Skip to content
OpenAdvisories
High · 7.8 CVE-2025-38350 EUVD-2025-21953GHSA-6mr5-83vp-r7m7

net/sched: Always pass notifications when child class becomes empty

Published Jul 19, 2025 · Updated Oct 15, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: kernel Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.14 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-6.8 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.11 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-6.8 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.2 Package: linux-azure-fips Package: linux-azure-nvidia Package: linux-azure-nvidia-6.14 Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.11 Package: linux-gcp-6.14 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-6.8 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.11 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-6.8 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-ibm-6.8 Package: linux-intel Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.11 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-lowlatency-hwe-6.8 Package: linux-nvidia Package: linux-nvidia-6.11 Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-6.8 Package: linux-nvidia-lowlatency Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.11 Package: linux-oem-6.14 Package: linux-oem-6.5 Package: linux-oem-6.8 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-oracle-6.14 Package: linux-oracle-6.5 Package: linux-oracle-6.8 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-realtime-6.14 Package: linux-realtime-6.8 Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.14 Package: linux-riscv-6.5 Package: linux-riscv-6.8 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Always pass notifications when child class becomes empty

Certain classful qdiscs may invoke their classes' dequeue handler on an
enqueue operation. This may unexpectedly empty the child qdisc and thus
make an in-flight class passive via qlen_notify(). Most qdiscs do not
expect such behaviour at this point in time and may re-activate the
class eventually anyways which will lead to a use-after-free.

The referenced fix commit attempted to fix this behavior for the HFSC
case by moving the backlog accounting around, though this turned out to
be incomplete since the parent's parent may run into the issue too.
The following reproducer demonstrates this use-after-free:

tc qdisc add dev lo root handle 1: drr
tc filter add dev lo parent 1: basic classid 1:1
tc class add dev lo parent 1: classid 1:1 drr
tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1
tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0
tc qdisc add dev lo parent 2:1 handle 3: netem
tc qdisc add dev lo parent 3:1 handle 4: blackhole

echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888
tc class delete dev lo classid 1:1
echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888

Since backlog accounting issues leading to a use-after-frees on stale
class pointers is a recurring pattern at this point, this patch takes
a different approach. Instead of trying to fix the accounting, the patch
ensures that qdisc_tree_reduce_backlog always calls qlen_notify when
the child qdisc is empty. This solves the problem because deletion of
qdiscs always involves a call to qdisc_reset() and / or
qdisc_purge_queue() which ultimately resets its qlen to 0 thus causing
the following qdisc_tree_reduce_backlog() to report to the parent. Note
that this may call qlen_notify on passive classes multiple times. This
is not a problem after the recent patch series that made all the
classful qdiscs qlen_notify() handlers idempotent.

Affected products

VendorProductAffectedFixed
Linux Linux 5.4.294 – < 5.4.296, 5.10.238 – < 5.10.240, 5.15.185 – < 5.15.187, 6.1.141 – < 6.1.144, 6.6.93 – < 6.6.97, 6.12.31 – < 6.12.37, 6.14.9 – < 6.15, 6.15 5.4.296

