Description
In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix race condition in mptcp_schedule_work()
syzbot reported use-after-free in mptcp_schedule_work() [1]
Issue here is that mptcp_schedule_work() schedules a work,
then gets a refcount on sk->sk_refcnt if the work was scheduled.
This refcount will be released by mptcp_worker().
[A] if (schedule_work(...)) {
[B] sock_hold(sk);
return true;
}
Problem is that mptcp_worker() can run immediately and complete before [B]
We need instead :
sock_hold(sk);
if (schedule_work(...))
return true;
sock_put(sk);
[1]
refcount_t: addition on 0; use-after-free.
WARNING: CPU: 1 PID: 29 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 lib/refcount.c:25
Call Trace:
<TASK>
__refcount_add include/linux/refcount.h:-1 [inline]
__refcount_inc include/linux/refcount.h:366 [inline]
refcount_inc include/linux/refcount.h:383 [inline]
sock_hold include/net/sock.h:816 [inline]
mptcp_schedule_work+0x164/0x1a0 net/mptcp/protocol.c:943
mptcp_tout_timer+0x21/0xa0 net/mptcp/protocol.c:2316
call_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747
expire_timers kernel/time/timer.c:1798 [inline]
__run_timers kernel/time/timer.c:2372 [inline]
__run_timer_base+0x648/0x970 kernel/time/timer.c:2384
run_timer_base kernel/time/timer.c:2393 [inline]
run_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403
handle_softirqs+0x22f/0x710 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
run_ktimerd+0xcf/0x190 kernel/softirq.c:1138
smpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:160
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.7 | 5.10.247 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.17.10-1 | — |
| Debian 13 | linux | 6.12.63-1 | — |
| Debian 12 | linux | 6.1.159-1 | — |
| Debian 11 | linux | 5.10.247-1 | DLA-4404-1 |
| Debian 11 | linux-6.1 | 6.1.159-1~deb11u1 | DLA-4436-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1017.21 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1086.88 | — |
| Ubuntu 25.10 | linux | 6.17.0-19.19 | USN-8094-1 |
| Ubuntu 25.10 | linux-aws +2 | 6.17.0-1009.9 | USN-8094-1 |
| Ubuntu 25.10 | linux-azure +1 | 6.17.0-1010.10 | USN-8094-5, USN-8094-4 |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 25.10 | linux-realtime | 6.17.0-1008.9 | USN-8094-2 |
| Ubuntu 25.10 | linux-riscv | 6.17.0-19.19.1 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-106.106 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1050.53 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-aws-6.17 | 6.17.0-1009.9~24.04.2 | USN-8094-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1051.57 | USN-8125-1 |
| Ubuntu 24.04 LTS | linux-azure-6.17 | 6.17.0-1010.10~24.04.1 | USN-8094-4 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1058.65 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1039.42 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1052.55 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | 6.17.0-1009.9~24.04.3 | USN-8094-2 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1048.53 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1035.38 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | 6.17.0-19.19~24.04.2 | USN-8094-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1049.49 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-106.106.1 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1049.52 | USN-8100-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | 6.17.0-1018.18 | — |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1049.52.1 | USN-8100-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1020.20 | — |
| Ubuntu 24.04 LTS | linux-oem-6.17 | 6.17.0-1017.17 | USN-8152-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1047.48 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-oracle-6.17 | 6.17.0-1009.9~24.04.1 | USN-8094-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1050.54 | USN-8095-5 |
| Ubuntu 24.04 LTS | linux-riscv +18 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-6.17 | 6.17.0-19.19.1~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1028.29 | USN-8261-1 |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-173.183 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1103.110 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1050.53~22.04.1 | USN-8095-4 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1109.118 | USN-8163-2 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1051.57~22.04.1 | USN-8126-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1109.118.1 | — |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1058.65~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1103.112 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1052.55~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1099.105 | USN-8096-3 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1086.94 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 +1 | 6.8.0-106.106~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1097.100 | USN-8141-1, USN-8096-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1049.49~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1098.104 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1095.100 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-106.106.1~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1098.99 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1049.52~22.04.1 | USN-8100-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1055.55 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1044.44 | USN-8096-5 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1100.106 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1047.48~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1067.71 | USN-8096-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2040.41 | USN-8095-5 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1045.46 | USN-8095-3 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | 6.17.0-1008.9~24.04.1 | USN-8094-3 |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1094.96 | USN-8116-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1102.111 | USN-8096-4 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1045.46~22.04.1 | USN-8095-3 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1050.53+fips1 | USN-8095-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1052.58+fips1 | USN-8165-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-106.106+fips1 | USN-8095-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1052.55+fips1 | USN-8095-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1103.110+fips1 | USN-8096-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1109.118+fips1 | USN-8163-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-173.183+fips1 | USN-8096-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1103.112+fips1 | USN-8096-2 |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1103.110~20.04.1 | USN-8096-3 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1110.119~20.04.1 | USN-8243-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1103.112~20.04.1 | USN-8096-3 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-173.183~20.04.1 | USN-8096-3 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1097.100~20.04.1 | USN-8096-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1098.104~20.04.1 | USN-8096-3 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1055.55~20.04.1 | USN-8096-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1100.106~20.04.1 | USN-8096-3 |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | 5.15.0-1097.101~20.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +76 | 6.12.0-124.31.1.el10_1 | RHSA-2026:1690 |
| RHEL 9 | rv +75 | 5.14.0-611.26.1.el9_7 | RHSA-2026:1143 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.100.1.rt7.441.el8_10 | RHSA-2026:1661 |
| RHEL 8 | perf +26 | 4.18.0-553.100.1.el8_10 | RHSA-2026:1662 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | rv +77 | 6.12.0-55.58.1.el10_0 | RHSA-2026:1727 |
| RHEL 9.6 EUS | rv +77 | 5.14.0-570.81.1.el9_6 | RHSA-2026:1194 |
| RHEL 9.4 EUS | bpftool | 7.3.0-427.108.1.el9_4 | RHSA-2026:1444 |
| RHEL 9.4 EUS | rv +64 | 5.14.0-427.108.1.el9_4 | RHSA-2026:1444 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.156.1.el9_2 | RHSA-2026:2560 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.156.1.rt14.441.el9_2 | RHSA-2026:2583 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.156.1.el9_2 | RHSA-2026:2560 |
| RHEL 9.0 E4S | kernel-rt +12 | 5.14.0-70.163.1.rt21.235.el9_0 | RHSA-2026:1495 |
| RHEL 9.0 E4S | perf +28 | 5.14.0-70.163.1.el9_0 | RHSA-2026:1494 |
| RHEL 8.8 TUS | perf +17 | 4.18.0-477.128.1.el8_8 | RHSA-2026:2535 |
| RHEL 8.8 E4S | perf +18 | 4.18.0-477.128.1.el8_8 | RHSA-2026:2535 |
| RHEL 8.6 TUS | perf +17 | 4.18.0-372.179.1.el8_6 | RHSA-2026:2490 |
| RHEL 8.6 E4S | perf +25 | 4.18.0-372.179.1.el8_6 | RHSA-2026:2490 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.179.1.el8_6 | RHSA-2026:2490 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | kernel-doc +1 | 6.12.0-124.31.1.el10_1 | ALSA-2026:1690 |
| AlmaLinux 9 | rv +73 | 5.14.0-611.26.1.el9_7 | ALSA-2026:1143 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.100.1.rt7.441.el8_10 | ALSA-2026:1661 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.100.1.el8_10 | ALSA-2026:1662 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | kernel | 6.12.0-124.31.1.el10_1 | RLSA-2026:1690 |
| Rocky Linux 9 | kernel | 5.14.0-611.26.1.el9_7 | RLSA-2026:1143 |
| Rocky Linux 8 | kernel | 4.18.0-553.100.1.el8_10 | RLSA-2026:1662 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.100.1.rt7.441.el8_10 | RLSA-2026:1661 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +6 | 6.4.0-150700.53.28.1 | SUSE-SU-2026:0315-1 |
| SLES 15 SP7 | kernel-azure +2 | 6.4.0-150700.20.24.1 | SUSE-SU-2026:0281-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.28.1.150700.17.19.1 | SUSE-SU-2026:0315-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.84.1 | SUSE-SU-2026:0293-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.84.1.150600.12.38.1 | SUSE-SU-2026:0293-1 |
