Description
In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: fix overwriting ct original tuple for ICMPv6
OVS_PACKET_CMD_EXECUTE has 3 main attributes:
- OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format.
- OVS_PACKET_ATTR_PACKET - Binary packet content.
- OVS_PACKET_ATTR_ACTIONS - Actions to execute on the packet.
OVS_PACKET_ATTR_KEY is parsed first to populate sw_flow_key structure
with the metadata like conntrack state, input port, recirculation id,
etc. Then the packet itself gets parsed to populate the rest of the
keys from the packet headers.
Whenever the packet parsing code starts parsing the ICMPv6 header, it
first zeroes out fields in the key corresponding to Neighbor Discovery
information even if it is not an ND packet.
It is an 'ipv6.nd' field. However, the 'ipv6' is a union that shares
the space between 'nd' and 'ct_orig' that holds the original tuple
conntrack metadata parsed from the OVS_PACKET_ATTR_KEY.
ND packets should not normally have conntrack state, so it's fine to
share the space, but normal ICMPv6 Echo packets or maybe other types of
ICMPv6 can have the state attached and it should not be overwritten.
The issue results in all but the last 4 bytes of the destination
address being wiped from the original conntrack tuple leading to
incorrect packet matching and potentially executing wrong actions
in case this packet recirculates within the datapath or goes back
to userspace.
ND fields should not be accessed in non-ND packets, so not clearing
them should be fine. Executing memset() only for actual ND packets to
avoid the issue.
Initializing the whole thing before parsing is needed because ND packet
may not contain all the options.
The issue only affects the OVS_PACKET_CMD_EXECUTE path and doesn't
affect packets entering OVS datapath from network interfaces, because
in this case CT metadata is populated from skb after the packet is
already parsed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 4.11 | 4.19.316 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.8.12-1 | — |
| Debian 13 | linux | 6.8.12-1 | — |
| Debian 12 | linux | 6.1.94-1 | — |
| Debian 11 | linux | 5.10.221-1 | DSA-5730-1 |
| Debian 10 | linux | 4.19.316-1 | DLA-3840-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1052.54 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-40.40 | USN-6949-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1013.14 | USN-6949-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1012.14 | USN-6952-2 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1012.13 | USN-6949-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1008.11 | USN-6949-1 |
| Ubuntu 24.04 LTS | linux-ibm +2 | 6.8.0-1010.10 | USN-6955-1, USN-6952-1, USN-6949-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1011.11 | USN-6949-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1011.11.1 | USN-6952-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1009.10 | USN-6949-2 |
| Ubuntu 24.04 LTS | linux-riscv +1 | 6.8.0-40.40.1 | USN-6949-2 |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-121.131 | USN-7007-3, USN-7007-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1069.75 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1013.14~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1072.81 | USN-7009-1 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1012.14~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1072.81.1 | USN-7009-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1068.76 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1012.13~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1066.72 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1052.59 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-40.40~22.04.3 | — |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1062.65 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 +1 | 6.8.0-1010.10~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1064.70 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1066.71 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1064.65 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1011.11~22.04.1 | USN-6949-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1028.28 | — |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1016.16 | — |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1067.73 | USN-7007-1 |
