Description
In the Linux kernel, the following vulnerability has been resolved:
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
Syzbot reported a slab-use-after-free with the following call trace:
==================================================================
BUG: KASAN: slab-use-after-free in tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840
Read of size 8 at addr ffff88807a733000 by task kworker/1:0/25
Call Trace:
kasan_report+0xd9/0x110 mm/kasan/report.c:601
tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840
crypto_request_complete include/crypto/algapi.h:266
aead_request_complete include/crypto/internal/aead.h:85
cryptd_aead_crypt+0x3b8/0x750 crypto/cryptd.c:772
crypto_request_complete include/crypto/algapi.h:266
cryptd_queue_worker+0x131/0x200 crypto/cryptd.c:181
process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
Allocated by task 8355:
kzalloc_noprof include/linux/slab.h:778
tipc_crypto_start+0xcc/0x9e0 net/tipc/crypto.c:1466
tipc_init_net+0x2dd/0x430 net/tipc/core.c:72
ops_init+0xb9/0x650 net/core/net_namespace.c:139
setup_net+0x435/0xb40 net/core/net_namespace.c:343
copy_net_ns+0x2f0/0x670 net/core/net_namespace.c:508
create_new_namespaces+0x3ea/0xb10 kernel/nsproxy.c:110
unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:228
ksys_unshare+0x419/0x970 kernel/fork.c:3323
__do_sys_unshare kernel/fork.c:3394
Freed by task 63:
kfree+0x12a/0x3b0 mm/slub.c:4557
tipc_crypto_stop+0x23c/0x500 net/tipc/crypto.c:1539
tipc_exit_net+0x8c/0x110 net/tipc/core.c:119
ops_exit_list+0xb0/0x180 net/core/net_namespace.c:173
cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640
process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
After freed the tipc_crypto tx by delete namespace, tipc_aead_encrypt_done
may still visit it in cryptd_queue_worker workqueue.
I reproduce this issue by:
ip netns add ns1
ip link add veth1 type veth peer name veth2
ip link set veth1 netns ns1
ip netns exec ns1 tipc bearer enable media eth dev veth1
ip netns exec ns1 tipc node set key this_is_a_master_key master
ip netns exec ns1 tipc bearer disable media eth dev veth1
ip netns del ns1
The key of reproduction is that, simd_aead_encrypt is interrupted, leading
to crypto_simd_usable() return false. Thus, the cryptd_queue_worker is
triggered, and the tipc_crypto tx will be visited.
tipc_disc_timeout
tipc_bearer_xmit_skb
tipc_crypto_xmit
tipc_aead_encrypt
crypto_aead_encrypt
// encrypt()
simd_aead_encrypt
// crypto_simd_usable() is false
child = &ctx->cryptd_tfm->base;
simd_aead_encrypt
crypto_aead_encrypt
// encrypt()
cryptd_aead_encrypt_enqueue
cryptd_aead_enqueue
cryptd_enqueue_request
// trigger cryptd_queue_worker
queue_work_on(smp_processor_id(), cryptd_wq, &cpu_queue->work)
Fix this by holding net reference count before encrypt.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.5 | 5.10.238 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.12.32-1 | — |
| Debian 13 | linux | 6.12.32-1 | — |
| Debian 12 | linux | 6.1.147-1 | DSA-5973-1 |
| Debian 11 | linux | 5.10.244-1 | DLA-4327-1 |
| Debian 11 | linux-6.1 | 6.1.153-1~deb11u1 | DLA-4328-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1016.20 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1074.76 | — |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 25.04 | linux-azure | 6.14.0-1012.12 | USN-7770-1 |
| Ubuntu 25.04 | linux-raspi | 6.14.0-1014.14 | USN-7789-2 |
| Ubuntu 24.04 LTS | linux | 6.8.0-100.100 | USN-8028-1 |
| Ubuntu 24.04 LTS | linux-aws +1 | 6.8.0-1046.49 | USN-8028-5 |
| Ubuntu 24.04 LTS | linux-aws-6.14 +1 | 6.14.0-1013.13~24.04.1 | USN-7789-1, USN-7769-3 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1046.52 | USN-8074-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1046.53 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1039.42 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia-6.14 | 6.14.0-1007.7 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1047.50 | USN-8031-3 |
| Ubuntu 24.04 LTS | linux-gcp-6.14 | 6.14.0-1016.17~24.04.1 | USN-7769-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1043.48 | USN-8031-3 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1030.33 | USN-8028-5 |
| Ubuntu 24.04 LTS | linux-hwe-6.14 | 6.14.0-32.32~24.04.1 | USN-7769-3 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1044.44 | USN-8028-8 |
