Description
In the Linux kernel, the following vulnerability has been resolved:
dm cache: fix out-of-bounds access to the dirty bitset when resizing
dm-cache checks the dirty bits of the cache blocks to be dropped when
shrinking the fast device, but an index bug in bitset iteration causes
out-of-bounds access.
Reproduce steps:
1. create a cache device of 1024 cache blocks (128 bytes dirty bitset)
dmsetup create cmeta --table "0 8192 linear /dev/sdc 0"
dmsetup create cdata --table "0 131072 linear /dev/sdc 8192"
dmsetup create corig --table "0 524288 linear /dev/sdc 262144"
dd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct
dmsetup create cache --table "0 524288 cache /dev/mapper/cmeta \
/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0"
2. shrink the fast device to 512 cache blocks, triggering out-of-bounds
access to the dirty bitset (offset 0x80)
dmsetup suspend cache
dmsetup reload cdata --table "0 65536 linear /dev/sdc 8192"
dmsetup resume cdata
dmsetup resume cache
KASAN reports:
BUG: KASAN: vmalloc-out-of-bounds in cache_preresume+0x269/0x7b0
Read of size 8 at addr ffffc900000f3080 by task dmsetup/131
(...snip...)
The buggy address belongs to the virtual mapping at
[ffffc900000f3000, ffffc900000f5000) created by:
cache_ctr+0x176a/0x35f0
(...snip...)
Memory state around the buggy address:
ffffc900000f2f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
ffffc900000f3000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffffc900000f3080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
^
ffffc900000f3100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
ffffc900000f3180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
Fix by making the index post-incremented.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 3.13 | 4.19.324 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.11.9-1 | — |
| Debian 13 | linux | 6.11.9-1 | — |
| Debian 12 | linux | 6.1.119-1 | DSA-5818-1 |
| Debian 11 | linux | 5.10.234-1 | DLA-4075-1 |
| Debian 11 | linux-6.1 | 6.1.119-1~deb11u1 | DLA-4008-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1060.62 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-58.60 | USN-7449-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1027.29 | USN-7449-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1027.32 | USN-7449-1 |
| Ubuntu 24.04 LTS | linux-azure-6.11 | 6.11.0-1012.12~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1014.15 | USN-7468-1 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1028.30 | USN-7450-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.11 | 6.11.0-1011.11~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1023.27 | USN-7450-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1010.12 | USN-7450-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1024.24 | USN-7449-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1026.29 | USN-7449-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.11 | 6.11.0-1007.7 | — |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1026.29.1 | USN-7449-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1008.8 | — |
| Ubuntu 24.04 LTS | linux-oem-6.11 | 6.11.0-1015.15 | USN-7310-1 |
| Ubuntu 24.04 LTS | linux-oem-6.8 | 6.8.0-1026.26 | USN-7449-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1024.25 | USN-7449-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1028.32 | USN-7524-1 |
| Ubuntu 24.04 LTS | linux-realtime +1 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv +1 | 6.8.0-58.60.1 | USN-7449-1 |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1017.18 | — |
| Ubuntu 22.04 LTS | linux | 5.15.0-133.144 | USN-7288-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1078.85 | USN-7308-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1027.29~22.04.1 | USN-7451-1 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1081.90 | USN-7289-1 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1027.32~22.04.1 | USN-7449-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1081.90.1 | USN-7289-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1077.86 | USN-7291-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1028.30~22.04.1 | USN-7452-1 |
