Description
In the Linux kernel, the following vulnerability has been resolved:
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
syzbot reported the splat below where a socket had tcp_sk(sk)->fastopen_rsk
in the TCP_ESTABLISHED state. [0]
syzbot reused the server-side TCP Fast Open socket as a new client before
the TFO socket completes 3WHS:
1. accept()
2. connect(AF_UNSPEC)
3. connect() to another destination
As of accept(), sk->sk_state is TCP_SYN_RECV, and tcp_disconnect() changes
it to TCP_CLOSE and makes connect() possible, which restarts timers.
Since tcp_disconnect() forgot to clear tcp_sk(sk)->fastopen_rsk, the
retransmit timer triggered the warning and the intended packet was not
retransmitted.
Let's call reqsk_fastopen_remove() in tcp_disconnect().
[0]:
WARNING: CPU: 2 PID: 0 at net/ipv4/tcp_timer.c:542 tcp_retransmit_timer (net/ipv4/tcp_timer.c:542 (discriminator 7))
Modules linked in:
CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted 6.17.0-rc5-g201825fb4278 #62 PREEMPT(voluntary)
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:tcp_retransmit_timer (net/ipv4/tcp_timer.c:542 (discriminator 7))
Code: 41 55 41 54 55 53 48 8b af b8 08 00 00 48 89 fb 48 85 ed 0f 84 55 01 00 00 0f b6 47 12 3c 03 74 0c 0f b6 47 12 3c 04 74 04 90 <0f> 0b 90 48 8b 85 c0 00 00 00 48 89 ef 48 8b 40 30 e8 6a 4f 06 3e
RSP: 0018:ffffc900002f8d40 EFLAGS: 00010293
RAX: 0000000000000002 RBX: ffff888106911400 RCX: 0000000000000017
RDX: 0000000002517619 RSI: ffffffff83764080 RDI: ffff888106911400
RBP: ffff888106d5c000 R08: 0000000000000001 R09: ffffc900002f8de8
R10: 00000000000000c2 R11: ffffc900002f8ff8 R12: ffff888106911540
R13: ffff888106911480 R14: ffff888106911840 R15: ffffc900002f8de0
FS: 0000000000000000(0000) GS:ffff88907b768000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8044d69d90 CR3: 0000000002c30003 CR4: 0000000000370ef0
Call Trace:
<IRQ>
tcp_write_timer (net/ipv4/tcp_timer.c:738)
call_timer_fn (kernel/time/timer.c:1747)
__run_timers (kernel/time/timer.c:1799 kernel/time/timer.c:2372)
timer_expire_remote (kernel/time/timer.c:2385 kernel/time/timer.c:2376 kernel/time/timer.c:2135)
tmigr_handle_remote_up (kernel/time/timer_migration.c:944 kernel/time/timer_migration.c:1035)
__walk_groups.isra.0 (kernel/time/timer_migration.c:533 (discriminator 1))
tmigr_handle_remote (kernel/time/timer_migration.c:1096)
handle_softirqs (./arch/x86/include/asm/jump_label.h:36 ./include/trace/events/irq.h:142 kernel/softirq.c:580)
irq_exit_rcu (kernel/softirq.c:614 kernel/softirq.c:453 kernel/softirq.c:680 kernel/softirq.c:696)
sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1050 (discriminator 35) arch/x86/kernel/apic/apic.c:1050 (discriminator 35))
</IRQ>
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 3.7 | 5.4.300 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.16.9-1 | — |
| Debian 13 | linux | 6.12.57-1 | — |
| Debian 12 | linux | 6.1.158-1 | DSA-6053-1 |
| Debian 11 | linux | 5.10.247-1 | DLA-4404-1 |
| Debian 11 | linux-6.1 | 6.1.158-1~deb11u1 | DLA-4379-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1017.21 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1084.86 | — |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-106.106 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1050.53 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1051.57 | USN-8125-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1058.65 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1039.42 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1052.55 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1048.53 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1035.38 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1049.49 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-intel +19 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-106.106.1 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1049.52 | USN-8100-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1049.52.1 | USN-8100-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1020.20 | — |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1047.48 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1050.54 | USN-8095-5 |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1028.29 | USN-8261-1 |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-170.180 | USN-8033-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1100.107 | USN-8033-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1050.53~22.04.1 | USN-8095-4 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1109.118 | USN-8163-2 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1051.57~22.04.1 | USN-8126-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1109.118.1 | — |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1058.65~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1100.109 | USN-8033-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1052.55~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1096.102 | USN-8033-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1083.91 | USN-8033-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 +1 | 6.8.0-106.106~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1094.97 | USN-8033-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1049.49~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1095.101 | USN-8033-8 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1092.97 | USN-8033-5 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-106.106.1~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1095.96 | USN-8033-6 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1049.52~22.04.1 | USN-8100-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1052.52 | USN-8034-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1041.41 | USN-8034-2 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1097.103 | USN-8033-5 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1047.48~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1097.100 | USN-8141-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1064.68 | USN-8033-7 |
Show 18 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2040.41 | USN-8095-5 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1045.46 | USN-8095-3 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1092.94 | USN-8033-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1099.108 | USN-8033-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1045.46~22.04.1 | USN-8095-3 |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1050.53+fips1 | USN-8095-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1052.58+fips1 | USN-8165-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-106.106+fips1 | USN-8095-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1052.55+fips1 | USN-8095-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1100.107+fips1 | USN-8033-3 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1109.118+fips1 | USN-8163-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-170.180+fips1 | USN-8033-3 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1100.109+fips1 | USN-8033-3 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux +10 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1100.107~20.04.2 | USN-8033-4 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1110.119~20.04.1 | USN-8243-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1100.109~20.04.1 | USN-8033-5 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 | 5.15.0-170.180~20.04.3 | USN-8033-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1094.97~20.04.1 | USN-8033-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1095.101~20.04.1 | USN-8033-7 |
| Ubuntu Pro 20.04 LTS | linux-lowlatency-hwe-5.15 | 5.15.0-170.180~20.04.1 | USN-8033-1 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1052.52~20.04.2 | USN-8034-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1097.103~20.04.1 | USN-8033-5 |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | 5.15.0-1095.99~20.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux +12 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | linux +7 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux +3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +76 | 6.12.0-124.13.1.el10_1 | RHSA-2025:21931 |
| RHEL 9 | rv +75 | 5.14.0-611.11.1.el9_7 | RHSA-2025:22405 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.87.1.rt7.428.el8_10 | RHSA-2025:22387 |
| RHEL 8 | perf +26 | 4.18.0-553.87.1.el8_10 | RHSA-2025:22388 |
Show 15 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Rt Els 7 | kernel-rt +7 | 3.10.0-1160.144.1.rt56.1296.el7 | RHSA-2025:23960 |
| RHEL 10.0 EUS | rv +77 | 6.12.0-55.47.1.el10_0 | RHSA-2025:22571 |
| RHEL 9.6 EUS | rv +77 | 5.14.0-570.69.1.el9_6 | RHSA-2025:22392 |
| RHEL 9.4 EUS | bpftool | 7.3.0-427.103.1.el9_4 | RHSA-2025:23450 |
| RHEL 9.4 EUS | rv +64 | 5.14.0-427.103.1.el9_4 | RHSA-2025:23450 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.150.1.el9_2 | RHSA-2025:23423 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.150.1.rt14.435.el9_2 | RHSA-2025:23422 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.150.1.el9_2 | RHSA-2025:23423 |
| RHEL 9.0 E4S | kernel-rt +12 | 5.14.0-70.158.1.rt21.230.el9_0 | RHSA-2025:23424 |
| RHEL 9.0 E4S | perf +28 | 5.14.0-70.158.1.el9_0 | RHSA-2025:23426 |
| RHEL 8.8 TUS | perf +17 | 4.18.0-477.123.1.el8_8 | RHSA-2025:23427 |
| RHEL 8.8 E4S | perf +18 | 4.18.0-477.123.1.el8_8 | RHSA-2025:23427 |
| RHEL 8.6 TUS | perf +17 | 4.18.0-372.173.1.el8_6 | RHSA-2025:23425 |