| Ubuntu 24.04 LTS | linux-intel +10 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-100.100.1 | USN-8052-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1046.49.1 | USN-8028-7 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1020.20 | — |
| Ubuntu 24.04 LTS | linux-oem-6.14 | 6.14.0-1012.12 | USN-7771-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1043.44 | USN-8028-5 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1047.51 | USN-8028-1 |
| Ubuntu 24.04 LTS | linux-riscv-6.14 | 6.14.0-32.32.1~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1023.24 | USN-8052-2 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-152.162 | USN-7704-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1090.97 | USN-7704-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 +1 | 6.8.0-1046.49~22.04.1 | USN-8028-5 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1094.103 | USN-7711-1 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1051.57~22.04.1 | USN-8126-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1094.103.1 | — |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1046.53~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1090.99 | USN-7704-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1047.50~22.04.2 | USN-8031-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1087.93 | USN-7704-5 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1073.81 | USN-7704-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 +1 | 6.8.0-100.100~22.04.1 | USN-8028-6 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1084.87 | USN-7704-3 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1044.44~22.04.1 | USN-8028-8 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1085.91 | USN-7704-3 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1086.91 | USN-7704-5 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-100.100.1~22.04.1 | USN-8028-6 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1085.86 | USN-7704-4 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1043.43 | USN-7704-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1032.32 | USN-7704-1 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1088.94 | USN-7704-3 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1043.44~22.04.1 | USN-8028-5 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1054.58 | USN-7704-1 |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2037.38 | USN-8028-3 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1041.42 | USN-8028-3 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | 6.14.0-1012.12~24.04.1 | USN-7769-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1083.85 | USN-7704-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1090.99 | USN-7704-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1041.42~22.04.1 | USN-8028-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1046.49+fips1 | USN-8028-4 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1046.52+fips1 | USN-8074-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-100.100+fips1 | USN-8028-4 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1047.50+fips1 | USN-8031-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1090.97+fips1 | USN-7704-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1094.103+fips1 | USN-7712-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-152.162+fips1 | USN-7704-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1090.99+fips1 | USN-7704-2 |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1090.97~20.04.1 | USN-7704-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1094.103~20.04.1 | USN-7712-2 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1090.99~20.04.1 | USN-7704-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-152.162~20.04.1 | USN-7704-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1083.86~20.04.1 | USN-7704-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1085.91~20.04.1 | USN-7704-1 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1043.43~20.04.1 | USN-7704-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1088.94~20.04.1 | USN-7704-1 |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | 5.15.0-1085.89~20.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +77 | 6.12.0-55.25.1.el10_0 | RHSA-2025:12662 |