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 6.12.37-1 —
Debian 13 linux 6.12.37-1 —
Debian 12 linux 6.1.147-1 DSA-5973-1
Debian 11 linux 5.10.244-1 DLA-4327-1
Debian 11 linux-6.1 6.1.153-1~deb11u1 DLA-4328-1
ReleasePackageFixed inAdvisory
Ubuntu Nvidia-BlueField 22.04 LTS linux-bluefield 5.15.0-1075.77 —
Ubuntu 25.04 linux-azure 6.14.0-1012.12 USN-7770-1
Ubuntu 24.04 LTS linux 6.8.0-79.79 USN-7725-1
Ubuntu 24.04 LTS linux-aws 6.8.0-1036.38 USN-7725-1
Ubuntu 24.04 LTS linux-aws-6.14 +1 6.14.0-1012.12~24.04.1 USN-7722-2, USN-7722-1
Ubuntu 24.04 LTS linux-azure 6.8.0-1038.44 USN-7802-1
Ubuntu 24.04 LTS linux-azure-nvidia 6.8.0-1025.27 USN-7809-1
Ubuntu 24.04 LTS linux-azure-nvidia-6.14 6.14.0-1007.7 —
Ubuntu 24.04 LTS linux-gcp 6.8.0-1037.39 USN-7725-1
Ubuntu 24.04 LTS linux-gcp-6.14 6.14.0-1015.16~24.04.1 USN-7722-2
Ubuntu 24.04 LTS linux-gke 6.8.0-1033.37 USN-7725-3
Ubuntu 24.04 LTS linux-gkeop 6.8.0-1020.22 USN-7725-3
Ubuntu 24.04 LTS linux-hwe-6.14 6.14.0-29.29~24.04.1 USN-7722-1
Ubuntu 24.04 LTS linux-ibm 6.8.0-1036.36 USN-7779-1
Ubuntu 24.04 LTS linux-intel +10 No fix yet —
Ubuntu 24.04 LTS linux-lowlatency 6.8.0-79.79.1 USN-7725-1
Ubuntu 24.04 LTS linux-nvidia 6.8.0-1036.39 USN-7725-3
Ubuntu 24.04 LTS linux-nvidia-lowlatency 6.8.0-1036.39.1 USN-7725-3
Ubuntu 24.04 LTS linux-nvidia-tegra 6.8.0-1010.10 —
Ubuntu 24.04 LTS linux-oem-6.14 6.14.0-1011.11 USN-7724-1
Ubuntu 24.04 LTS linux-oracle 6.8.0-1033.34 USN-7725-1
Ubuntu 24.04 LTS linux-raspi 6.8.0-1036.40 USN-7725-3
Ubuntu 24.04 LTS linux-riscv-6.14 6.14.0-29.29.1~24.04.1 —
Ubuntu 24.04 LTS linux-xilinx 6.8.0-1018.19 —
Ubuntu 22.04 LTS linux +1 5.15.0-153.163 USN-7726-1
Ubuntu 22.04 LTS linux-aws 5.15.0-1091.98 USN-7726-1
Ubuntu 22.04 LTS linux-aws-6.8 6.8.0-1036.38~22.04.1 USN-7725-1
Ubuntu 22.04 LTS linux-azure 5.15.0-1095.104 USN-7726-5
Ubuntu 22.04 LTS linux-azure-6.8 6.8.0-1036.42~22.04.1 USN-7802-1
Ubuntu 22.04 LTS linux-azure-fde 5.15.0-1095.104.1 —
Ubuntu 22.04 LTS linux-gcp 5.15.0-1091.100 USN-7726-1
Ubuntu 22.04 LTS linux-gcp-6.8 6.8.0-1037.39~22.04.1 USN-7725-3
Ubuntu 22.04 LTS linux-gke 5.15.0-1088.94 USN-7726-4
Ubuntu 22.04 LTS linux-gkeop 5.15.0-1074.82 USN-7726-1
Ubuntu 22.04 LTS linux-hwe-6.8 +1 6.8.0-79.79~22.04.1 USN-7725-3
Ubuntu 22.04 LTS linux-ibm +1 5.15.0-1085.88 USN-7726-1
Ubuntu 22.04 LTS linux-ibm-6.8 6.8.0-1036.36~22.04.1 USN-7779-1
Ubuntu 22.04 LTS linux-intel-iotg 5.15.0-1086.92 USN-7726-1
Ubuntu 22.04 LTS linux-kvm 5.15.0-1087.92 USN-7726-4
Ubuntu 22.04 LTS linux-lowlatency-hwe-6.8 6.8.0-79.79.1~22.04.1 USN-7725-1
Ubuntu 22.04 LTS linux-nvidia 5.15.0-1086.87 USN-7726-1
Ubuntu 22.04 LTS linux-nvidia-6.8 6.8.0-1036.39~22.04.1 USN-7725-3