| Ubuntu 22.04 LTS | linux-gke +1 | 5.15.0-1075.81 | USN-7291-1, USN-7289-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1060.68 | USN-7289-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-58.60~22.04.1 | USN-7449-2 |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1070.73 | USN-7289-3 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1024.24~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1073.79 | USN-7289-4 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1076.81 | USN-7388-1 |
| Ubuntu 22.04 LTS | linux-lowlatency | 5.15.0-133.143 | USN-7288-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1072.73 | USN-7289-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1026.29~22.04.1 | USN-7449-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1033.33 | USN-7389-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1021.21 | USN-7389-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1024.25~22.04.1 | USN-7449-1 |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1072.75 | USN-7305-1 |
| Ubuntu 22.04 LTS | linux-riscv +31 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 +1 | 6.8.0-58.60.1~22.04.1 | USN-7449-1 |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1044.48 | USN-7390-1 |
| Ubuntu 20.04 LTS | linux | 5.4.0-208.228 | USN-7293-1 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1140.150 | USN-7294-2 |
| Ubuntu 20.04 LTS | linux-aws-5.15 | 5.15.0-1080.87~20.04.1 | USN-7388-1 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1145.152 | USN-7294-1 |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1081.90~20.04.1 | USN-7289-2 |
| Ubuntu 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1081.90~20.04.1.1 | USN-7289-2 |
| Ubuntu 20.04 LTS | linux-bluefield | 5.4.0-1099.106 | USN-7294-1 |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1143.152 | USN-7294-1 |
| Ubuntu 20.04 LTS | linux-gcp-5.15 | 5.15.0-1077.86~20.04.1 | USN-7291-1 |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-hwe-5.15 | 5.15.0-134.145~20.04.1 | USN-7331-1 |
| Ubuntu 20.04 LTS | linux-ibm | 5.4.0-1086.91 | USN-7294-3 |
| Ubuntu 20.04 LTS | linux-ibm-5.15 | 5.15.0-1074.77~20.04.1 | USN-7458-1 |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1073.79~20.04.2 | USN-7289-4 |
| Ubuntu 20.04 LTS | linux-iot | 5.4.0-1048.51 | USN-7413-1 |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1127.136 | USN-7294-4 |
| Ubuntu 20.04 LTS | linux-lowlatency-hwe-5.15 | 5.15.0-133.143~20.04.1 | USN-7288-2 |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1138.147 | USN-7294-2 |
| Ubuntu 20.04 LTS | linux-oracle-5.15 | 5.15.0-1075.81~20.04.1 | USN-7289-2 |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1129.142 | USN-7539-1 |
| Ubuntu 20.04 LTS | linux-riscv-5.15 | 5.15.0-1073.77~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1058.62 | USN-7295-1 |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
Show 16 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2023.24 | USN-7523-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1020.21 | USN-7453-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1071.73 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1078.86 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1020.21~22.04.1 | — |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-78.78+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1078.85+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1080.89+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-133.144+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1077.86+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1140.151+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1145.152+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1116.126 | USN-7393-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1143.152+fips1 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1039.39~20.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux +5 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1142.152~18.04.1 | USN-7401-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1145.152~18.04.1 | USN-7294-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1143.152~18.04.1 | USN-7294-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-208.228~18.04.1 | USN-7293-1 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1086.91~18.04.1 | USN-7294-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1138.147~18.04.1 | USN-7294-2 |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1129.142~18.04.1 | USN-7540-1 |
