Description
In the Linux kernel, the following vulnerability has been resolved:
mm/huge_memory: fix dereferencing invalid pmd migration entry
When migrating a THP, concurrent access to the PMD migration entry during
a deferred split scan can lead to an invalid address access, as
illustrated below. To prevent this invalid access, it is necessary to
check the PMD migration entry and return early. In this context, there is
no need to use pmd_to_swp_entry and pfn_swap_entry_to_page to verify the
equality of the target folio. Since the PMD migration entry is locked, it
cannot be served as the target.
Mailing list discussion and explanation from Hugh Dickins: "An anon_vma
lookup points to a location which may contain the folio of interest, but
might instead contain another folio: and weeding out those other folios is
precisely what the "folio != pmd_folio((*pmd)" check (and the "risk of
replacing the wrong folio" comment a few lines above it) is for."
BUG: unable to handle page fault for address: ffffea60001db008
CPU: 0 UID: 0 PID: 2199114 Comm: tee Not tainted 6.14.0+ #4 NONE
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:split_huge_pmd_locked+0x3b5/0x2b60
Call Trace:
<TASK>
try_to_migrate_one+0x28c/0x3730
rmap_walk_anon+0x4f6/0x770
unmap_folio+0x196/0x1f0
split_huge_page_to_list_to_order+0x9f6/0x1560
deferred_split_scan+0xac5/0x12a0
shrinker_debugfs_scan_write+0x376/0x470
full_proxy_write+0x15c/0x220
vfs_write+0x2fc/0xcb0
ksys_write+0x146/0x250
do_syscall_64+0x6a/0x120
entry_SYSCALL_64_after_hwframe+0x76/0x7e
The bug is found by syzkaller on an internal kernel, then confirmed on
upstream.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 4.14 | 5.4.295 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.12.29-1 | — |
| Debian 13 | linux | 6.12.29-1 | — |
| Debian 12 | linux | 6.1.147-1 | DSA-5973-1 |
| Debian 11 | linux | 5.10.244-1 | DLA-4327-1 |
| Debian 11 | linux-6.1 | 6.1.153-1~deb11u1 | DLA-4328-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1014.18 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1076.78 | — |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 25.04 | linux-azure | 6.14.0-1010.10 | USN-7721-1 |
| Ubuntu 24.04 LTS | linux | 6.8.0-90.91 | USN-7931-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1044.46 | USN-7931-1 |
| Ubuntu 24.04 LTS | linux-aws-6.14 +1 | 6.14.0-1011.11~24.04.1 | USN-7699-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1044.50 | USN-7935-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1046.53 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1029.32 | USN-7940-2 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1045.48 | USN-7931-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.14 | 6.14.0-1014.15~24.04.1 | USN-7699-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1041.46 | USN-7931-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1028.31 | USN-7931-1 |
| Ubuntu 24.04 LTS | linux-hwe-6.14 | 6.14.0-28.28~24.04.1 | USN-7699-2 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1042.42 | USN-7931-1 |
| Ubuntu 24.04 LTS | linux-intel +10 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-90.91.1 | USN-7931-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1044.47 | USN-7931-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1044.47.1 | USN-7931-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1020.20 | — |
| Ubuntu 24.04 LTS | linux-oem-6.14 | 6.14.0-1010.10 | USN-7699-2 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1041.42 | USN-7931-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1044.48 | USN-7931-5 |
| Ubuntu 24.04 LTS | linux-riscv-6.14 | 6.14.0-28.28.1~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1021.22 | USN-7931-4 |
Show 17 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-156.166 | USN-7774-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1092.99 | USN-7774-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1044.46~22.04.1 | USN-7931-1 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1096.105 | USN-7775-2 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1044.50~22.04.1 | USN-7935-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1096.105.1 | — |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1046.53~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1092.101 | USN-7774-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1045.48~22.04.1 | USN-7931-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1089.95 | USN-7774-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1075.83 | USN-7774-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 +1 | 6.8.0-90.91~22.04.1 | USN-7931-1 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1086.89 | USN-7774-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1042.42~22.04.1 | USN-7931-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1087.93 | USN-7774-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1088.93 | USN-7774-4 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-90.91.1~22.04.1 | USN-7931-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1087.88 | USN-7774-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1044.47~22.04.1 | USN-7931-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1045.45 | USN-7774-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1034.34 | USN-7774-5 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1090.96 | USN-7774-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1041.42~22.04.1 | USN-7931-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1056.60 | USN-7774-1 |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2035.36 | USN-7931-5 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1039.40 | USN-7931-3 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | 6.14.0-1010.10~24.04.1 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1085.87 | USN-7774-3 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1092.101 | USN-7774-3 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1039.40~22.04.1 | USN-7931-3 |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1044.46+fips1 | USN-7931-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1044.50+fips1 | USN-7940-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-90.91+fips1 | USN-7931-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1045.48+fips1 | USN-7931-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1092.99+fips1 | USN-7774-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1096.105+fips1 | USN-7775-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-156.166+fips1 | USN-7774-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1092.101+fips1 | USN-7774-2 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1153.163+fips1 | USN-7922-2 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1157.164+fips1 | USN-7939-2 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1127.137 | USN-7922-2 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1156.165+fips1 | USN-7922-2 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2125.131 | USN-7907-2 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2104.110 | USN-7937-1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1142.154 | USN-7907-2 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2088.94 | USN-7907-4 |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux | 5.4.0-224.244 | USN-7922-1 |
| Ubuntu Pro 20.04 LTS | linux-aws | 5.4.0-1153.163 | USN-7922-1 |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1092.99~20.04.1 | USN-7774-1 |
| Ubuntu Pro 20.04 LTS | linux-azure | 5.4.0-1156.163 | USN-7939-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1096.105~20.04.1 | USN-7775-3 |
| Ubuntu Pro 20.04 LTS | linux-bluefield | 5.4.0-1112.119 | — |
| Ubuntu Pro 20.04 LTS | linux-gcp | 5.4.0-1156.165 | USN-7922-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1092.101~20.04.1 | USN-7774-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-156.166~20.04.1 | USN-7774-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm | 5.4.0-1099.104 | USN-7922-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1086.89~20.04.1 | USN-7774-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1087.93~20.04.1 | USN-7774-1 |
| Ubuntu Pro 20.04 LTS | linux-iot | 5.4.0-1057.60 | USN-7922-5 |
| Ubuntu Pro 20.04 LTS | linux-kvm | 5.4.0-1140.149 | USN-7922-1 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1045.45~20.04.1 | USN-7774-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle | 5.4.0-1151.161 | USN-7922-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1090.96~20.04.1 | USN-7776-1 |
| Ubuntu Pro 20.04 LTS | linux-raspi | 5.4.0-1136.149 | USN-7922-4 |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | 5.15.0-1087.91~20.04.1 | — |
| Ubuntu Pro 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1071.75 | USN-7922-1 |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-245.257 | USN-7907-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1187.200 | USN-7907-1 |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1153.163~18.04.1 | USN-7922-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | 4.15.0-1195.210 | USN-7907-5 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1156.163~18.04.1 | USN-7939-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | 4.15.0-1180.197 | USN-7907-3 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1156.165~18.04.1 | USN-7922-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-224.244~18.04.1 | USN-7922-1 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1099.104~18.04.1 | USN-7922-1 |