Ubuntu 22.04 LTS linux-nvidia-tegra 5.15.0-1044.44 USN-7726-1
Ubuntu 22.04 LTS linux-nvidia-tegra-igx 5.15.0-1033.33 USN-7726-1
Ubuntu 22.04 LTS linux-oracle 5.15.0-1089.95 USN-7726-1
Ubuntu 22.04 LTS linux-oracle-6.8 6.8.0-1033.34~22.04.1 USN-7725-1
Ubuntu 22.04 LTS linux-riscv +32 No fix yet —
Ubuntu 22.04 LTS linux-xilinx-zynqmp 5.15.0-1055.59 USN-7726-1
Ubuntu 20.04 LTS linux-gke +28 No fix yet —
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS linux-gcp +14 No fix yet —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu Pro Realtime 24.04 LTS linux-raspi-realtime 6.8.0-2029.30 USN-7725-2
Ubuntu Pro Realtime 24.04 LTS linux-realtime 6.8.1-1031.32 USN-7725-2
Ubuntu Pro Realtime 24.04 LTS linux-realtime-6.14 6.14.0-1011.11~24.04.1 USN-7722-1
Ubuntu Pro Realtime 22.04 LTS linux-intel-iot-realtime 5.15.0-1084.86 USN-7726-2
Ubuntu Pro Realtime 22.04 LTS linux-realtime 5.15.0-1091.100 USN-7726-2
Ubuntu Pro Realtime 22.04 LTS linux-realtime-6.8 6.8.1-1031.32~22.04.1 —
Ubuntu Pro FIPS-updates 24.04 LTS linux-aws-fips 6.8.0-1036.38+fips1 —
Ubuntu Pro FIPS-updates 24.04 LTS linux-azure-fips 6.8.0-1040.46+fips1 —
Ubuntu Pro FIPS-updates 24.04 LTS linux-fips 6.8.0-79.79+fips1 —
Ubuntu Pro FIPS-updates 24.04 LTS linux-gcp-fips 6.8.0-1037.39+fips1 —
Ubuntu Pro FIPS-updates 22.04 LTS linux-aws-fips 5.15.0-1091.98+fips1 USN-7726-3
Ubuntu Pro FIPS-updates 22.04 LTS linux-azure-fips 5.15.0-1095.104+fips1 USN-7726-5
Ubuntu Pro FIPS-updates 22.04 LTS linux-fips 5.15.0-153.163+fips1 USN-7726-3
Ubuntu Pro FIPS-updates 22.04 LTS linux-gcp-fips 5.15.0-1091.100+fips1 USN-7726-3
Ubuntu Pro FIPS-updates 20.04 LTS linux-aws-fips 5.4.0-1150.160+fips1 USN-7754-2
Ubuntu Pro FIPS-updates 20.04 LTS linux-azure-fips 5.4.0-1155.162+fips1 USN-7819-2
Ubuntu Pro FIPS-updates 20.04 LTS linux-fips 5.4.0-1124.134 USN-7754-2
Ubuntu Pro FIPS-updates 20.04 LTS linux-gcp-fips 5.4.0-1153.162+fips1 USN-7754-2
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2122.128 USN-7755-3
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2101.107 USN-7755-2
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips 4.15.0-1139.150 USN-7755-2
Ubuntu Pro FIPS-updates 18.04 LTS linux-gcp-fips 4.15.0-2085.91 USN-7755-2
Ubuntu Pro 20.04 LTS linux 5.4.0-221.241 USN-7754-1
Ubuntu Pro 20.04 LTS linux-aws 5.4.0-1150.160 USN-7754-1
Ubuntu Pro 20.04 LTS linux-aws-5.15 5.15.0-1091.98~20.04.1 USN-7726-1
Ubuntu Pro 20.04 LTS linux-azure 5.4.0-1154.161 USN-7819-1
Ubuntu Pro 20.04 LTS linux-azure-5.15 5.15.0-1095.104~20.04.1 USN-7726-5
Ubuntu Pro 20.04 LTS linux-bluefield 5.4.0-1109.116 USN-7754-1
Ubuntu Pro 20.04 LTS linux-gcp 5.4.0-1153.162 USN-7754-1
Ubuntu Pro 20.04 LTS linux-gcp-5.15 5.15.0-1091.100~20.04.1 USN-7726-1