| Ubuntu Pro 16.04 LTS | linux +7 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux +3 | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.30.1 | SUSE-SU-2025:0154-1, SUSE-SU-2024:4318-1 |
| SLES 15 SP6 | kernel-azure +2 | 6.4.0-150600.8.20.1 | SUSE-SU-2025:0117-1, SUSE-SU-2024:4316-1 |
| SLES 15 SP6 | kernel-coco +3 | 6.4.0-15061.9.coco15sp6.1 | SUSE-SU-2025:0289-1, SUSE-SU-2024:4387-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.30.1.150600.12.12.6 | SUSE-SU-2025:0154-1, SUSE-SU-2024:4318-1 |
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.88.1 | SUSE-SU-2025:0201-2, SUSE-SU-2025:0201-1, SUSE-SU-2024:4364-1 |
| SLES 15 SP5 | kernel-azure +2 | 5.14.21-150500.33.75.1 | SUSE-SU-2024:4376-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.88.1.150500.6.39.4 | SUSE-SU-2025:0201-2, SUSE-SU-2025:0201-1, SUSE-SU-2024:4364-1 |
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.144.1 | SUSE-SU-2024:4346-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.144.1.150400.24.70.1 | SUSE-SU-2024:4346-1 |
| SLES 15 SP3 | kernel-64kb +7 | 5.3.18-150300.59.185.1 | SUSE-SU-2024:4313-1 |
| SLES 15 SP3 | kernel-default-base | 5.3.18-150300.59.185.1.150300.18.109.1 | SUSE-SU-2024:4313-1 |
| SLES 15 SP2 | kernel-default-base | 5.3.18-150200.24.212.1.150200.9.111.1 | SUSE-SU-2024:4388-1 |
| SLES 15 SP2 | kernel-docs +5 | 5.3.18-150200.24.212.1 | SUSE-SU-2024:4388-1 |
Show 27 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.237.1 | SUSE-SU-2025:0035-1 |
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.91.1.150500.6.41.1 | SUSE-SU-2025:0201-2, SUSE-SU-2025:0201-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.91.1 | SUSE-SU-2025:0201-2, SUSE-SU-2025:0201-1 |
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.144.1.150400.24.70.1 | SUSE-SU-2024:4346-1 |
| SLES for SAP 15 SP4 | kernel-docs +4 | 5.14.21-150400.24.144.1 | SUSE-SU-2024:4346-1 |
| SLES for SAP 15 SP3 | kernel-default-base | 5.3.18-150300.59.185.1.150300.18.109.1 | SUSE-SU-2024:4313-1 |
| SLES for SAP 15 SP3 | kernel-docs +5 | 5.3.18-150300.59.185.1 | SUSE-SU-2024:4313-1 |
| SLES for SAP 15 SP2 | kernel-default-base | 5.3.18-150200.24.212.1.150200.9.111.1 | SUSE-SU-2024:4388-1 |
| SLES for SAP 15 SP2 | kernel-docs +5 | 5.3.18-150200.24.212.1 | SUSE-SU-2024:4388-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-24.1.21.4 | SUSE-SU-2025:20247-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_4 | 1-1.1 | SUSE-SU-2025:20246-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_2 +1 | 7-1.1 | SUSE-SU-2025:20450-1, SUSE-SU-2025:20448-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_4 | 1-1.2 | SUSE-SU-2025:20247-1 |
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-22.1 | SUSE-SU-2025:20246-1 |
| SLE Micro 6.1 | kernel-source +2 | 6.4.0-24.1 | SUSE-SU-2025:20247-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-24.1.21.4 | SUSE-SU-2025:20164-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_4 | 1-1.1 | SUSE-SU-2025:20163-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_2 +1 | 7-1.1 | SUSE-SU-2025:20436-1, SUSE-SU-2025:20431-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_3 +1 | 7-1.2 | SUSE-SU-2025:20437-1, SUSE-SU-2025:20435-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_4 | 1-1.2 | SUSE-SU-2025:20164-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-22.1 | SUSE-SU-2025:20163-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-24.1 | SUSE-SU-2025:20164-1 |
| SLE Micro 5.5 | kernel-default | 5.14.21-150500.55.88.1 | SUSE-SU-2025:0201-1, SUSE-SU-2024:4364-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.88.1.150500.6.39.4 | SUSE-SU-2025:0201-1, SUSE-SU-2024:4364-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.79.1 | SUSE-SU-2025:0229-1, SUSE-SU-2024:4315-1 |