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.133.1 | SUSE-SU-2026:0317-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.133.1.150500.6.65.1 | SUSE-SU-2026:0317-1 |
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.194.1.150400.24.98.3 | SUSE-SU-2026:0617-1 |
Show 18 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +8 | 6.12.0-160000.9.1 | SUSE-SU-2026:20220-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.9.1.160000.2.6 | SUSE-SU-2026:20220-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_0 | 8-160000.4.3 | SUSE-SU-2026:20946-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_1 | 6-160000.1.1 | SUSE-SU-2026:20945-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_2 | 4-160000.1.1 | SUSE-SU-2026:20947-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_3 | 3-160000.1.1 | SUSE-SU-2026:20944-1 |
| SLES for SAP 15 SP6 | kernel-default-base | 6.4.0-150600.23.84.1.150600.12.38.1 | SUSE-SU-2026:0293-1 |
| SLES for SAP 15 SP6 | kernel-docs +4 | 6.4.0-150600.23.84.1 | SUSE-SU-2026:0293-1 |
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.133.1.150500.6.65.1 | SUSE-SU-2026:0317-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.133.1 | SUSE-SU-2026:0317-1 |
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.194.1.150400.24.98.3 | SUSE-SU-2026:0617-1 |
| SLES for SAP 15 SP4 | kernel-docs +4 | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLES 16.0 | kernel-64kb +8 | 6.12.0-160000.9.1 | SUSE-SU-2026:20228-1, SUSE-SU-2026:20220-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.9.1.160000.2.6 | SUSE-SU-2026:20220-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_0 | 8-160000.4.3 | SUSE-SU-2026:20946-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_1 | 6-160000.1.1 | SUSE-SU-2026:20945-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_2 | 4-160000.1.1 | SUSE-SU-2026:20947-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_3 | 3-160000.1.1 | SUSE-SU-2026:20944-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.9.1.160000.2.6 | SUSE-SU-2026:20207-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_0 | 6-160000.3.4 | SUSE-SU-2026:20831-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_1 | 5-160000.1.1 | SUSE-SU-2026:20832-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_3 | 2-160000.1.1 | SUSE-SU-2026:20828-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_0 | 8-160000.4.3 | SUSE-SU-2026:20841-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_1 | 6-160000.1.1 | SUSE-SU-2026:20840-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_2 | 4-160000.1.1 | SUSE-SU-2026:20842-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_3 +1 | 3-160000.1.1 | SUSE-SU-2026:20837-1, SUSE-SU-2026:20829-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.9.1 | SUSE-SU-2026:20564-1, SUSE-SU-2026:20207-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-39.1.21.16 | SUSE-SU-2026:20498-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_10 | 11-1.1 | SUSE-SU-2026:20896-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_13 +1 | 2-1.1 | SUSE-SU-2026:20900-1, SUSE-SU-2026:20899-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 16-1.1 | SUSE-SU-2026:20891-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_6 | 14-3.1 | SUSE-SU-2026:20892-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_7 | 14-1.3 | SUSE-SU-2026:20893-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_9 | 11-1.2 | SUSE-SU-2026:20895-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_10 +1 | 7-1.1 | SUSE-SU-2026:20897-1, SUSE-SU-2026:20885-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_11 +2 | 6-1.1 | SUSE-SU-2026:20898-1, SUSE-SU-2026:20887-1, SUSE-SU-2026:20886-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_13 | 4-1.1 | SUSE-SU-2026:20888-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_14 | 2-1.2 | SUSE-SU-2026:20889-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_5 | 17-1.2 | SUSE-SU-2026:20880-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_6 | 15-3.1 | SUSE-SU-2026:20881-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_7 | 14-1.2 | SUSE-SU-2026:20882-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_8 +2 | 13-1.2 | SUSE-SU-2026:20894-1, SUSE-SU-2026:20884-1, SUSE-SU-2026:20883-1 |
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-40.1 | SUSE-SU-2026:20876-1 |