Ubuntu Pro 20.04 LTS linux-hwe-5.15 +1 5.15.0-153.163~20.04.1 USN-7726-1
Ubuntu Pro 20.04 LTS linux-ibm 5.4.0-1096.101 USN-7754-1
Ubuntu Pro 20.04 LTS linux-ibm-5.15 5.15.0-1085.88~20.04.1 USN-7726-4
Ubuntu Pro 20.04 LTS linux-intel-iotg-5.15 5.15.0-1086.92~20.04.1 USN-7726-1
Ubuntu Pro 20.04 LTS linux-iot 5.4.0-1054.57 USN-7754-1
Ubuntu Pro 20.04 LTS linux-kvm 5.4.0-1137.146 USN-7754-1
Ubuntu Pro 20.04 LTS linux-nvidia-tegra-5.15 5.15.0-1044.44~20.04.1 USN-7726-1
Ubuntu Pro 20.04 LTS linux-oracle 5.4.0-1149.159 USN-7820-1
Ubuntu Pro 20.04 LTS linux-oracle-5.15 5.15.0-1090.96~20.04.1 USN-7776-1
Ubuntu Pro 20.04 LTS linux-raspi 5.4.0-1133.146 USN-7754-1
Ubuntu Pro 20.04 LTS linux-riscv-5.15 5.15.0-1086.90~20.04.1 —
Ubuntu Pro 20.04 LTS linux-xilinx-zynqmp 5.4.0-1068.72 USN-7754-1
Ubuntu Pro 18.04 LTS linux 4.15.0-241.253 USN-7755-1
Ubuntu Pro 18.04 LTS linux-aws 4.15.0-1184.197 USN-7755-1
Ubuntu Pro 18.04 LTS linux-aws-5.4 5.4.0-1150.160~18.04.1 USN-7754-1
Ubuntu Pro 18.04 LTS linux-azure-4.15 4.15.0-1192.207 USN-7755-1
Ubuntu Pro 18.04 LTS linux-azure-5.4 5.4.0-1154.161~18.04.1 USN-7819-1
Ubuntu Pro 18.04 LTS linux-gcp-4.15 4.15.0-1177.194 USN-7755-1
Ubuntu Pro 18.04 LTS linux-gcp-5.4 5.4.0-1153.162~18.04.1 USN-7754-1
Ubuntu Pro 18.04 LTS linux-hwe-5.4 5.4.0-221.241~18.04.1 USN-7754-1
Ubuntu Pro 18.04 LTS linux-ibm-5.4 5.4.0-1096.101~18.04.1 USN-7754-1
Ubuntu Pro 18.04 LTS linux-kvm 4.15.0-1167.172 USN-7755-1
Ubuntu Pro 18.04 LTS linux-oracle 4.15.0-1146.157 USN-7755-1
Ubuntu Pro 18.04 LTS linux-oracle-5.4 5.4.0-1148.158~18.04.1 USN-7832-1
Ubuntu Pro 18.04 LTS linux-raspi-5.4 5.4.0-1133.146~18.04.1 USN-7754-1
Ubuntu Pro 16.04 LTS linux-aws-hwe 4.15.0-1184.197~16.04.1 USN-7755-1
Ubuntu Pro 16.04 LTS linux-azure 4.15.0-1192.207~16.04.1 USN-7755-1
Ubuntu Pro 16.04 LTS linux-gcp 4.15.0-1177.194~16.04.1 USN-7755-1
Ubuntu Pro 16.04 LTS linux-hwe 4.15.0-241.253~16.04.1 USN-7755-1
Ubuntu Pro 16.04 LTS linux-oracle 4.15.0-1148.159~16.04.1 USN-7875-1
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1192.207~14.04.1 USN-7755-1
ReleasePackageFixed inAdvisory
RHEL 10 rv +77 6.12.0-55.31.1.el10_0 RHSA-2025:15447
RHEL 9 kpatch-patch-5_14_0-570_17_1 1-10.el9_6 RHSA-2025:16538
RHEL 9 rv +77 5.14.0-570.39.1.el9_6 RHSA-2025:15011
RHEL 8 kernel-rt +12 4.18.0-553.75.1.rt7.416.el8_10 RHSA-2025:15786
RHEL 8 kpatch-patch-4_18_0-553_16_1 1-10.el8_10 RHSA-2025:16582
RHEL 8 kpatch-patch-4_18_0-553_30_1 1-9.el8_10 RHSA-2025:16582
RHEL 8 kpatch-patch-4_18_0-553_40_1 1-7.el8_10 RHSA-2025:16582
RHEL 8 kpatch-patch-4_18_0-553_53_1 1-5.el8_10 RHSA-2025:16582
RHEL 8 kpatch-patch-4_18_0-553_72_1 1-2.el8_10 RHSA-2025:16582