| SLE Micro 5.4 | kernel-default | 5.14.21-150400.24.144.1 | SUSE-SU-2024:4346-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.144.1.150400.24.70.1 | SUSE-SU-2024:4346-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.103.1 | SUSE-SU-2024:4345-1 |
| SLE Micro 5.3 | kernel-default | 5.14.21-150400.24.144.1 | SUSE-SU-2024:4346-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.144.1.150400.24.70.1 | SUSE-SU-2024:4346-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.103.1 | SUSE-SU-2024:4345-1 |
| SLE Micro 5.2 | kernel-default | 5.3.18-150300.59.185.1 | SUSE-SU-2024:4313-1 |
| SLE Micro 5.2 | kernel-default-base | 5.3.18-150300.59.185.1.150300.18.109.1 | SUSE-SU-2024:4313-1 |
| SLE Micro 5.2 | kernel-rt +1 | 5.3.18-150300.194.1 | SUSE-SU-2024:4317-1 |
| SLE Micro 5.1 | kernel-default | 5.3.18-150300.59.185.1 | SUSE-SU-2024:4313-1 |
| SLE Micro 5.1 | kernel-default-base | 5.3.18-150300.59.185.1.150300.18.109.1 | SUSE-SU-2024:4313-1 |
| SLE Micro 5.1 | kernel-rt +1 | 5.3.18-150300.194.1 | SUSE-SU-2024:4317-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.30.1 | SUSE-SU-2025:0154-1, SUSE-SU-2024:4318-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_0 | 17-150600.3.1 | SUSE-SU-2025:02069-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_5 | 10-150600.2.1 | SUSE-SU-2025:02071-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_6 | 1-150600.1.3.1 | SUSE-SU-2024:4314-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_0 | 18-150600.4.46.1 | SUSE-SU-2025:02117-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_2 +1 | 16-150600.2.1 | SUSE-SU-2025:02126-1, SUSE-SU-2025:02076-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_3 | 16-150600.2.2 | SUSE-SU-2025:02162-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_4 +2 | 12-150600.2.1 | SUSE-SU-2025:02116-1, SUSE-SU-2025:02077-1, SUSE-SU-2025:02070-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_5 | 11-150600.2.1 | SUSE-SU-2025:02127-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_6 | 1-150600.13.3.5 | SUSE-SU-2024:4318-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_7 | 1-150600.13.3.1 | SUSE-SU-2025:0154-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.88.1 | SUSE-SU-2025:0201-1, SUSE-SU-2024:4364-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_13 +1 | 18-150500.2.1 | SUSE-SU-2025:02157-1, SUSE-SU-2025:02106-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_17 | 12-150500.3.1 | SUSE-SU-2025:02107-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_19 +1 | 10-150500.3.1 | SUSE-SU-2025:02171-1, SUSE-SU-2025:02113-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_21 | 1-150500.11.5.1 | SUSE-SU-2024:4364-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_22 +1 | 1-150500.11.3.1 | SUSE-SU-2025:0201-1, SUSE-SU-2024:4315-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.144.1 | SUSE-SU-2024:4346-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_26 | 19-150400.2.2 | SUSE-SU-2025:02142-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_27 | 17-150400.2.1 | SUSE-SU-2025:02144-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_28 | 14-150400.2.1 | SUSE-SU-2025:02125-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_29 | 12-150400.2.1 | SUSE-SU-2025:02110-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_31 +1 | 10-150400.2.1 | SUSE-SU-2025:02134-1, SUSE-SU-2025:02111-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_33 | 9-150400.2.1 | SUSE-SU-2025:02154-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_34 | 1-150400.9.3.1 | SUSE-SU-2024:4346-1 |
| SLE Live Patching 15 SP3 | kernel-default | 5.3.18-150300.59.185.1 | SUSE-SU-2024:4313-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_44 | 19-150300.2.2 | SUSE-SU-2025:02139-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_45 | 16-150300.2.2 | SUSE-SU-2025:02124-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_49 | 11-150300.2.2 | SUSE-SU-2025:02136-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_50 | 9-150300.2.2 | SUSE-SU-2025:02140-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_51 | 1-150300.7.3.1 | SUSE-SU-2024:4313-1 |