| SLE Micro 6.1 | kernel-source +2 | 6.4.0-39.1 | SUSE-SU-2026:20498-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-39.1.21.16 | SUSE-SU-2026:20477-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_10 | 11-1.1 | SUSE-SU-2026:20852-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_13 +1 | 2-1.1 | SUSE-SU-2026:20856-1, SUSE-SU-2026:20855-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 16-1.1 | SUSE-SU-2026:20847-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_6 | 14-3.1 | SUSE-SU-2026:20848-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_7 | 14-1.3 | SUSE-SU-2026:20849-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_9 | 11-1.2 | SUSE-SU-2026:20851-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_10 +1 | 7-1.1 | SUSE-SU-2026:20862-1, SUSE-SU-2026:20853-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_11 +2 | 6-1.1 | SUSE-SU-2026:20864-1, SUSE-SU-2026:20863-1, SUSE-SU-2026:20854-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_13 | 4-1.1 | SUSE-SU-2026:20865-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_14 | 2-1.2 | SUSE-SU-2026:20866-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_5 | 17-1.2 | SUSE-SU-2026:20857-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_6 | 15-3.1 | SUSE-SU-2026:20858-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_7 | 14-1.2 | SUSE-SU-2026:20859-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_8 +2 | 13-1.2 | SUSE-SU-2026:20861-1, SUSE-SU-2026:20860-1, SUSE-SU-2026:20850-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-40.1 | SUSE-SU-2026:20845-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-39.1 | SUSE-SU-2026:20477-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.133.1.150500.6.65.1 | SUSE-SU-2026:0317-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.118.1 | SUSE-SU-2026:0263-1 |
| SLE Micro 5.5 | kernel-source +1 | 5.14.21-150500.55.133.1 | SUSE-SU-2026:0317-1 |
| SLE Micro 5.4 | kernel-default | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.194.1.150400.24.98.3 | SUSE-SU-2026:0617-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.142.1 | SUSE-SU-2026:0411-1 |
| SLE Micro 5.3 | kernel-default | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.194.1.150400.24.98.3 | SUSE-SU-2026:0617-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.142.1 | SUSE-SU-2026:0411-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.28.1 | SUSE-SU-2026:0315-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_0 | 12-150700.3.1 | SUSE-SU-2026:0939-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_6 | 3-150700.2.1 | SUSE-SU-2026:0946-1, SUSE-SU-2026:0943-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_8 | 1-150700.1.3.1 | SUSE-SU-2026:0278-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_0 | 12-150700.3.33.1 | SUSE-SU-2026:1125-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_1 +1 | 12-150700.2.1 | SUSE-SU-2026:1101-1, SUSE-SU-2026:0940-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_2 +1 | 11-150700.2.1 | SUSE-SU-2026:1132-1, SUSE-SU-2026:0951-1, SUSE-SU-2026:0941-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_4 | 7-150700.2.1 | SUSE-SU-2026:1096-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_5 | 4-150700.2.1 | SUSE-SU-2026:1099-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_7 +1 | 2-150700.2.1 | SUSE-SU-2026:1136-1, SUSE-SU-2026:0944-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_8 | 1-150700.15.3.1 | SUSE-SU-2026:0315-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.84.1 | SUSE-SU-2026:0293-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_10 | 14-150600.2.2 | SUSE-SU-2026:1073-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_12 | 13-150600.2.1 | SUSE-SU-2026:1125-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_13 | 11-150600.2.1 | SUSE-SU-2026:1083-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_14 +1 | 7-150600.2.1 | SUSE-SU-2026:1096-1, SUSE-SU-2026:1089-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_17 +1 | 2-150600.2.1 | SUSE-SU-2026:1100-1, SUSE-SU-2026:1099-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_19 | 1-150600.13.3.1 | SUSE-SU-2026:0293-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.133.1 | SUSE-SU-2026:0317-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_24 | 16-150500.2.2 | SUSE-SU-2026:1000-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_25 | 15-150500.2.2 | SUSE-SU-2026:1049-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_27 | 14-150500.2.1 | SUSE-SU-2026:1002-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_29 | 11-150500.2.1 | SUSE-SU-2026:1039-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_31 | 6-150500.2.1 | SUSE-SU-2026:1048-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_34 | 1-150500.11.3.1 | SUSE-SU-2026:0317-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_36 +1 | 16-150400.2.2 | SUSE-SU-2026:1046-1, SUSE-SU-2026:0983-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_44 | 9-150400.2.1 | SUSE-SU-2026:0992-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_45 | 7-150400.2.1 | SUSE-SU-2026:0997-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_47 | 3-150400.2.1 | SUSE-SU-2026:1048-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_48 | 1-150400.9.7.1 | SUSE-SU-2026:0617-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.133.1 | SUSE-SU-2026:0317-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.133.1.150500.6.65.1 | SUSE-SU-2026:0317-1 |
