Description
In the Linux kernel, the following vulnerability has been resolved:
xfrm: interface: fix use-after-free after changing collect_md xfrm interface
collect_md property on xfrm interfaces can only be set on device creation,
thus xfrmi_changelink() should fail when called on such interfaces.
The check to enforce this was done only in the case where the xi was
returned from xfrmi_locate() which doesn't look for the collect_md
interface, and thus the validation was never reached.
Calling changelink would thus errornously place the special interface xi
in the xfrmi_net->xfrmi hash, but since it also exists in the
xfrmi_net->collect_md_xfrmi pointer it would lead to a double free when
the net namespace was taken down [1].
Change the check to use the xi from netdev_priv which is available earlier
in the function to prevent changes in xfrm collect_md interfaces.
[1] resulting oops:
[ 8.516540] kernel BUG at net/core/dev.c:12029!
[ 8.516552] Oops: invalid opcode: 0000 [#1] SMP NOPTI
[ 8.516559] CPU: 0 UID: 0 PID: 12 Comm: kworker/u80:0 Not tainted 6.15.0-virtme #5 PREEMPT(voluntary)
[ 8.516565] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 8.516569] Workqueue: netns cleanup_net
[ 8.516579] RIP: 0010:unregister_netdevice_many_notify+0x101/0xab0
[ 8.516590] Code: 90 0f 0b 90 48 8b b0 78 01 00 00 48 8b 90 80 01 00 00 48 89 56 08 48 89 32 4c 89 80 78 01 00 00 48 89 b8 80 01 00 00 eb ac 90 <0f> 0b 48 8b 45 00 4c 8d a0 88 fe ff ff 48 39 c5 74 5c 41 80 bc 24
[ 8.516593] RSP: 0018:ffffa93b8006bd30 EFLAGS: 00010206
[ 8.516598] RAX: ffff98fe4226e000 RBX: ffffa93b8006bd58 RCX: ffffa93b8006bc60
[ 8.516601] RDX: 0000000000000004 RSI: 0000000000000000 RDI: dead000000000122
[ 8.516603] RBP: ffffa93b8006bdd8 R08: dead000000000100 R09: ffff98fe4133c100
[ 8.516605] R10: 0000000000000000 R11: 00000000000003d2 R12: ffffa93b8006be00
[ 8.516608] R13: ffffffff96c1a510 R14: ffffffff96c1a510 R15: ffffa93b8006be00
[ 8.516615] FS: 0000000000000000(0000) GS:ffff98fee73b7000(0000) knlGS:0000000000000000
[ 8.516619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 8.516622] CR2: 00007fcd2abd0700 CR3: 000000003aa40000 CR4: 0000000000752ef0
[ 8.516625] PKRU: 55555554
[ 8.516627] Call Trace:
[ 8.516632] <TASK>
[ 8.516635] ? rtnl_is_locked+0x15/0x20
[ 8.516641] ? unregister_netdevice_queue+0x29/0xf0
[ 8.516650] ops_undo_list+0x1f2/0x220
[ 8.516659] cleanup_net+0x1ad/0x2e0
[ 8.516664] process_one_work+0x160/0x380
[ 8.516673] worker_thread+0x2aa/0x3c0
[ 8.516679] ? __pfx_worker_thread+0x10/0x10
[ 8.516686] kthread+0xfb/0x200
[ 8.516690] ? __pfx_kthread+0x10/0x10
[ 8.516693] ? __pfx_kthread+0x10/0x10
[ 8.516697] ret_from_fork+0x82/0xf0
[ 8.516705] ? __pfx_kthread+0x10/0x10
[ 8.516709] ret_from_fork_asm+0x1a/0x30
[ 8.516718] </TASK>
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 6.1 | 6.1.148 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.16.3-1 | — |
| Debian 13 | linux | 6.12.41-1 | DSA-5975-1 |
| Debian 12 | linux | 6.1.148-1 | — |
| Debian 11 | linux-6.1 | 6.1.153-1~deb11u1 | DLA-4328-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1012.16 | — |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 25.04 | linux-azure | 6.14.0-1013.13 | USN-7798-1 |
| Ubuntu 25.04 | linux-raspi | 6.14.0-1015.15 | USN-7821-1 |
| Ubuntu 24.04 LTS | linux | 6.8.0-85.85 | USN-7792-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1040.42 | USN-7792-1 |
| Ubuntu 24.04 LTS | linux-aws-6.14 +1 | 6.14.0-1014.14~24.04.1 | USN-7791-4, USN-7791-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1040.46 | USN-7808-1 |
| Ubuntu 24.04 LTS | linux-azure-6.14 | 6.14.0-1013.13~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1025.27 | USN-7809-1 |
| Ubuntu 24.04 LTS | linux-azure-nvidia-6.14 | 6.14.0-1007.7 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1041.43 | USN-7792-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.14 | 6.14.0-1017.18~24.04.1 | USN-7791-3 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1037.41 | USN-7792-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1024.26 | USN-7792-1 |
| Ubuntu 24.04 LTS | linux-hwe-6.14 | 6.14.0-33.33~24.04.1 | USN-7791-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1038.38 | USN-7792-1 |
| Ubuntu 24.04 LTS | linux-intel +10 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-85.85.1 | USN-7792-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1040.43 | USN-7792-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1040.43.1 | USN-7792-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1012.12 | — |