RHEL 8 perf +26 4.18.0-553.75.1.el8_10 RHSA-2025:15785
Show 14 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Rt Els 7 kernel-rt +7 3.10.0-1160.137.1.rt56.1289.el7 RHSA-2025:14746
RHEL 9.4 EUS bpftool 7.3.0-427.85.1.el9_4 RHSA-2025:15016
RHEL 9.4 EUS kpatch-patch-5_14_0-427_31_1 1-14.el9_4 RHSA-2025:16540
RHEL 9.4 EUS kpatch-patch-5_14_0-427_44_1 1-12.el9_4 RHSA-2025:16540
RHEL 9.4 EUS kpatch-patch-5_14_0-427_55_1 1-10.el9_4 RHSA-2025:16540
RHEL 9.4 EUS kpatch-patch-5_14_0-427_68_2 1-7.el9_4 RHSA-2025:16540
RHEL 9.4 EUS kpatch-patch-5_14_0-427_84_1 1-2.el9_4 RHSA-2025:16540
RHEL 9.4 EUS rv +64 5.14.0-427.85.1.el9_4 RHSA-2025:15016
RHEL 9.2 E4S bpftool 7.0.0-284.134.1.el9_2 RHSA-2025:14696
RHEL 9.2 E4S kernel-rt +14 5.14.0-284.134.1.rt14.419.el9_2 RHSA-2025:14691
RHEL 9.2 E4S kpatch-patch-5_14_0-284_104_1 1-10.el9_2 RHSA-2025:16539
RHEL 9.2 E4S kpatch-patch-5_14_0-284_117_1 1-7.el9_2 RHSA-2025:16539
RHEL 9.2 E4S kpatch-patch-5_14_0-284_79_1 1-14.el9_2 RHSA-2025:16539
RHEL 9.2 E4S kpatch-patch-5_14_0-284_92_1 1-12.el9_2 RHSA-2025:16539
RHEL 9.2 E4S perf +47 5.14.0-284.134.1.el9_2 RHSA-2025:14696
RHEL 9.0 E4S kernel-rt +12 5.14.0-70.144.1.rt21.216.el9_0 RHSA-2025:14749
RHEL 9.0 E4S kpatch-patch-5_14_0-70_112_1 1-12.el9_0 RHSA-2025:16541
RHEL 9.0 E4S kpatch-patch-5_14_0-70_121_1 1-11.el9_0 RHSA-2025:16541
RHEL 9.0 E4S kpatch-patch-5_14_0-70_124_1 1-9.el9_0 RHSA-2025:16541
RHEL 9.0 E4S kpatch-patch-5_14_0-70_132_1 1-5.el9_0 RHSA-2025:16541
RHEL 9.0 E4S perf +28 5.14.0-70.144.1.el9_0 RHSA-2025:14744
RHEL 8.8 TUS perf +17 4.18.0-477.107.1.el8_8 RHSA-2025:14511
RHEL 8.8 E4S kpatch-patch-4_18_0-477_67_1 1-11.el8_8 RHSA-2025:16583
RHEL 8.8 E4S kpatch-patch-4_18_0-477_81_1 1-9.el8_8 RHSA-2025:16583
RHEL 8.8 E4S kpatch-patch-4_18_0-477_89_1 1-7.el8_8 RHSA-2025:16583
RHEL 8.8 E4S kpatch-patch-4_18_0-477_97_1 1-5.el8_8 RHSA-2025:16583
RHEL 8.8 E4S perf +18 4.18.0-477.107.1.el8_8 RHSA-2025:14511
RHEL 8.6 TUS perf +17 4.18.0-372.158.1.el8_6 RHSA-2025:14692
RHEL 8.6 E4S kpatch-patch-4_18_0-372_118_1 1-11.el8_6 RHSA-2025:16580
RHEL 8.6 E4S kpatch-patch-4_18_0-372_131_1 1-10.el8_6 RHSA-2025:16580
RHEL 8.6 E4S kpatch-patch-4_18_0-372_137_1 1-7.el8_6 RHSA-2025:16580
RHEL 8.6 E4S kpatch-patch-4_18_0-372_145_1 1-5.el8_6 RHSA-2025:16580
RHEL 8.6 E4S perf +25 4.18.0-372.158.1.el8_6 RHSA-2025:14692
RHEL 8.6 AUS perf +17 4.18.0-372.158.1.el8_6 RHSA-2025:14692
RHEL 8.4 EUS Long Life perf +17 4.18.0-305.170.1.el8_4 RHSA-2025:15035
RHEL 8.4 AUS perf +17 4.18.0-305.170.1.el8_4 RHSA-2025:15035
RHEL 8.2 AUS perf +17 4.18.0-193.165.1.el8_2 RHSA-2025:14742
RHEL 7.7 AUS perf +12 3.10.0-1062.99.1.el7 RHSA-2025:14413
RHEL 7 ELS perf +18 3.10.0-1160.137.1.el7 RHSA-2025:14748