| RHEL 8.6 E4S | perf +25 | 4.18.0-372.173.1.el8_6 | RHSA-2025:23425 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.173.1.el8_6 | RHSA-2025:23425 |
| RHEL 8.4 EUS Long Life | perf +17 | 4.18.0-305.182.1.el8_4 | RHSA-2025:23463 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.182.1.el8_4 | RHSA-2025:23463 |
| RHEL 8.2 AUS | perf +17 | 4.18.0-193.178.1.el8_2 | RHSA-2025:23445 |
| RHEL 7 ELS | perf +18 | 3.10.0-1160.144.1.el7 | RHSA-2025:23947 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | kernel-doc +1 | 6.12.0-124.13.1.el10_1 | ALSA-2025:21931 |
| AlmaLinux 9 | rv +73 | 5.14.0-611.11.1.el9_7 | ALSA-2025:22405 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.87.1.rt7.428.el8_10 | ALSA-2025:22387 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.87.1.el8_10 | ALSA-2025:22388 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | kernel | 6.12.0-124.13.1.el10_1 | RLSA-2025:21931 |
| Rocky Linux 9 | kernel | 5.14.0-611.11.1.el9_7 | RLSA-2025:22405 |
| Rocky Linux 8 | kernel | 4.18.0-553.87.1.el8_10 | RLSA-2025:22388 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.87.1.rt7.428.el8_10 | RLSA-2025:22387 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +6 | 6.4.0-150700.53.22.1 | SUSE-SU-2025:4057-1 |
| SLES 15 SP7 | kernel-azure +2 | 6.4.0-150700.20.18.1 | SUSE-SU-2025:4132-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.22.1.150700.17.15.1 | SUSE-SU-2025:4057-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.78.1 | SUSE-SU-2025:4140-1 |
| SLES 15 SP6 | kernel-azure +2 | 6.4.0-150600.8.55.1 | SUSE-SU-2025:4128-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.78.1.150600.12.34.2 | SUSE-SU-2025:4140-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.280.1 | SUSE-SU-2025:4189-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +7 | 6.12.0-160000.7.1 | SUSE-SU-2025:21147-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21147-1 |
| SLES 16.0 | kernel-64kb +7 | 6.12.0-160000.7.1 | SUSE-SU-2025:21180-1, SUSE-SU-2025:21147-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21147-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21080-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.7.1 | SUSE-SU-2026:20561-1, SUSE-SU-2025:21080-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-36.1.21.13 | SUSE-SU-2025:21056-1 |
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-38.1 | SUSE-SU-2025:21064-1 |
| SLE Micro 6.1 | kernel-source +2 | 6.4.0-36.1 | SUSE-SU-2025:21056-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-36.1.21.13 | SUSE-SU-2025:21040-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-38.1 | SUSE-SU-2025:21052-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-36.1 | SUSE-SU-2025:21040-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.22.1 | SUSE-SU-2025:4057-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_6 | 1-150700.1.3.1 | SUSE-SU-2025:4141-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_6 | 1-150700.15.3.1 | SUSE-SU-2025:4057-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.78.1 | SUSE-SU-2025:4140-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_17 | 1-150600.1.3.1 | SUSE-SU-2025:4301-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_17 | 1-150600.13.5.1 | SUSE-SU-2025:4140-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.280.1 | SUSE-SU-2025:4189-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_74 | 1-8.5.1 | SUSE-SU-2025:4189-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.22.1 | SUSE-SU-2025:4141-1 |
| SUSE Real Time Module 15 SP6 | kernel-rt +3 | 6.4.0-150600.10.58.1 | SUSE-SU-2025:4301-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | openSUSE-SU-2025:20091-1 |
| openSUSE Leap 16.0 | kernel-rt +10 | 6.12.0-160000.7.1 | openSUSE-SU-2025:20091-1 |
| openSUSE Leap 15.6 | dtb-aarch64 +10 | 6.4.0-150600.23.78.1 | SUSE-SU-2025:4140-1 |
| openSUSE Leap 15.6 | kernel-azure +2 | 6.4.0-150600.8.55.1 | SUSE-SU-2025:4128-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.78.1.150600.12.34.2 | SUSE-SU-2025:4140-1 |
| openSUSE Leap 15.6 | kernel-rt +3 | 6.4.0-150600.10.58.1 | SUSE-SU-2025:4301-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.12.53-69.119 +1 | 1:1.0-0.amzn2023 | ALAS2023-2025-1254, ALAS2023-2025-1223 |
| Amazon Linux 2023 | perf +14 | 1:6.1.155-176.282.amzn2023 | ALAS2023-2025-1223 |
| Amazon Linux 2023 | perf6.12 +14 | 1:6.12.53-69.119.amzn2023 | ALAS2023-2025-1254 |
| Amazon Linux 2 | kernel-livepatch-4.14.355-280.706 | 1.0-0.amzn2 | ALAS2-2025-3053 |
| Amazon Linux 2 | perf +8 | 4.14.355-280.706.amzn2 | ALAS2-2025-3053 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.112.1-1 | — |
| Azure Linux 2 (CBL-Mariner) | kernel | 5.15.200.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +29 | 6.12.0-124.13.1.el10_1 | ELSA-2025-21931 |