| Ubuntu 24.04 LTS | linux-oem-6.14 | 6.14.0-1013.13 | USN-7791-3 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1037.38 | USN-7801-2 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1040.44 | USN-7792-2 |
| Ubuntu 24.04 LTS | linux-riscv-6.14 | 6.14.0-33.33.1~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1018.19 | — |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1040.42~22.04.1 | USN-7792-3 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1040.46~22.04.1 | USN-7808-2 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1041.43~22.04.1 | USN-7792-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-85.85~22.04.1 | USN-7801-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1038.38~22.04.1 | USN-7792-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-85.85.1~22.04.1 | USN-7792-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1040.43~22.04.1 | USN-7792-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1037.38~22.04.1 | USN-7801-3 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-86.87~22.04.1 | — |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2031.32 | USN-7800-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1035.36 | USN-7799-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | 6.14.0-1013.13~24.04.1 | USN-7791-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1035.36~22.04.1 | USN-7799-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1040.42+fips1 | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1040.46+fips1 | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-85.85+fips1 | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1041.43+fips1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +77 | 6.12.0-55.33.1.el10_0 | RHSA-2025:15782 |
| RHEL 9 | rv +77 | 5.14.0-570.39.1.el9_6 | RHSA-2025:15011 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | bpftool | 7.3.0-427.92.1.el9_4 | RHSA-2025:17241 |
| RHEL 9.4 EUS | rv +64 | 5.14.0-427.92.1.el9_4 | RHSA-2025:17241 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | kernel-doc +1 | 6.12.0-55.33.1.el10_0 | ALSA-2025:15782 |
| AlmaLinux 9 | rv +75 | 5.14.0-570.39.1.el9_6 | ALSA-2025:15011 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | kernel | 5.14.0-570.39.1.el9_6 | RLSA-2025:15011 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +6 | 6.4.0-150700.53.16.1 | SUSE-SU-2025:03290-1 |
| SLES 15 SP7 | kernel-azure +1 | 6.4.0-150700.20.15.2 | SUSE-SU-2025:03633-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.16.1.150700.17.11.2 | SUSE-SU-2025:03290-1 |
| SLES 15 SP7 | kernel-syms-azure | 6.4.0-150700.20.15.1 | SUSE-SU-2025:03633-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.70.1 | SUSE-SU-2025:03301-1 |
| SLES 15 SP6 | kernel-azure +2 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 |
| SLES 15 SP6 | kernel-coco +3 | 6.4.0-15061.32.coco15sp6.1 | SUSE-SU-2025:03602-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.70.1.150600.12.30.2 | SUSE-SU-2025:03301-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +7 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21139-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_0 | 5-160000.4.3 | SUSE-SU-2026:20149-1 |
| SLES 16.0 | kernel-64kb +7 | 6.12.0-160000.6.1 | SUSE-SU-2025:21179-1, SUSE-SU-2025:21139-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21139-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_0 | 5-160000.4.3 | SUSE-SU-2026:20149-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21074-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_0 | 4-160000.3.4 | SUSE-SU-2026:20164-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_0 | 5-160000.4.3 | SUSE-SU-2026:20169-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.6.1 | SUSE-SU-2026:20560-1, SUSE-SU-2025:21074-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-34.1.21.11 | SUSE-SU-2025:20669-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_10 | 8-1.1 | SUSE-SU-2025:21122-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_4 | 13-1.1 | SUSE-SU-2025:21116-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 12-1.1 | SUSE-SU-2025:21117-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_7 | 10-1.3 | SUSE-SU-2025:21119-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_9 | 8-1.2 | SUSE-SU-2025:21121-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_10 +1 | 4-1.1 | SUSE-SU-2025:21123-1, SUSE-SU-2025:21114-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_4 | 14-1.2 | SUSE-SU-2025:21107-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_5 | 12-1.2 | SUSE-SU-2025:21108-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_6 +1 | 10-3.1 | SUSE-SU-2025:21118-1, SUSE-SU-2025:21109-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_7 +3 | 9-1.2 | SUSE-SU-2025:21120-1, SUSE-SU-2025:21112-1, SUSE-SU-2025:21111-1 |