| Ubuntu 22.04 LTS | linux-riscv +31 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 +1 | 6.8.0-40.40.1~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1035.39 | USN-7019-1 |
| Ubuntu 20.04 LTS | linux | 5.4.0-192.212 | USN-6951-1 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1130.140 | USN-6951-1 |
| Ubuntu 20.04 LTS | linux-aws-5.15 | 5.15.0-1069.75~20.04.1 | USN-7007-1 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1135.142 | USN-6951-2 |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1072.81~20.04.1 | USN-7009-1 |
| Ubuntu 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1072.81~20.04.1.1 | USN-7009-2 |
| Ubuntu 20.04 LTS | linux-bluefield | 5.4.0-1090.97 | USN-6951-4 |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1134.143 | USN-6951-1 |
| Ubuntu 20.04 LTS | linux-gcp-5.15 | 5.15.0-1068.76~20.04.1 | USN-7007-1 |
| Ubuntu 20.04 LTS | linux-gke +26 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gkeop | 5.4.0-1097.101 | USN-6951-1 |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | 5.15.0-1052.59~20.04.1 | USN-7007-1 |
| Ubuntu 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-121.131~20.04.1 | USN-7007-3, USN-7007-1 |
| Ubuntu 20.04 LTS | linux-ibm | 5.4.0-1077.82 | USN-6951-1 |
| Ubuntu 20.04 LTS | linux-ibm-5.15 | 5.15.0-1062.65~20.04.1 | USN-7007-2 |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1064.70~20.04.1 | USN-7007-1 |
| Ubuntu 20.04 LTS | linux-iot | 5.4.0-1042.43 | USN-6951-1 |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1118.125 | USN-6951-1 |
| Ubuntu 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1030.30~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1129.138 | USN-6953-1 |
| Ubuntu 20.04 LTS | linux-oracle-5.15 | 5.15.0-1067.73~20.04.1 | USN-7007-2 |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1114.126 | USN-6951-1 |
| Ubuntu 20.04 LTS | linux-riscv-5.15 | 5.15.0-1065.69~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1049.53 | USN-6951-1 |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
Show 16 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2008.8 | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1006.6 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1063.65 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1070.78 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1006.6~22.04.1 | — |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-78.78+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1069.75+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1072.81+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-121.131+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1068.76+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1130.140+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1135.142+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1104.114 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1134.143+fips1 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2116.122 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2095.101 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1133.144 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2079.85 | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 24.04 LTS | linux | 6.8.0-57.59 | LSN-0110-1 |
| Ubuntu Pro 24.04 LTS | linux-aws | 6.8.0-1026.28 | LSN-0110-1 |
| Ubuntu Pro 24.04 LTS | linux-azure | 6.8.0-1026.31 | LSN-0110-1 |
| Ubuntu Pro 24.04 LTS | linux-ibm | 6.8.0-1023.23 | LSN-0110-1 |
| Ubuntu Pro 22.04 LTS | linux | 5.15.0-135.146 | LSN-0110-1 |
| Ubuntu Pro 22.04 LTS | linux-aws | 5.15.0-1080.87 | LSN-0110-1 |
| Ubuntu Pro 22.04 LTS | linux-azure | 5.15.0-1084.93 | LSN-0110-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp | 5.15.0-1079.88 | LSN-0110-1 |