| Ubuntu Pro 18.04 LTS | linux-kvm | 4.15.0-1169.174 | USN-7907-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle | 4.15.0-1149.160 | USN-7907-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1151.161~18.04.1 | USN-7922-3 |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1136.149~18.04.1 | USN-7922-4 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1187.200~16.04.1 | USN-7907-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1195.210~16.04.1 | USN-7907-5 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1180.197~16.04.1 | USN-7907-3 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-245.257~16.04.1 | USN-7907-3 |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1149.160~16.04.1 | USN-7907-5 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1195.210~14.04.1 | USN-7907-5 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +77 | 6.12.0-55.22.1.el10_0 | RHSA-2025:11428 |
| RHEL 9 | rv +77 | 5.14.0-570.30.1.el9_6 | RHSA-2025:11861 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | bpftool | 7.3.0-427.81.1.el9_4 | RHSA-2025:13135 |
| RHEL 9.4 EUS | rv +64 | 5.14.0-427.81.1.el9_4 | RHSA-2025:13135 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.128.1.el9_2 | RHSA-2025:12209 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.128.1.rt14.413.el9_2 | RHSA-2025:12311 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.128.1.el9_2 | RHSA-2025:12209 |
| RHEL 9.0 E4S | kernel-rt +12 | 5.14.0-70.140.1.rt21.212.el9_0 | RHSA-2025:12525 |
| RHEL 9.0 E4S | perf +28 | 5.14.0-70.140.1.el9_0 | RHSA-2025:12526 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | kernel-doc +1 | 6.12.0-55.22.1.el10_0 | ALSA-2025:11428 |
| AlmaLinux 9 | rv +75 | 5.14.0-570.30.1.el9_6 | ALSA-2025:11861 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | kernel | 6.12.0-55.22.1.el10_0 | RLSA-2025:11428 |
| Rocky Linux 9 | kernel | 5.14.0-570.30.1.el9_6 | RLSA-2025:11861 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +6 | 6.4.0-150700.53.3.1 | SUSE-SU-2025:01951-1 |
| SLES 15 SP7 | kernel-azure +2 | 6.4.0-150700.20.3.1 | SUSE-SU-2025:01967-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.3.1.150700.17.2.1 | SUSE-SU-2025:01951-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 |
| SLES 15 SP6 | kernel-azure +2 | 6.4.0-150600.8.40.1 | SUSE-SU-2025:01965-1 |
| SLES 15 SP6 | kernel-coco +3 | 6.4.0-15061.21.coco15sp6.1 | SUSE-SU-2025:01919-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.53.1.150600.12.24.1 | SUSE-SU-2025:02000-1 |
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
Show 17 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SLES for SAP 15 SP4 | kernel-docs +4 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-30.1.21.8 | SUSE-SU-2025:20419-1 |
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-33.1 | SUSE-SU-2025:20421-1 |
| SLE Micro 6.1 | kernel-source +2 | 6.4.0-30.1 | SUSE-SU-2025:20419-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-30.1.21.8 | SUSE-SU-2025:20408-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-33.1 | SUSE-SU-2025:20413-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-30.1 | SUSE-SU-2025:20408-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.109.1 | SUSE-SU-2025:3761-1 |
| SLE Micro 5.5 | kernel-source +1 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLE Micro 5.4 | kernel-default | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.133.1 | SUSE-SU-2025:3716-1 |
| SLE Micro 5.3 | kernel-default | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.133.1 | SUSE-SU-2025:3716-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.3.1 | SUSE-SU-2025:01951-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_1 | 1-150700.1.3.1 | SUSE-SU-2025:01972-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_1 | 1-150700.15.3.1 | SUSE-SU-2025:01951-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_11 | 1-150600.1.3.2 | SUSE-SU-2025:01964-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_12 | 1-150600.13.3.1 | SUSE-SU-2025:02000-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_31 | 1-150500.11.3.1 | SUSE-SU-2025:03615-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_45 | 1-150400.9.3.1 | SUSE-SU-2025:03628-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLE HPC 15 SP4 | kernel-64kb +5 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +3 | 6.4.0-150700.7.3.1 | SUSE-SU-2025:01972-1 |
| SUSE Real Time Module 15 SP6 | kernel-rt +3 | 6.4.0-150600.10.39.1 | SUSE-SU-2025:01964-1 |
| SUSE Manager Server LTS 4.3 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SUSE Manager Server LTS 4.3 | kernel-syms +3 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SUSE Manager Proxy LTS 4.3 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SUSE Manager Proxy LTS 4.3 | kernel-syms +2 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | dtb-aarch64 +10 | 6.4.0-150600.23.53.1 | SUSE-SU-2025:02000-1 |
| openSUSE Leap 15.6 | kernel-azure +2 | 6.4.0-150600.8.40.1 | SUSE-SU-2025:01965-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.53.1.150600.12.24.1 | SUSE-SU-2025:02000-1 |
| openSUSE Leap 15.6 | kernel-rt +3 | 6.4.0-150600.10.39.1 | SUSE-SU-2025:01964-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | bpftool +14 | 6.12.29-33.102.amzn2023 | ALAS2023-2025-1111, ALAS2023-2025-994 |
| Amazon Linux 2023 | kernel-livepatch-6.1.144-170.251 | 1:1.0-0.amzn2023 | ALAS2023-2025-1111 |