| RHEL 9 | kpatch-patch-5_14_0-570_17_1 | 1-8.el9_6 | RHSA-2025:15798 |
| RHEL 9 | kpatch-patch-5_14_0-570_39_1 | 1-1.el9_6 | RHSA-2025:15798 |
| RHEL 9 | rv +77 | 5.14.0-570.32.1.el9_6 | RHSA-2025:12746 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.66.1.rt7.407.el8_10 | RHSA-2025:12753 |
| RHEL 8 | kpatch-patch-4_18_0-553_16_1 | 1-8.el8_10 | RHSA-2025:15921 |
| RHEL 8 | kpatch-patch-4_18_0-553_30_1 | 1-7.el8_10 | RHSA-2025:15921 |
| RHEL 8 | kpatch-patch-4_18_0-553_40_1 | 1-5.el8_10 | RHSA-2025:15921 |
| RHEL 8 | kpatch-patch-4_18_0-553_53_1 | 1-3.el8_10 | RHSA-2025:15921 |
| RHEL 8 | kpatch-patch-4_18_0-553_72_1 | 1-1.el8_10 | RHSA-2025:15921 |
| RHEL 8 | perf +26 | 4.18.0-553.66.1.el8_10 | RHSA-2025:12752 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | bpftool | 7.3.0-427.81.1.el9_4 | RHSA-2025:13135 |
| RHEL 9.4 EUS | kpatch-patch-5_14_0-427_31_1 | 1-12.el9_4 | RHSA-2025:15932 |
| RHEL 9.4 EUS | kpatch-patch-5_14_0-427_44_1 | 1-10.el9_4 | RHSA-2025:15932 |
| RHEL 9.4 EUS | kpatch-patch-5_14_0-427_55_1 | 1-8.el9_4 | RHSA-2025:15932 |
| RHEL 9.4 EUS | kpatch-patch-5_14_0-427_68_2 | 1-5.el9_4 | RHSA-2025:15932 |
| RHEL 9.4 EUS | kpatch-patch-5_14_0-427_84_1 | 1-1.el9_4 | RHSA-2025:15932 |
| RHEL 9.4 EUS | rv +64 | 5.14.0-427.81.1.el9_4 | RHSA-2025:13135 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.128.1.el9_2 | RHSA-2025:12209 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.128.1.rt14.413.el9_2 | RHSA-2025:12311 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_104_1 | 1-8.el9_2 | RHSA-2025:15931 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_117_1 | 1-5.el9_2 | RHSA-2025:15931 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_134_1 | 1-1.el9_2 | RHSA-2025:15931 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_79_1 | 1-12.el9_2 | RHSA-2025:15931 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_92_1 | 1-10.el9_2 | RHSA-2025:15931 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.128.1.el9_2 | RHSA-2025:12209 |
| RHEL 9.0 E4S | kernel-rt +12 | 5.14.0-70.141.1.rt21.213.el9_0 | RHSA-2025:13029 |
| RHEL 9.0 E4S | kpatch-patch-5_14_0-70_112_1 | 1-10.el9_0 | RHSA-2025:15933 |
| RHEL 9.0 E4S | kpatch-patch-5_14_0-70_121_1 | 1-9.el9_0 | RHSA-2025:15933 |
| RHEL 9.0 E4S | kpatch-patch-5_14_0-70_124_1 | 1-7.el9_0 | RHSA-2025:15933 |
| RHEL 9.0 E4S | kpatch-patch-5_14_0-70_132_1 | 1-3.el9_0 | RHSA-2025:15933 |
| RHEL 9.0 E4S | kpatch-patch-5_14_0-70_144_1 | 1-1.el9_0 | RHSA-2025:15933 |
| RHEL 9.0 E4S | perf +28 | 5.14.0-70.141.1.el9_0 | RHSA-2025:13030 |
| RHEL 8.8 TUS | perf +17 | 4.18.0-477.104.1.el8_8 | RHSA-2025:13061 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_107_1 | 1-1.el8_8 | RHSA-2025:16008 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_67_1 | 1-9.el8_8 | RHSA-2025:16008 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_81_1 | 1-7.el8_8 | RHSA-2025:16008 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_89_1 | 1-5.el8_8 | RHSA-2025:16008 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_97_1 | 1-3.el8_8 | RHSA-2025:16008 |
| RHEL 8.8 E4S | perf +18 | 4.18.0-477.104.1.el8_8 | RHSA-2025:13061 |
| RHEL 8.6 TUS | perf +17 | 4.18.0-372.157.1.el8_6 | RHSA-2025:13776 |
| RHEL 8.6 E4S | kpatch-patch-4_18_0-372_118_1 | 1-9.el8_6 | RHSA-2025:16045 |
| RHEL 8.6 E4S | kpatch-patch-4_18_0-372_131_1 | 1-8.el8_6 | RHSA-2025:16045 |
| RHEL 8.6 E4S | kpatch-patch-4_18_0-372_137_1 | 1-5.el8_6 | RHSA-2025:16045 |
| RHEL 8.6 E4S | kpatch-patch-4_18_0-372_145_1 | 1-3.el8_6 | RHSA-2025:16045 |
| RHEL 8.6 E4S | kpatch-patch-4_18_0-372_158_1 | 1-1.el8_6 | RHSA-2025:16045 |
| RHEL 8.6 E4S | perf +25 | 4.18.0-372.157.1.el8_6 | RHSA-2025:13776 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.157.1.el8_6 | RHSA-2025:13776 |
| RHEL 8.4 EUS Long Life | perf +17 | 4.18.0-305.166.1.el8_4 | RHSA-2025:13120 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.166.1.el8_4 | RHSA-2025:13120 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | kernel-doc +1 | 6.12.0-55.25.1.el10_0 | ALSA-2025:12662 |
| AlmaLinux 9 | rv +75 | 5.14.0-570.32.1.el9_6 | ALSA-2025:12746 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.66.1.rt7.407.el8_10 | ALSA-2025:12753 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.66.1.el8_10 | ALSA-2025:12752 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | kernel | 6.12.0-55.25.1.el10_0 | RLSA-2025:12662 |