| Ubuntu Pro 22.04 LTS | linux-gke +1 | 5.15.0-1077.83 | LSN-0110-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm | 5.15.0-1072.75 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux | 5.4.0-211.231 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-aws | 5.4.0-1142.152 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1080.87~20.04.1 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-azure | 5.4.0-1147.154 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1086.95~20.04.1 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp | 5.4.0-1145.154 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1081.90~20.04.1 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-gkeop | 5.4.0-1097.101 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 | 5.15.0-136.147~20.04.1 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm | 5.4.0-1088.93 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1074.77~20.04.1 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-lowlatency-hwe-5.15 | 5.15.0-135.146~20.04.1 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle | 5.4.0-1140.150 | LSN-0110-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1077.83~20.04.1 | LSN-0110-1 |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-235.247 | USN-7342-1, LSN-0110-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1178.191 | USN-7344-1, LSN-0110-1 |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1130.140~18.04.1 | USN-6951-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | 4.15.0-1186.201 | USN-7344-2, LSN-0110-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1135.142~18.04.1 | USN-6951-3 |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | 4.15.0-1171.188 | USN-7344-1, LSN-0110-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1134.143~18.04.1 | USN-6951-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-192.212~18.04.1 | USN-6951-1, LSN-0110-1 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1077.82~18.04.1 | USN-6951-1 |
| Ubuntu Pro 18.04 LTS | linux-kvm | 4.15.0-1161.166 | USN-7344-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle | 4.15.0-1140.151 | USN-7344-1, LSN-0110-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1129.138~18.04.1 | USN-6953-1 |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1114.126~18.04.1 | USN-6979-1 |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-268.302 | LSN-0110-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1181.196 | LSN-0110-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1178.191~16.04.1 | USN-7344-1, LSN-0110-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1186.201~16.04.1 | USN-7344-2, LSN-0110-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1171.188~16.04.1 | USN-7344-1, LSN-0110-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-235.247~16.04.1 | USN-7342-1, LSN-0110-1 |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1140.151~16.04.1 | USN-7344-1 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1186.201~14.04.1 | USN-7344-2 |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-268.302~14.04.1 | LSN-0110-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | bpftool | 7.3.0-427.31.1.el9_4 | RHSA-2024:5363 |
| RHEL 9 | rv +64 | 5.14.0-427.31.1.el9_4 | RHSA-2024:5363 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.22.1.rt7.363.el8_10 | RHSA-2024:7001 |
| RHEL 8 | perf +26 | 4.18.0-553.22.1.el8_10 | RHSA-2024:7000 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | bpftool | 7.0.0-284.86.1.el9_2 | RHSA-2024:7489 |
| RHEL 9.2 EUS | kernel-rt +14 | 5.14.0-284.86.1.rt14.371.el9_2 | RHSA-2024:7490 |
| RHEL 9.2 EUS | perf +47 | 5.14.0-284.86.1.el9_2 | RHSA-2024:7489 |
| RHEL 8.8 EUS | perf +26 | 4.18.0-477.75.1.el8_8 | RHSA-2024:8107 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | bpftool | 7.3.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux 9 | rv +60 | 5.14.0-427.31.1.el9_4 | ALSA-2024:5363 |
| AlmaLinux 8 | kernel-rt +11 | 4.18.0-553.22.1.rt7.363.el8_10 | ALSA-2024:7001 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.22.1.el8_10 | ALSA-2024:7000 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | kernel | 5.14.0-427.31.1.el9_4 | RLSA-2024:5363 |
| Rocky Linux 8 | kernel | 4.18.0-553.22.1.el8_10 | RLSA-2024:7000 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.22.1.rt7.363.el8_10 | RLSA-2024:7001 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | kernel-64kb +5 | 6.4.0-150600.23.17.1 | SUSE-SU-2024:2802-1 |
| SLES 15 SP6 | kernel-azure +1 | 6.4.0-150600.8.8.2 | SUSE-SU-2024:2896-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.17.1.150600.12.6.2 | SUSE-SU-2024:2802-1 |
| SLES 15 SP6 | kernel-docs | 6.4.0-150600.23.17.3 | SUSE-SU-2024:2802-1 |
| SLES 15 SP6 | kernel-syms-azure | 6.4.0-150600.8.8.1 | SUSE-SU-2024:2896-1 |
| SLES 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.73.1 | SUSE-SU-2024:2939-1 |
| SLES 15 SP5 | kernel-azure +2 | 5.14.21-150500.33.63.1 | SUSE-SU-2024:2947-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.73.1.150500.6.33.8 | SUSE-SU-2024:2939-1 |