| Amazon Linux 2023 | kernel-livepatch-6.12.29-33.102 | 1.0-0.amzn2023 | ALAS2023-2025-994 |
| Amazon Linux 2023 | perf +5 | 1:6.1.144-170.251.amzn2023 | ALAS2023-2025-1111 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.96.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +28 | 6.12.0-55.22.1.0.1.el10_0 | ELSA-2025-11428 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-101.33.4.3.el10uek | ELSA-2025-20530, ELSA-2025-20480 |
| Oracle Linux 9 | rv +28 | 5.14.0-570.30.1.0.1.el9_6 | ELSA-2025-11861 |
| Oracle Linux 8 | bpftool +18 | 5.15.0-312.187.5.el9uek | ELSA-2025-20552 |
| Oracle Linux 7 | kernel-uek +6 | 5.4.17-2136.347.6.el8uek | ELSA-2025-20553 |
| Oracle Linux 7 | kernel-uek-tools | 5.4.17-2136.347.6.el7uek | ELSA-2025-20553 |
Advisories 50
- RHSA-2025:13135 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:11428 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:12209 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:12311 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- WID-SEC-2025-1114 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-7774-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7940-2 linux-azure-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7940-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7935-1 linux-azure, linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7939-1 linux-azure, linux-azure-5.4 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7939-2 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7937-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7931-4 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7931-5 linux-raspi, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7774-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7931-1 linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle, linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7931-3 linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7931-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7922-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7922-4 linux-raspi, linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7907-1 linux, linux-aws, linux-aws-hwe, linux-kvm, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7922-5 linux-iot vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7922-1 linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7907-2 linux-aws-fips, linux-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7907-5 linux-azure, linux-azure-4.15, linux-oracle, vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7907-3 linux-gcp, linux-gcp-4.15, linux-hwe vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7907-4 linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7922-3 linux-oracle-5.4 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7775-3 linux-azure-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7775-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7774-4 linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7775-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7774-5 linux-nvidia-tegra-igx vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7699-2 linux-hwe-6.14, linux-oem-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7699-1 linux, linux-aws, linux-aws-6.14, linux-gcp, linux-gcp-6.14, linux-oracle, linux-oracle-6.14, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7774-3 linux-intel-iot-realtime, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7776-1 linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- ALSA-2025:11428 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:11861 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:11861 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:12526 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2025:12525 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- SUSE-SU-2025:20421-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20413-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20419-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20408-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:01972-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02000-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- DLA-4327-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-4328-1 linux-6.1 - security update Debian Security (DSA / DLA) · Mar 9, 2026
References
- https://git.kernel.org/stable/c/753f142f7ff7d2223a47105b61e1efd91587d711
- https://git.kernel.org/stable/c/9468afbda3fbfcec21ac8132364dff3dab945faf
- https://git.kernel.org/stable/c/ef5706bed97e240b4abf4233ceb03da7336bc775
- https://git.kernel.org/stable/c/22f6368768340260e862f35151d2e1c55cb1dc75
- https://git.kernel.org/stable/c/3977946f61cdba87b6b5aaf7d7094e96089583a5
- https://git.kernel.org/stable/c/6166c3cf405441f7147b322980144feb3cefc617
- https://git.kernel.org/stable/c/fbab262b0c8226c697af1851a424896ed47dedcc
- https://git.kernel.org/stable/c/be6e843fc51a584672dfd9c4a6a24c8cb81d5fb7