| SLE Live Patching 15 SP2 | kernel-default | 5.3.18-150200.24.212.1 | SUSE-SU-2024:4388-1 |
| SLE Live Patching 15 SP2 | kernel-livepatch-SLE15-SP2_Update_55 | 1-150200.5.3.1 | SUSE-SU-2024:4388-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.237.1 | SUSE-SU-2024:4367-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_56 | 18-2.1 | SUSE-SU-2025:02095-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_58 | 13-2.1 | SUSE-SU-2025:02131-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_59 | 12-2.1 | SUSE-SU-2025:02075-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_60 | 11-2.1 | SUSE-SU-2025:02096-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_61 | 10-2.1 | SUSE-SU-2025:4123-1, SUSE-SU-2025:02101-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_63 | 1-8.3.1 | SUSE-SU-2024:4367-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.91.1 | SUSE-SU-2025:0201-2, SUSE-SU-2025:0201-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.91.1.150500.6.41.1 | SUSE-SU-2025:0201-2, SUSE-SU-2025:0201-1 |
| SLE HPC 15 SP4 | kernel-64kb +5 | 5.14.21-150400.24.144.1 | SUSE-SU-2024:4346-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.144.1.150400.24.70.1 | SUSE-SU-2024:4346-1 |
| SLE HPC 15 SP3 | kernel-64kb +6 | 5.3.18-150300.59.185.1 | SUSE-SU-2024:4313-1 |
| SLE HPC 15 SP3 | kernel-default-base | 5.3.18-150300.59.185.1.150300.18.109.1 | SUSE-SU-2024:4313-1 |
| SLE HPC 15 SP2 | kernel-default-base | 5.3.18-150200.24.212.1.150200.9.111.1 | SUSE-SU-2024:4388-1 |
| SLE HPC 15 SP2 | kernel-docs +5 | 5.3.18-150200.24.212.1 | SUSE-SU-2024:4388-1 |
| SUSE Real Time Module 15 SP6 | kernel-rt +3 | 6.4.0-150600.10.20.1 | SUSE-SU-2024:4314-1 |
| SUSE Real Time Module 15 SP5 | kernel-rt +3 | 5.14.21-150500.13.79.1 | SUSE-SU-2024:4315-1 |
| SUSE Manager Server 4.3 | kernel-default-base | 5.14.21-150400.24.144.1.150400.24.70.1 | SUSE-SU-2024:4346-1 |
| SUSE Manager Server 4.3 | kernel-syms +3 | 5.14.21-150400.24.144.1 | SUSE-SU-2024:4346-1 |
| SUSE Manager Proxy 4.3 | kernel-default-base | 5.14.21-150400.24.144.1.150400.24.70.1 | SUSE-SU-2024:4346-1 |
| SUSE Manager Proxy 4.3 | kernel-syms +2 | 5.14.21-150400.24.144.1 | SUSE-SU-2024:4346-1 |
| SUSE Enterprise Storage 7.1 | kernel-64kb +6 | 5.3.18-150300.59.185.1 | SUSE-SU-2024:4313-1 |
| SUSE Enterprise Storage 7.1 | kernel-default-base | 5.3.18-150300.59.185.1.150300.18.109.1 | SUSE-SU-2024:4313-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | dtb-aarch64 +10 | 6.4.0-150600.23.30.1 | SUSE-SU-2025:0154-1, SUSE-SU-2024:4318-1 |
| openSUSE Leap 15.6 | kernel-azure +2 | 6.4.0-150600.8.20.1 | SUSE-SU-2025:0117-1, SUSE-SU-2024:4316-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.30.1.150600.12.12.6 | SUSE-SU-2025:0154-1, SUSE-SU-2024:4318-1 |
| openSUSE Leap 15.6 | kernel-rt +3 | 6.4.0-150600.10.20.1 | SUSE-SU-2024:4314-1 |
| openSUSE Leap 15.5 | kernel-azure +2 | 5.14.21-150500.33.75.1 | SUSE-SU-2024:4376-1 |
| openSUSE Leap 15.5 | kernel-rt +3 | 5.14.21-150500.13.79.1 | SUSE-SU-2024:4315-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.5 | kernel-rt | 5.14.21-150500.13.79.1 | SUSE-SU-2024:4315-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.1.119-129.201 | 1.0-0.amzn2023 | ALAS2023-2025-802 |
| Amazon Linux 2023 | perf +14 | 6.1.119-129.201.amzn2023 | ALAS2023-2025-802 |
| Amazon Linux 2 | kernel-livepatch-4.14.355-274.598 | 1.0-0.amzn2 | ALAS2-2025-2775 |
| Amazon Linux 2 | perf +8 | 4.14.355-274.598.amzn2 | ALAS2-2025-2775 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | kernel | 5.15.173.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | bpftool +13 | 5.15.0-305.176.4.el9uek | ELSA-2025-20095 |
| Oracle Linux 7 | kernel-uek +6 | 5.4.17-2136.340.4.1.el8uek | ELSA-2025-20100 |
| Oracle Linux 7 | kernel-uek-tools | 5.4.17-2136.340.4.1.el7uek | ELSA-2025-20100 |
Advisories 50
