region (bsc#1264549).
  • CVE-2026-43187: xfs: delete attr leaf freemap entries when empty (bsc#1264603).
  • CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610).
  • CVE-2026-43239:…
Record
SUSE-SU-2026:22436-1
Updated
2026-11-02
OSVSUSE-SU-2026:22458-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).
  • CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-23303: smb: client: Don't log plaintext credentials in cifs_set_cifscreds (bsc#1260502).
  • CVE-2026-23327: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
  • CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584).
  • CVE-2026-23438: net: mvpp2: guard flow control update with global_tx_fc in buffer switching (bsc#1261619).
  • CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307).
  • CVE-2026-31396: net: macb: fix use-after-free access to PTP clock (bsc#1261791).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31446: ext4: fix use-after-free in update_super_work when racing with umount (bsc#1262619).
  • CVE-2026-31448: ext4: avoid infinite loops caused by residual data (bsc#1262622).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31454: xfs: save ailp before dropping the AIL lock in push callbacks (bsc#1262624).
  • CVE-2026-31455: xfs: stop reclaim before pushing AIL during unmount (bsc#1262615).
  • CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31473: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (bsc#1262663).
  • CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755).
  • CVE-2026-31518: esp: fix skb leak with espintcp and async crypto (bsc#1262606).
  • CVE-2026-31546: net: bonding: fix NULL deref in bond_debug_rlb_hash_show (bsc#1263006).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31590: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (bsc#1263152).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769).
  • CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790).
  • CVE-2026-31655: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled (bsc#1263724).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31671: xfrm_user: fix info leak in build_report() (bsc#1263115).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock…
Record
SUSE-SU-2026:22458-1
Updated
2026-11-02
OSVSUSE-SU-2026:22460-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290).
  • CVE-2025-68822: Input: alps - fix use-after-free bugs caused by dev3_register_work (bsc#1256668).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31592: KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock (bsc#1263123).
  • CVE-2026-31664: string.h: Introduce memset_after() for wiping trailing members/padding (bsc#1263578).
  • CVE-2026-31665: kABI: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116).
  • CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880).
  • CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43023: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43035: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996).
  • CVE-2026-43036: net: use skb_header_pointer() for TCPv4 GSO frag_off check (bsc#1263993).
  • CVE-2026-43049: HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure (bsc#1264080).
  • CVE-2026-43053: xfs: close crash window in attr dabtree inactivation (bsc#1264084).
  • CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470).
  • CVE-2026-43083: net: ioam6: fix OOB and missing lock (bsc#1264266).
  • CVE-2026-43101: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() (bsc#1264239).
  • CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).
  • CVE-2026-43119: Bluetooth: hci_sync: annotate data-races around hdev->req_status (bsc#1264561).
  • CVE-2026-43158: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595).
  • CVE-2026-43171: EFI/CPER: do not dump the entire memory region (bsc#1264549).
  • CVE-2026-43187: xfs: delete attr leaf freemap entries when empty (bsc#1264603).
  • CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610).
  • CVE-2026-43239:…
Record
SUSE-SU-2026:22460-1
Updated
2026-11-02
OSVSUSE-SU-2026:22598-1No score

Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22598-1
Updated
2026-11-02
OSVSUSE-SU-2026:22672-1No score

Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22672-1
Updated
2026-11-02
OSVSUSE-SU-2026:22673-1No score

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22673-1
Updated
2026-11-02
OSVSUSE-SU-2026:22674-1No score

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22674-1
Updated
2026-11-02
OSVSUSE-SU-2026:22675-1No score

Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22675-1
Updated
2026-11-02
OSVSUSE-SU-2026:22676-1No score

Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22676-1
Updated
2026-11-02
OSVSUSE-SU-2026:22677-1No score

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22677-1
Updated
2026-11-02
OSVSUSE-SU-2026:22678-1No score

Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22678-1
Updated
2026-11-02
OSVSUSE-SU-2026:22679-1No score

Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22679-1
Updated
2026-11-02
OSVSUSE-SU-2026:22680-1No score

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-30.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22680-1
Updated
2026-11-02
OSVSUSE-SU-2026:22681-1No score

Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22681-1
Updated
2026-11-02
OSVSUSE-SU-2026:22682-1No score

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues

The following security issues were fixed:

  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615).
  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22682-1
Updated
2026-11-02
OSVSUSE-SU-2026:22683-1No score

Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31570: can: gw: fix OOB heap access in cgw_csum_crc8_rel() (bsc#1263118).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43437: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265127).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22683-1
Updated
2026-11-02
OSVSUSE-SU-2026:22684-1No score

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues

The following security issues were fixed:

  • CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524).
  • CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094).
  • CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262759).
  • CVE-2026-31586: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (bsc#1263177).
  • CVE-2026-31685: netfilter: ip6t_eui64: reject invalid MAC header for all packets (bsc#1263670).
  • CVE-2026-43025: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1264253).
  • CVE-2026-43027: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1264252).
  • CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197).
  • CVE-2026-43120: RDMA/irdma: Fix double free related to rereg_user_mr (bsc#1264567).
  • CVE-2026-43190: netfilter: xt_tcpmss: check remaining length before reading optlen (bsc#1264849).
  • CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117).
  • CVE-2026-43494: RDS zerocopy attack aka PinTheft (bsc#1265945).
  • CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015).
  • CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).
  • CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
  • CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
  • CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
  • CVE-2026-46243: smb: client: reject userspace cifs.spnego descriptions (CIFSwitch) (bsc#1266265).
  • CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
  • CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
  • CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
Record
SUSE-SU-2026:22684-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-modules
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-cross-headers
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-devel
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-modules
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-devel
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-devel-matched
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-doc
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-headers
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-modules
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel-rt-devel
AlmaLinux:9
From an advisory covering 27 CVEs
before 5.14.0-687.41.1.el9_8
5.14.0-687.41.1.el9_8
kernel
Azure Linux:3
before 6.6.141.1-1
6.6.141.1-1
linux-lts
Alpaquita:23
6.1.174-r0 up to 6.1.175-r0
6.1.175-r0
linux-lts
Alpaquita:25
6.12.87-r0 up to 6.12.92-r0
6.12.92-r0
linux-lts
Alpaquita:stream
6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
linux-buildinfo-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-buildinfo-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-cloud-tools-5.4.0-237
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-cloud-tools-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-cloud-tools-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-headers-5.4.0-237
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-headers-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-headers-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-image-unsigned-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-image-unsigned-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-modules-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-modules-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-modules-extra-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-tools-5.4.0-237
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-tools-5.4.0-237-generic
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-tools-5.4.0-237-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
linux-tools-host
TuxCare:Ubuntu:20.04
From an advisory covering 134 CVEs
before 5.4.0-237.257+tuxcare.els1
5.4.0-237.257+tuxcare.els1
bpftool
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-core
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-cross-headers
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-debug
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-debug-core
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-debug-devel
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-debug-modules
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-debug-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-debug-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-devel
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-headers
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-ipaclones-internal
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-modules
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-selftests-internal
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-tools
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-tools-libs
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
kernel-tools-libs-devel
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
perf
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
python3-perf
TuxCare:CentOS:8.5
From an advisory covering 91 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els50
4.18.0-348.7.1.el8_5.tuxcare.els50
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
before 7.0.0-284.1101.el9_2.tuxcare.11.els17
7.0.0-284.1101.el9_2.tuxcare.11.els17
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 107 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els17
5.14.0-284.1101.el9_2.tuxcare.11.els17
Kernel
Linux
4.17.0 up to 5.10.258, 5.11.0 up to 5.15.209, 5.16.0 up to 6.1.175, 6.2.0 up to 6.6.140, 6.7.0 up to 6.12.88, 6.13.0 up to 6.18.30, 6.19.0 up to 7.0.7
5.10.2585.15.2096.1.1756.6.1406.12.886.18.307.0.7
linux
Debian:12
before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
before 6.12.88-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 16 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-1~bpo12+1
6.12.88-1
linux
Debian:14
before 7.0.7-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.0.7-1
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
python3-perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 27 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel
Rocky Linux:9
From an advisory covering 26 CVEs
before 0:5.14.0-687.41.1.el9_8
0:5.14.0-687.41.1.el9_8
kernel
Rocky Linux:8
From an advisory covering 9 CVEs
before 0:4.18.0-553.157.1.el8_10
0:4.18.0-553.157.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 9 CVEs
before 0:4.18.0-553.157.1.rt7.498.el8_10
0:4.18.0-553.157.1.rt7.498.el8_10
kernel
Rocky Linux:10
From an advisory covering 34 CVEs
before 0:6.12.0-211.50.1.el10_2
0:6.12.0-211.50.1.el10_2
linux
Root:Debian:11
before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 169 CVEs
before 6.4.0-48.1
6.4.0-48.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 169 CVEs
before 6.4.0-48.1
6.4.0-48.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
before 6.4.0-48.1
6.4.0-48.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
before 6.4.0-48.1.21.25
6.4.0-48.1.21.25
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
before 6.4.0-48.1
6.4.0-48.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 71 CVEs
before 6.4.0-48.1
6.4.0-48.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 169 CVEs
before 6.4.0-48.1
6.4.0-48.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 169 CVEs
before 6.4.0-48.1
6.4.0-48.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
before 6.4.0-48.1
6.4.0-48.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
before 6.4.0-48.1.21.25
6.4.0-48.1.21.25
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
before 6.4.0-48.1