| SLES 15 SP5 | kernel-docs | 5.14.21-150500.55.73.2 | SUSE-SU-2024:2939-1 |
| SLES 12 SP5 | kernel-azure +2 | 4.12.14-16.194.1 | SUSE-SU-2024:2901-1 |
| SLES 12 SP5 | kernel-docs | 4.12.14-122.225.2 | SUSE-SU-2024:2940-1 |
| SLES 12 SP5 | kernel-syms +3 | 4.12.14-122.225.1 | SUSE-SU-2024:2940-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP5 | kernel-azure +2 | 4.12.14-16.194.1 | SUSE-SU-2024:2901-1 |
| SLES for SAP 12 SP5 | kernel-syms +2 | 4.12.14-122.225.1 | SUSE-SU-2024:2940-1 |
| SLE Real Time 12 SP5 | kernel-rt +3 | 4.12.14-10.197.1 | SUSE-SU-2024:2892-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-17.1.1.51 | SUSE-SU-2025:20008-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-9.1 | SUSE-SU-2025:20028-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-18.1 | SUSE-SU-2025:20008-1 |
| SLE Micro 5.5 | kernel-default | 5.14.21-150500.55.73.1 | SUSE-SU-2024:2939-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.73.1.150500.6.33.8 | SUSE-SU-2024:2939-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.64.1 | SUSE-SU-2024:2894-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.17.1 | SUSE-SU-2024:2802-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_1 | 1-150600.1.5.1 | SUSE-SU-2024:2973-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_3 | 1-150600.13.3.1 | SUSE-SU-2024:2802-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.73.1 | SUSE-SU-2024:2939-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_17 +1 | 1-150500.11.3.1 | SUSE-SU-2024:2939-1, SUSE-SU-2024:2894-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.225.1 | SUSE-SU-2024:2940-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_59 | 1-8.3.1 | SUSE-SU-2024:2940-1 |
| SUSE Real Time Module 15 SP6 | kernel-rt +3 | 6.4.0-150600.10.5.1 | SUSE-SU-2024:2973-1 |
| SUSE Real Time Module 15 SP5 | kernel-rt +3 | 5.14.21-150500.13.64.1 | SUSE-SU-2024:2894-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | dtb-aarch64 +9 | 6.4.0-150600.23.17.1 | SUSE-SU-2024:2802-1 |
| openSUSE Leap 15.6 | kernel-azure +1 | 6.4.0-150600.8.8.2 | SUSE-SU-2024:2896-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.17.1.150600.12.6.2 | SUSE-SU-2024:2802-1 |
| openSUSE Leap 15.6 | kernel-docs | 6.4.0-150600.23.17.3 | SUSE-SU-2024:2802-1 |
| openSUSE Leap 15.6 | kernel-rt +3 | 6.4.0-150600.10.5.1 | SUSE-SU-2024:2973-1 |
| openSUSE Leap 15.6 | kernel-syms-azure | 6.4.0-150600.8.8.1 | SUSE-SU-2024:2896-1 |
| openSUSE Leap 15.5 | dtb-aarch64 +9 | 5.14.21-150500.55.73.1 | SUSE-SU-2024:2939-1 |
| openSUSE Leap 15.5 | kernel-azure +2 | 5.14.21-150500.33.63.1 | SUSE-SU-2024:2947-1 |
| openSUSE Leap 15.5 | kernel-default-base | 5.14.21-150500.55.73.1.150500.6.33.8 | SUSE-SU-2024:2939-1 |
| openSUSE Leap 15.5 | kernel-docs | 5.14.21-150500.55.73.2 | SUSE-SU-2024:2939-1 |
| openSUSE Leap 15.5 | kernel-rt +3 | 5.14.21-150500.13.64.1 | SUSE-SU-2024:2894-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.5 | kernel-default | 5.14.21-150500.55.73.1 | SUSE-SU-2024:2939-1 |
| openSUSE Leap Micro 5.5 | kernel-default-base | 5.14.21-150500.55.73.1.150500.6.33.8 | SUSE-SU-2024:2939-1 |
| openSUSE Leap Micro 5.5 | kernel-rt | 5.14.21-150500.13.64.1 | SUSE-SU-2024:2894-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.1.94-99.176 | 1.0-0.amzn2023 | ALAS2023-2024-683 |
| Amazon Linux 2023 | perf +14 | 6.1.94-99.176.amzn2023 | ALAS2023-2024-683 |
| Amazon Linux 2 | kernel-livepatch-4.14.349-266.564 | 1.0-0.amzn2 | ALAS2-2024-2613 |
| Amazon Linux 2 | perf +8 | 4.14.349-266.564.amzn2 | ALAS2-2024-2613 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | bpftool | 7.3.0-427.31.1.el9_4 | ELSA-2024-5363 |
| Oracle Linux 9 | rv +27 | 5.14.0-427.31.1.el9_4 | ELSA-2024-5363 |
| Oracle Linux 8 | kernel-uek-container +1 | 5.4.17-2136.334.6.el8 | ELSA-2024-12584 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.22.1.el8_10 | ELSA-2024-7000 |
| Oracle Linux 7 | kernel-uek-container +1 | 5.4.17-2136.334.6.el7 | ELSA-2024-12585 |
| Oracle Linux 7 | perf +10 | 4.14.35-2047.540.4.1.el7uek | ELSA-2024-12611, ELSA-2024-12581 |
Advisories 50