| Rocky Linux 9 | kernel | 5.14.0-570.32.1.el9_6 | RLSA-2025:12746 |
| Rocky Linux 8 | kernel | 4.18.0-553.66.1.el8_10 | RLSA-2025:12752 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.66.1.rt7.407.el8_10 | RLSA-2025:12753 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +5 | 6.4.0-150700.53.11.1 | SUSE-SU-2025:02997-1 |
| SLES 15 SP7 | kernel-azure +2 | 6.4.0-150700.20.11.1 | SUSE-SU-2025:03011-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.11.1.150700.17.9.4 | SUSE-SU-2025:02997-1 |
| SLES 15 SP7 | kernel-docs | 6.4.0-150700.53.11.3 | SUSE-SU-2025:02997-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.65.1 | SUSE-SU-2025:02996-1 |
| SLES 15 SP6 | kernel-azure +2 | 6.4.0-150600.8.48.1 | SUSE-SU-2025:02969-1 |
| SLES 15 SP6 | kernel-coco +3 | 6.4.0-15061.28.coco15sp6.1 | SUSE-SU-2025:02923-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.65.1.150600.12.28.4 | SUSE-SU-2025:02996-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +7 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21139-1 |
| SLES 16.0 | kernel-64kb +7 | 6.12.0-160000.6.1 | SUSE-SU-2025:21179-1, SUSE-SU-2025:21139-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21139-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21074-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.6.1 | SUSE-SU-2026:20560-1, SUSE-SU-2025:21074-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-32.1.21.10 | SUSE-SU-2025:20602-1 |
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-35.1 | SUSE-SU-2025:20601-1 |
| SLE Micro 6.1 | kernel-source +2 | 6.4.0-32.1 | SUSE-SU-2025:20602-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-32.1.21.10 | SUSE-SU-2025:20586-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-35.1 | SUSE-SU-2025:20577-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-32.1 | SUSE-SU-2025:20586-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.11.1 | SUSE-SU-2025:02997-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_3 | 1-150700.1.5.1 | SUSE-SU-2025:02853-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_3 | 1-150700.15.3.4 | SUSE-SU-2025:02997-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.65.1 | SUSE-SU-2025:02996-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_14 | 1-150600.1.5.1 | SUSE-SU-2025:03023-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_14 | 1-150600.13.3.4 | SUSE-SU-2025:02996-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.13.1 | SUSE-SU-2025:02853-1 |
| SUSE Real Time Module 15 SP6 | kernel-rt +3 | 6.4.0-150600.10.49.1 | SUSE-SU-2025:03023-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | openSUSE-SU-2025:20081-1 |
| openSUSE Leap 16.0 | kernel-rt +10 | 6.12.0-160000.6.1 | openSUSE-SU-2025:20081-1 |
| openSUSE Leap 15.6 | dtb-aarch64 +10 | 6.4.0-150600.23.65.1 | SUSE-SU-2025:02996-1 |
| openSUSE Leap 15.6 | kernel-azure +2 | 6.4.0-150600.8.48.1 | SUSE-SU-2025:02969-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.65.1.150600.12.28.4 | SUSE-SU-2025:02996-1 |
| openSUSE Leap 15.6 | kernel-rt +3 | 6.4.0-150600.10.49.1 | SUSE-SU-2025:03023-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.96.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +28 | 6.12.0-55.25.1.0.1.el10_0 | ELSA-2025-12662 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-101.33.4.3.el10uek | ELSA-2025-20530, ELSA-2025-20480 |
| Oracle Linux 9 | rv +28 | 5.14.0-570.32.1.0.1.el9_6 | ELSA-2025-12746 |
| Oracle Linux 8 | kernel-uek +17 | 5.15.0-312.187.5.el9uek | ELSA-2025-20552 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.66.1.el8_10 | ELSA-2025-20552, ELSA-2025-12752 |
Advisories 50