- USN-7449-1 linux, linux-aws, linux-azure, linux-azure-6.8, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7450-1 linux-gcp, linux-gke, linux-gkeop vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7468-1 linux-azure-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7453-1 linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7451-1 linux-aws-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7524-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7523-1 linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7310-1 linux-oem-6.11 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7452-1 linux-gcp-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7449-2 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7539-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7540-1 linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 30, 2026
- USN-7294-1 linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-ibm-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7458-1 linux-ibm-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7289-2 linux-azure-5.15, linux-azure-fde-5.15, linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7293-1 linux, linux-hwe-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7289-1 linux-azure, linux-azure-fde, linux-gkeop, linux-nvidia, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7289-3 linux-ibm vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7388-1 linux-aws-5.15, linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7294-2 linux-aws, linux-oracle, linux-oracle-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7389-1 linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7291-1 linux-gcp, linux-gcp-5.15, linux-gke vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7390-1 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7413-1 linux-iot vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7393-1 linux-fips vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7401-1 linux-aws-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7288-1 linux, linux-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7289-4 linux-intel-iotg, linux-intel-iotg-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7294-4 linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7295-1 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7308-1 linux-aws vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7331-1 linux-hwe-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7294-3 linux-ibm vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7305-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7288-2 linux-lowlatency-hwe-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- WID-SEC-2024-3497 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 13, 2026
- SUSE-SU-2025:20435-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20436-1 Security update for kernel-livepatch-MICRO-6-0_Update_2 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20437-1 Security update for kernel-livepatch-MICRO-6-0_Update_3 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20163-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20448-1 Security update for kernel-livepatch-MICRO-6-0_Update_2 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20246-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20164-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02101-1 Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02125-1 Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02127-1 Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02075-1 Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20431-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20247-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02077-1 Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6) SUSE / openSUSE Security Updates · Mar 23, 2026
References
- https://git.kernel.org/stable/c/4fa4feb873cea0e9d6ff883b37cca6f33169d8b4
- https://git.kernel.org/stable/c/8501e38dc9e0060814c4085815fc83da3e6d43bf
- https://git.kernel.org/stable/c/ee1f74925717ab36f6a091104c170639501ce818
- https://git.kernel.org/stable/c/ff1dd8a04c30e8d4e2fd5c83198ca672eb6a9e7f
- https://git.kernel.org/stable/c/56507203e1b6127967ec2b51fb0b23a0d4af1334
- https://git.kernel.org/stable/c/e57648ce325fa405fe6bbd0e6a618ced7c301a2d
- https://git.kernel.org/stable/c/3b02c40ff10fdf83cc545850db208de855ebe22c
- https://git.kernel.org/stable/c/792227719725497ce10a8039803bec13f89f8910