- USN-7344-1 linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-kvm, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7344-2 linux-azure, linux-azure-4.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7342-1 linux, linux-hwe vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- ALSA-2024:5363 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:7001 Important: kernel-rt security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:7000 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- USN-7007-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-oracle, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7009-1 linux-azure, linux-azure-5.15, linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7007-3 linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7019-1 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-6955-1 linux-oem-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7007-2 linux-ibm-5.15, linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-6952-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-6952-1 linux-nvidia-lowlatency, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-6949-2 linux-lowlatency, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-6949-1 linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-nvidia, linux-nvidia-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-6951-1 linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-raspi, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6979-1 linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6951-3 linux-azure-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6953-1 linux-oracle, linux-oracle-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6951-4 linux-bluefield vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6951-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- RHSA-2024:8107 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:7001 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:7000 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:5363 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:7490 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:7489 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- SSA-265688 SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1 Siemens ProductCERT · Oct 13, 2026
- WID-SEC-2024-1418 Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Sep 8, 2026
- USN-7009-2 linux-azure-fde-5.15 vulnerabilities Ubuntu Security Notices (USN) · Aug 6, 2026
- LSN-0110-1 Kernel Live Patch Security Notice Ubuntu Security Notices (USN) · Jun 3, 2026
- ICSA-24-102-01 Siemens SIMATIC S7-1500 TM MFP CISA ICS & IT advisories · May 14, 2026
- SUSE-SU-2025:20008-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20028-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-5730-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3840-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- ICSA-25-226-15 Siemens SINEC OS CISA ICS & IT advisories · Feb 25, 2026
- SSA-613116 SSA-613116: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.1 Siemens ProductCERT · Feb 24, 2026
- RLSA-2024:7001 Important: kernel-rt security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:5363 Important: kernel security update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2024:2973-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2892-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2940-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2947-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2939-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2896-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2901-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2023-2024-683 Important: kernel security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 5, 2025
- ALAS2-2024-2613 Important: kernel security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · May 19, 2025
References
- https://git.kernel.org/stable/c/6a51ac92bf35d34b4996d6eb67e2fe469f573b11
- https://git.kernel.org/stable/c/0b532f59437f688563e9c58bdc1436fefa46e3b5
- https://git.kernel.org/stable/c/5ab6aecbede080b44b8e34720ab72050bf1e6982
- https://git.kernel.org/stable/c/483eb70f441e2df66ade78aa7217e6e4caadfef3
- https://git.kernel.org/stable/c/9ec8b0ccadb908d92f7ee211a4eff05fd932f3f6
- https://git.kernel.org/stable/c/78741b4caae1e880368cb2f5110635f3ce45ecfd
- https://git.kernel.org/stable/c/431e9215576d7b728f3f53a704d237a520092120
- https://git.kernel.org/stable/c/d73fb8bddf89503c9fae7c42e50d44c89909aad6
- https://git.kernel.org/stable/c/7c988176b6c16c516474f6fceebe0f055af5eb56