- RHSA-2025:15933 Red Hat Security Advisory: kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, kpatch-patch-5_14_0-70_132_1, and kpatch-patch-5_14_0-70_144_1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:16008 Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_67_1, kpatch-patch-4_18_0-477_81_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:16045 Red Hat Security Advisory: kpatch-patch-4_18_0-372_118_1, kpatch-patch-4_18_0-372_131_1, kpatch-patch-4_18_0-372_137_1, kpatch-patch-4_18_0-372_145_1, and kpatch-patch-4_18_0-372_158_1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:15798 Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1 and kpatch-patch-5_14_0-570_39_1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:15921 Red Hat Security Advisory: kpatch-patch-4_18_0-553_16_1, kpatch-patch-4_18_0-553_30_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, and kpatch-patch-4_18_0-553_72_1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:15931 Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_79_1, and kpatch-patch-5_14_0-284_92_1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:13135 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:12209 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:12311 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:12662 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:12746 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:15932 Red Hat Security Advisory: kpatch-patch-5_14_0-427_31_1, kpatch-patch-5_14_0-427_44_1, kpatch-patch-5_14_0-427_55_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:12752 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2025:12753 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- WID-SEC-2025-1350 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Nov 12, 2026
- USN-8028-5 linux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8126-1 linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8028-8 linux-ibm, linux-ibm-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8028-6 linux-hwe-6.8, linux-lowlatency-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8052-1 linux-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8052-2 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8074-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8074-2 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8031-3 linux-gcp, linux-gke vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8028-1 linux, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8028-4 linux-aws-fips, linux-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8028-3 linux-realtime, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8028-2 linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8028-7 linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8031-2 linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8031-1 linux-gcp-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7704-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-hwe-5.15, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7789-1 linux-oracle-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7769-2 linux-realtime-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7771-1 linux-oem-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7769-1 linux, linux-aws, linux-gcp, linux-gcp-6.14, linux-oracle, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7712-2 linux-azure-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7712-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7711-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7704-5 linux-gke, linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7704-4 linux-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7704-3 linux-ibm, linux-intel-iotg, linux-oracle, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7704-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7769-3 linux-aws-6.14, linux-hwe-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- ALSA-2025:12746 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:12662 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:12752 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:12753 Important: kernel-rt security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:13776 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2025:13120 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Sep 19, 2026
References
- https://git.kernel.org/stable/c/d42ed4de6aba232d946d20653a70f79158a6535b
- https://git.kernel.org/stable/c/f5c2c4eaaa5a8e7e0685ec031d480e588e263e59
- https://git.kernel.org/stable/c/b8fcae6d2e93c54cacb8f579a77d827c1c643eb5
- https://git.kernel.org/stable/c/b19fc1d0be3c3397e5968fe2627f22e7f84673b1
- https://git.kernel.org/stable/c/689a205cd968a1572ab561b0c4c2d50a10e9d3b0
- https://git.kernel.org/stable/c/4a0fddc2c0d5c28aec8c262ad4603be0bef1938c
- https://git.kernel.org/stable/c/e279024617134c94fd3e37470156534d5f2b3472