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 kernel-doc +1 6.12.0-55.31.1.el10_0 ALSA-2025:15447
AlmaLinux 9 rv +75 5.14.0-570.39.1.el9_6 ALSA-2025:15011
AlmaLinux 8 kernel-rt +9 4.18.0-553.75.1.rt7.416.el8_10 ALSA-2025:15786
AlmaLinux 8 perf +24 4.18.0-553.75.1.el8_10 ALSA-2025:15785

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 kernel 5.14.0-570.39.1.el9_6 RLSA-2025:15011
ReleasePackageFixed inAdvisory
SLES 15 SP7 kernel-64kb +5 6.4.0-150700.53.11.1 SUSE-SU-2025:02997-1
SLES 15 SP7 kernel-azure +2 6.4.0-150700.20.11.1 SUSE-SU-2025:03011-1
SLES 15 SP7 kernel-default-base 6.4.0-150700.53.11.1.150700.17.9.4 SUSE-SU-2025:02997-1
SLES 15 SP7 kernel-docs 6.4.0-150700.53.11.3 SUSE-SU-2025:02997-1
SLES 15 SP6 kernel-64kb +6 6.4.0-150600.23.65.1 SUSE-SU-2025:02996-1
SLES 15 SP6 kernel-azure +2 6.4.0-150600.8.48.1 SUSE-SU-2025:02969-1
SLES 15 SP6 kernel-coco +3 6.4.0-15061.28.coco15sp6.1 SUSE-SU-2025:02923-1
SLES 15 SP6 kernel-default-base 6.4.0-150600.23.65.1.150600.12.28.4 SUSE-SU-2025:02996-1
SLES 15 SP5 kernel-64kb +3 5.14.21-150500.55.121.2 SUSE-SU-2025:03344-1
SLES 15 SP5 kernel-default-base 5.14.21-150500.55.121.2.150500.6.57.2 SUSE-SU-2025:03344-1
SLES 15 SP5 kernel-docs +2 5.14.21-150500.55.121.1 SUSE-SU-2025:03344-1
SLES 15 SP4 kernel-64kb +6 5.14.21-150400.24.173.1 SUSE-SU-2025:02849-1
SLES 15 SP4 kernel-default-base 5.14.21-150400.24.173.1.150400.24.88.1 SUSE-SU-2025:02849-1
SLES 15 SP3 kernel-64kb +7 5.3.18-150300.59.218.1 SUSE-SU-2025:03310-1
SLES 15 SP3 kernel-default-base 5.3.18-150300.59.218.1.150300.18.130.1 SUSE-SU-2025:03310-1
Show 28 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 kernel-syms +2 4.12.14-122.269.1 SUSE-SU-2025:02846-1
SLES for SAP 16.0 kernel-64kb +7 6.12.0-160000.6.1 SUSE-SU-2025:21139-1
SLES for SAP 16.0 kernel-default-base 6.12.0-160000.6.1.160000.2.4 SUSE-SU-2025:21139-1
SLES for SAP 15 SP5 kernel-default-base 5.14.21-150500.55.121.2.150500.6.57.2 SUSE-SU-2025:03344-1
SLES for SAP 15 SP5 kernel-docs +2 5.14.21-150500.55.121.1 SUSE-SU-2025:03344-1
SLES for SAP 15 SP5 kernel-source +1 5.14.21-150500.55.121.2 SUSE-SU-2025:03344-1
SLES for SAP 15 SP4 kernel-default-base 5.14.21-150400.24.173.1.150400.24.88.1 SUSE-SU-2025:02849-1
SLES for SAP 15 SP4 kernel-docs +4 5.14.21-150400.24.173.1 SUSE-SU-2025:02849-1
SLES for SAP 15 SP3 kernel-default-base 5.3.18-150300.59.218.1.150300.18.130.1 SUSE-SU-2025:03310-1
SLES for SAP 15 SP3 kernel-docs +5 5.3.18-150300.59.218.1 SUSE-SU-2025:03310-1
SLES 16.0 kernel-64kb +7 6.12.0-160000.6.1 SUSE-SU-2025:21179-1, SUSE-SU-2025:21139-1
SLES 16.0 kernel-default-base 6.12.0-160000.6.1.160000.2.4 SUSE-SU-2025:21139-1
SLE Micro 6.2 kernel-default-base 6.12.0-160000.6.1.160000.2.4 SUSE-SU-2025:21074-1
SLE Micro 6.2 kernel-rt +5 6.12.0-160000.6.1 SUSE-SU-2026:20560-1, SUSE-SU-2025:21074-1