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-36.1 | SUSE-SU-2025:20756-1 |
| SLE Micro 6.1 | kernel-source +2 | 6.4.0-34.1 | SUSE-SU-2025:20669-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-34.1.21.11 | SUSE-SU-2025:20653-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_10 | 8-1.1 | SUSE-SU-2025:21099-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_4 | 13-1.1 | SUSE-SU-2025:21086-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 12-1.1 | SUSE-SU-2025:21087-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_7 | 10-1.3 | SUSE-SU-2025:21089-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_9 | 8-1.2 | SUSE-SU-2025:21091-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_10 +1 | 4-1.1 | SUSE-SU-2025:21103-1, SUSE-SU-2025:21100-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_3 +1 | 16-1.2 | SUSE-SU-2025:21092-1, SUSE-SU-2025:21085-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_4 | 14-1.2 | SUSE-SU-2025:21093-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_5 | 12-1.2 | SUSE-SU-2025:21094-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_6 +1 | 10-3.1 | SUSE-SU-2025:21095-1, SUSE-SU-2025:21088-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_7 +3 | 9-1.2 | SUSE-SU-2025:21098-1, SUSE-SU-2025:21097-1, SUSE-SU-2025:21096-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-36.1 | SUSE-SU-2025:20739-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-34.1 | SUSE-SU-2025:20653-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.16.1 | SUSE-SU-2025:03290-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_0 | 8-150700.3.1 | SUSE-SU-2025:4167-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_4 | 1-150700.1.3.2 | SUSE-SU-2025:03382-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_0 | 8-150700.3.21.2 | SUSE-SU-2025:4302-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_1 +2 | 8-150700.2.1 | SUSE-SU-2025:4306-1, SUSE-SU-2025:4208-1, SUSE-SU-2025:4164-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_4 | 1-150700.15.3.2 | SUSE-SU-2025:03290-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.70.1 | SUSE-SU-2025:03301-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_14 | 4-150600.2.1 | SUSE-SU-2025:4208-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_15 | 1-150600.1.3.1 | SUSE-SU-2025:03272-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_5 | 19-150600.2.1 | SUSE-SU-2025:4161-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_9 | 11-150600.2.1 | SUSE-SU-2025:4160-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_10 +1 | 10-150600.2.1 | SUSE-SU-2025:4265-1, SUSE-SU-2025:4200-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_11 +2 | 9-150600.2.1 | SUSE-SU-2025:4282-1, SUSE-SU-2025:4269-1, SUSE-SU-2025:4164-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_13 +1 | 8-150600.2.1 | SUSE-SU-2025:4268-1, SUSE-SU-2025:4201-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_15 | 1-150600.13.3.2 | SUSE-SU-2025:03301-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_6 +2 | 16-150600.2.1 | SUSE-SU-2025:4262-1, SUSE-SU-2025:4261-1, SUSE-SU-2025:4167-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.16.1 | SUSE-SU-2025:03382-1 |
| SUSE Real Time Module 15 SP6 | kernel-rt +3 | 6.4.0-150600.10.52.1 | SUSE-SU-2025:03272-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | openSUSE-SU-2025:20081-1 |
| openSUSE Leap 16.0 | kernel-rt +10 | 6.12.0-160000.6.1 | openSUSE-SU-2025:20081-1 |
| openSUSE Leap 15.6 | dtb-aarch64 +10 | 6.4.0-150600.23.70.1 | SUSE-SU-2025:03301-1 |
| openSUSE Leap 15.6 | kernel-azure +2 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.70.1.150600.12.30.2 | SUSE-SU-2025:03301-1 |
| openSUSE Leap 15.6 | kernel-rt +3 | 6.4.0-150600.10.52.1 | SUSE-SU-2025:03272-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.12.46-66.121 +1 | 1:1.0-0.amzn2023 | ALAS2023-2025-1208, ALAS2023-2025-1169 |
| Amazon Linux 2023 | perf +14 | 1:6.1.148-173.267.amzn2023 | ALAS2023-2025-1169 |
| Amazon Linux 2023 | perf6.12 +14 | 1:6.12.46-66.121.amzn2023 | ALAS2023-2025-1208 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.104.2-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +28 | 6.12.0-55.33.1.0.1.el10_0 | ELSA-2025-15782 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-103.40.4.3.el10uek | ELSA-2025-20662, ELSA-2025-20608 |