| Oracle Linux 9 | rv +28 | 5.14.0-611.11.1.el9_7 | ELSA-2025-22405 |
| Oracle Linux 8 | kernel-uek +17 | 5.15.0-315.196.5.1.el9uek | ELSA-2025-28048 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.87.1.el8_10 | ELSA-2025-28048, ELSA-2025-22388 |
| Oracle Linux 7 | kernel-uek +6 | 5.4.17-2136.350.3.1.el8uek | ELSA-2025-28049 |
| Oracle Linux 7 | kernel-uek-tools | 5.4.17-2136.350.3.1.el7uek | ELSA-2025-28049 |
| Oracle Linux 7 | perf +12 | 3.10.0-1160.119.1.0.16.el7 | ELSA-2025-23947 |
Advisories 50
- RHSA-2025:22387 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- WID-SEC-2025-2246 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- SSA-457936 SSA-457936: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.7 Siemens ProductCERT · Nov 10, 2026
- USN-8243-1 linux-azure-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8100-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8163-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8141-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8165-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8163-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8034-2 linux-nvidia-tegra-igx vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8033-1 linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8034-1 linux-nvidia-tegra, linux-nvidia-tegra-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8033-8 linux-intel-iotg vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8033-4 linux-aws-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8033-3 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8033-7 linux-intel-iotg-5.15, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8033-5 linux-gcp-5.15, linux-kvm, linux-oracle, linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8033-2 linux-intel-iot-realtime, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8033-6 linux-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-1 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8126-1 linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-5 linux-raspi, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8125-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-4 linux-aws-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-3 linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- ALSA-2025:22405 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:21931 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:22387 Moderate: kernel-rt security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:22388 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ICSA-26-295-11 Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP CISA ICS & IT advisories · Oct 22, 2026
- SSA-019113 SSA-019113: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.6 Siemens ProductCERT · Oct 13, 2026
- RHSA-2025:23463 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- RHSA-2025:23450 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- RHSA-2025:23427 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- RHSA-2025:23445 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- RHSA-2025:23425 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- RHSA-2025:23426 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- RHSA-2025:23424 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- RHSA-2025:23422 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- RHSA-2025:23423 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- RHSA-2025:22392 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- RHSA-2025:22388 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- WID-SEC-2026-0349 Dell Avamar und NetWorker: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
- USN-8261-1 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Sep 7, 2026
- RHSA-2025:23960 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2025:23947 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2025:22571 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jul 30, 2026
- RHSA-2025:22405 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jul 30, 2026
- ICSA-26-209-04 Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP CISA ICS & IT advisories · Jul 28, 2026
References
- https://git.kernel.org/stable/c/7ec092a91ff351dcde89c23e795b73a328274db6
- https://git.kernel.org/stable/c/a4378dedd6e07e62f2fccb17d78c9665718763d0
- https://git.kernel.org/stable/c/33a4fdf0b4a25f8ce65380c3b0136b407ca57609
- https://git.kernel.org/stable/c/17d699727577814198d744d6afe54735c6b54c99
- https://git.kernel.org/stable/c/dfd06131107e7b699ef1e2a24ed2f7d17c917753
- https://git.kernel.org/stable/c/fa4749c065644af4db496b338452a69a3e5147d9
- https://git.kernel.org/stable/c/ae313d14b45eca7a6bb29cb9bf396d977e7d28fb
- https://git.kernel.org/stable/c/45c8a6cc2bcd780e634a6ba8e46bffbdf1fc5c01