SLE Micro 6.1 kernel-default-base 6.4.0-32.1.21.10 SUSE-SU-2025:20602-1
SLE Micro 6.1 kernel-rt +1 6.4.0-35.1 SUSE-SU-2025:20601-1
SLE Micro 6.1 kernel-source +2 6.4.0-32.1 SUSE-SU-2025:20602-1
SLE Micro 6.0 kernel-default-base 6.4.0-32.1.21.10 SUSE-SU-2025:20586-1
SLE Micro 6.0 kernel-rt +1 6.4.0-35.1 SUSE-SU-2025:20577-1
SLE Micro 6.0 kernel-source +2 6.4.0-32.1 SUSE-SU-2025:20586-1
SLE Micro 5.5 kernel-default-base 5.14.21-150500.55.121.2.150500.6.57.2 SUSE-SU-2025:03344-1
SLE Micro 5.5 kernel-rt +1 5.14.21-150500.13.103.2 SUSE-SU-2025:02852-1
SLE Micro 5.5 kernel-source +1 5.14.21-150500.55.121.2 SUSE-SU-2025:03344-1
SLE Micro 5.4 kernel-default 5.14.21-150400.24.173.1 SUSE-SU-2025:02849-1
SLE Micro 5.4 kernel-default-base 5.14.21-150400.24.173.1.150400.24.88.1 SUSE-SU-2025:02849-1
SLE Micro 5.4 kernel-rt +1 5.14.21-150400.15.127.1 SUSE-SU-2025:02851-1
SLE Micro 5.3 kernel-default 5.14.21-150400.24.173.1 SUSE-SU-2025:02849-1
SLE Micro 5.3 kernel-default-base 5.14.21-150400.24.173.1.150400.24.88.1 SUSE-SU-2025:02849-1
SLE Micro 5.3 kernel-rt +1 5.14.21-150400.15.127.1 SUSE-SU-2025:02851-1
SLE Micro 5.2 kernel-default 5.3.18-150300.59.218.1 SUSE-SU-2025:03310-1
SLE Micro 5.2 kernel-default-base 5.3.18-150300.59.218.1.150300.18.130.1 SUSE-SU-2025:03310-1
SLE Micro 5.2 kernel-rt +1 5.3.18-150300.220.1 SUSE-SU-2025:03384-1
SLE Micro 5.1 kernel-default 5.3.18-150300.59.218.1 SUSE-SU-2025:03310-1
SLE Micro 5.1 kernel-default-base 5.3.18-150300.59.218.1.150300.18.130.1 SUSE-SU-2025:03310-1
SLE Micro 5.1 kernel-rt +1 5.3.18-150300.220.1 SUSE-SU-2025:03384-1
SLE Live Patching 15 SP7 kernel-default 6.4.0-150700.53.11.1 SUSE-SU-2025:02997-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_3 1-150700.1.5.1 SUSE-SU-2025:02853-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_3 1-150700.15.3.4 SUSE-SU-2025:02997-1
SLE Live Patching 15 SP6 kernel-default 6.4.0-150600.23.65.1 SUSE-SU-2025:02996-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6-RT_Update_14 1-150600.1.5.1 SUSE-SU-2025:03023-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_14 1-150600.13.3.4 SUSE-SU-2025:02996-1
SLE Live Patching 15 SP5 kernel-default 5.14.21-150500.55.121.2 SUSE-SU-2025:03344-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_30 1-150500.11.5.1 SUSE-SU-2025:03344-1
SLE Live Patching 15 SP4 kernel-default 5.14.21-150400.24.173.1 SUSE-SU-2025:02849-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_43 1-150400.9.3.1 SUSE-SU-2025:02849-1
SLE Live Patching 15 SP3 kernel-default 5.3.18-150300.59.218.1 SUSE-SU-2025:03310-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_61 1-150300.7.3.1 SUSE-SU-2025:03310-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.269.1 SUSE-SU-2025:02846-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_71 1-8.3.1 SUSE-SU-2025:02846-1