| Oracle Linux 9 | rv +28 | 5.14.0-570.39.1.0.1.el9_6 | ELSA-2025-15011 |
Advisories 50
- RHSA-2025:15782 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- USN-7809-1 linux-azure-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7791-3 linux-gcp, linux-gcp-6.14, linux-oem-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7801-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7808-2 linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7791-1 linux, linux-aws, linux-aws-6.14, linux-hwe-6.14, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7801-3 linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7808-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7799-1 linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7800-1 linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7792-3 linux-aws-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7801-2 linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7791-2 linux-realtime-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7791-4 linux-oracle, linux-oracle-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7792-1 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7792-2 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- ALSA-2025:15782 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:15011 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:17241 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2025:15011 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- SUSE-SU-2026:20560-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 9, 2026
- WID-SEC-2025-2711 Android Patchday Dezember 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 16, 2026
- openSUSE-SU-2025:20081-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20164-1 Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20169-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20149-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:4282-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:4262-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:4161-1 Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP6) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:4167-1 Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:4160-1 Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP6) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21179-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21139-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21119-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21110-1 Security update for kernel-livepatch-MICRO-6-0_Update_7 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21112-1 Security update for kernel-livepatch-MICRO-6-0_Update_9 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21114-1 Security update for kernel-livepatch-MICRO-6-0_Update_10 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21117-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21108-1 Security update for kernel-livepatch-MICRO-6-0_Update_5 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21095-1 Security update for kernel-livepatch-MICRO-6-0_Update_6 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21096-1 Security update for kernel-livepatch-MICRO-6-0_Update_7 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21097-1 Security update for kernel-livepatch-MICRO-6-0_Update_8 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21074-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21107-1 Security update for kernel-livepatch-MICRO-6-0_Update_4 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21087-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21090-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21092-1 Security update for kernel-livepatch-MICRO-6-0_Update_3 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03634-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03272-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21118-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 SUSE / openSUSE Security Updates · Mar 23, 2026
References
- https://git.kernel.org/stable/c/a8d4748b954584ab7bd800f1a4e46d5b0eeb5ce4
- https://git.kernel.org/stable/c/bfebdb85496e1da21d3cf05de099210915c3e706
- https://git.kernel.org/stable/c/5918c3f4800a3aef2173865e5903370f21e24f47
- https://git.kernel.org/stable/c/69a31f7a6a81f5ffd3812c442e09ff0be22960f1
- https://git.kernel.org/stable/c/a90b2a1aaacbcf0f91d7e4868ad6c51c5dee814b