6.4.0-48.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 71 CVEs
before 6.4.0-48.1
6.4.0-48.1
kernel-livepatch-SLE16-RT_Update_9
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
before 4-160000.1.1
4-160000.1.1
kernel-livepatch-MICRO-6-0_Update_24
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0_Update_10
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
before 14-1.1
14-1.1
kernel-livepatch-MICRO-6-0_Update_11
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_12
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
before 11-1.1
11-1.1
kernel-livepatch-MICRO-6-0_Update_16
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_23
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_8
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
before 20-1.2
20-1.2
kernel-livepatch-MICRO-6-0_Update_9
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
before 20-1.2
20-1.2
kernel-livepatch-MICRO-6-0_Update_14
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
before 9-1.2
9-1.2
kernel-livepatch-MICRO-6-0_Update_17
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_13
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_15
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0-RT_Update_18
SUSE:Linux Micro 6.1
From an advisory covering 24 CVEs
before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0-RT_Update_19
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0-RT_Update_20
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0-RT_Update_21
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_22
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
before 3-1.2
3-1.2
kernel-livepatch-MICRO-6-0-RT_Update_14
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_23
SUSE:Linux Micro 6.1
From an advisory covering 21 CVEs
before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_24
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0_Update_24
SUSE:Linux Micro 6.0
From an advisory covering 9 CVEs
before 2-1.1
2-1.1
kernel-livepatch-MICRO-6-0-RT_Update_13
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
before 9-1.1
9-1.1
kernel-livepatch-MICRO-6-0-RT_Update_15
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0-RT_Update_18
SUSE:Linux Micro 6.0
From an advisory covering 24 CVEs
before 7-1.1
7-1.1
kernel-livepatch-MICRO-6-0-RT_Update_19
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
before 6-1.1
6-1.1
kernel-livepatch-MICRO-6-0-RT_Update_20
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
before 4-1.1
4-1.1
kernel-livepatch-MICRO-6-0-RT_Update_21
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
before 3-1.1
3-1.1
kernel-livepatch-MICRO-6-0-RT_Update_22
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
before 3-1.2
3-1.2
kernel-livepatch-MICRO-6-0_Update_10
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
before 14-1.1
14-1.1
kernel-livepatch-MICRO-6-0_Update_11
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_12
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
before 13-1.1
13-1.1
kernel-livepatch-MICRO-6-0_Update_13
SUSE:Linux Micro 6.0
From an advisory covering 25 CVEs
before 11-1.1
11-1.1
kernel-livepatch-MICRO-6-0_Update_16
SUSE:Linux Micro 6.0
From an advisory covering 24 CVEs
before 8-1.1
8-1.1
kernel-livepatch-MICRO-6-0_Update_21
SUSE:Linux Micro 6.0
From an advisory covering 21 CVEs
before 3-1.1
3-1.1
linux-hwe-edge
Ubuntu:16.04:LTS
All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
None known
linux-aws-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
None known
linux-aws-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
None known
linux-azure
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
None known
linux-azure-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
None known
linux-azure-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
None known
linux-gcp
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
None known
linux-gcp-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
None known
linux-gke-4.15
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
None known
linux-gke-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
None known
linux-hwe
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
None known
linux-hwe-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
None known
linux-oem
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
None known
linux-oracle-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
None known
linux-oracle-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
None known
linux
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
None known
linux-aws
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
None known
linux-aws-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known
linux-aws-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
before 5.15.0-1112.119~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1112.119~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
None known
linux-azure
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
None known
linux-azure-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
None known
linux-azure-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
before 5.15.0-1117.126~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1117.126~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
None known
linux-azure-fde
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
before 5.15.0-1117.126~20.04.2, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1117.126~20.04.2
linux-bluefield
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
None known
linux-gcp
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
None known
linux-gcp-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
None known
linux-gcp-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
before 5.15.0-1112.122~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1112.122~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
None known
linux-gke
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
None known
linux-gke-5.15
Ubuntu:20.04:LTS
All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
None known
linux-gkeop
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
None known
linux-hwe-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
None known
linux-hwe-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
before 5.15.0-186.196~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-186.196~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
None known
linux-ibm
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
before 5.15.0-1106.110~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1106.110~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
None known
kernel-source
openSUSE:Tumbleweed
From an advisory covering 274 CVEs
before 7.0.11-1.1
7.0.11-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 255 CVEs
before 6.12.0-160000.36.1
6.12.0-160000.36.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affectedOSV
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-46120 is a high vulnerability (CVSS 7.8) in Linux, published May 28, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.13%, the 2nd percentile. Fixed in kernel 6.6.141.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,326 package rows, 1,053 versions, 4,429 references and the rest of 11 source descriptions. The JSON record has them. Also not on the record: 129 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 178 source records.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open