SLE HPC 15 SP5 kernel-64kb +2 5.14.21-150500.55.121.2 SUSE-SU-2025:03344-1
SLE HPC 15 SP5 kernel-default-base 5.14.21-150500.55.121.2.150500.6.57.2 SUSE-SU-2025:03344-1
SLE HPC 15 SP5 kernel-docs +2 5.14.21-150500.55.121.1 SUSE-SU-2025:03344-1
SLE HPC 15 SP4 kernel-64kb +5 5.14.21-150400.24.173.1 SUSE-SU-2025:02849-1
SLE HPC 15 SP4 kernel-default-base 5.14.21-150400.24.173.1.150400.24.88.1 SUSE-SU-2025:02849-1
SLE HPC 15 SP3 kernel-64kb +6 5.3.18-150300.59.218.1 SUSE-SU-2025:03310-1
SLE HPC 15 SP3 kernel-default-base 5.3.18-150300.59.218.1.150300.18.130.1 SUSE-SU-2025:03310-1
SUSE Real Time Module 15 SP7 kernel-rt +2 6.4.0-150700.7.13.1 SUSE-SU-2025:02853-1
SUSE Real Time Module 15 SP6 kernel-rt +3 6.4.0-150600.10.49.1 SUSE-SU-2025:03023-1
SUSE Manager Server LTS 4.3 kernel-default-base 5.14.21-150400.24.173.1.150400.24.88.1 SUSE-SU-2025:02849-1
SUSE Manager Server LTS 4.3 kernel-syms +3 5.14.21-150400.24.173.1 SUSE-SU-2025:02849-1
SUSE Manager Proxy LTS 4.3 kernel-default-base 5.14.21-150400.24.173.1.150400.24.88.1 SUSE-SU-2025:02849-1
SUSE Manager Proxy LTS 4.3 kernel-syms +2 5.14.21-150400.24.173.1 SUSE-SU-2025:02849-1
SUSE Enterprise Storage 7.1 kernel-64kb +6 5.3.18-150300.59.218.1 SUSE-SU-2025:03310-1
SUSE Enterprise Storage 7.1 kernel-default-base 5.3.18-150300.59.218.1.150300.18.130.1 SUSE-SU-2025:03310-1
ReleasePackageFixed inAdvisory
openSUSE Leap 16.0 kernel-default-base 6.12.0-160000.6.1.160000.2.4 openSUSE-SU-2025:20081-1
openSUSE Leap 16.0 kernel-rt +10 6.12.0-160000.6.1 openSUSE-SU-2025:20081-1
openSUSE Leap 15.6 dtb-aarch64 +10 6.4.0-150600.23.65.1 SUSE-SU-2025:02996-1
openSUSE Leap 15.6 kernel-azure +2 6.4.0-150600.8.48.1 SUSE-SU-2025:02969-1
openSUSE Leap 15.6 kernel-default-base 6.4.0-150600.23.65.1.150600.12.28.4 SUSE-SU-2025:02996-1
openSUSE Leap 15.6 kernel-rt +3 6.4.0-150600.10.49.1 SUSE-SU-2025:03023-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 kernel-livepatch-6.12.37-61.105 +1 1:1.0-0.amzn2023 ALAS2023-2025-1130, ALAS2023-2025-1111
Amazon Linux 2023 perf +14 1:6.1.144-170.251.amzn2023 ALAS2023-2025-1111
Amazon Linux 2023 perf6.12 +14 1:6.12.37-61.105.amzn2023 ALAS2023-2025-1130

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) kernel 5.15.200.1-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 rv +28 6.12.0-55.31.1.0.1.el10_0 ELSA-2025-15447
Oracle Linux 9 kernel-uek +34 6.12.0-103.40.4.1.el10uek ELSA-2025-20551
Oracle Linux 9 rv +28 5.14.0-570.39.1.0.1.el9_6 ELSA-2025-15011
Oracle Linux 8 kernel-uek +17 5.15.0-312.187.5.el9uek ELSA-2025-20552
Oracle Linux 8 perf +19 4.18.0-553.75.1.el8_10 ELSA-2025-20552, ELSA-2025-15785
Oracle Linux 7 perf +12 3.10.0-1160.119.1.0.11.el7 ELSA-2025-14748

Advisories 50

References