| SLE HPC 15 SP4 | kernel-64kb +5 | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.194.1.150400.24.98.3 | SUSE-SU-2026:0617-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.28.1 | SUSE-SU-2026:0278-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.9.1.160000.2.6 | openSUSE-SU-2026:20145-1 |
| openSUSE Leap 16.0 | kernel-rt +11 | 6.12.0-160000.9.1 | openSUSE-SU-2026:20145-1 |
| openSUSE Leap 15.6 | dtb-aarch64 +10 | 6.4.0-150600.23.84.1 | SUSE-SU-2026:0293-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.84.1.150600.12.38.1 | SUSE-SU-2026:0293-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.12.63-84.121 +1 | 1:1.0-0.amzn2023 | ALAS2023-2026-1430, ALAS2023-2025-1350 |
| Amazon Linux 2023 | perf +14 | 1:6.1.159-181.297.amzn2023 | ALAS2023-2025-1350 |
| Amazon Linux 2023 | perf6.12 +14 | 1:6.12.63-84.121.amzn2023 | ALAS2023-2026-1430 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.119.3-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +29 | 6.12.0-124.31.1.el10_1 | ELSA-2026-1690 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-107.59.3.4.el10uek | ELSA-2026-50112, ELSA-2026-50094 |
| Oracle Linux 9 | rv +28 | 5.14.0-611.26.1.el9_7 | ELSA-2026-1143 |
| Oracle Linux 8 | kernel-uek +17 | 5.15.0-316.196.4.2.el9uek | ELSA-2026-50113, ELSA-2026-50095 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.100.1.el8_10 | ELSA-2026-50113, ELSA-2026-50095, ELSA-2026-1662 |
Advisories 50
- USN-8096-1 linux, linux-aws, linux-gcp, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8243-1 linux-azure-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8096-3 linux-aws-5.15, linux-gcp-5.15, linux-gke, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8094-1 linux, linux-aws, linux-aws-6.17, linux-gcp, linux-hwe-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8094-2 linux-gcp-6.17, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8116-1 linux-intel-iot-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8152-1 linux-oem-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8100-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8094-3 linux-realtime-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8096-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8163-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8141-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8165-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8163-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8096-5 linux-nvidia-tegra-igx vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8094-4 linux-azure, linux-azure-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8096-4 linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8094-5 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- WID-SEC-2025-2747 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Nov 3, 2026
- USN-8095-1 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8126-1 linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-5 linux-raspi, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8125-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-4 linux-aws-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-3 linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- ALSA-2026:1143 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1690 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1661 Moderate: kernel-rt security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1662 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:2490 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Sep 27, 2026
- RHSA-2026:1661 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Sep 27, 2026
- RHSA-2026:1662 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Sep 27, 2026
- WID-SEC-2026-0783 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
- WID-SEC-2026-2253 IBM Security Verify Access: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
- USN-8261-1 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Sep 7, 2026
- RHSA-2026:1690 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 27, 2026
- RHSA-2026:2583 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:2560 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:2535 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:1727 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:1495 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:1494 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:1143 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2026:1444 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2026:1194 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- SUSE-SU-2026:20564-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 9, 2026
- ICSA-26-188-05 Siemens SINEC OS CISA ICS & IT advisories · Jul 7, 2026
- SSA-253495 SSA-253495: Multiple Vulnerabilities in SINEC OS before V4.0 Siemens ProductCERT · Jun 2, 2026
- SUSE-SU-2026:20947-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Apr 2, 2026
References
- https://git.kernel.org/stable/c/f865e6595acf33083168db76921e66ace8bf0e5b
- https://git.kernel.org/stable/c/99908e2d601236842d705d5fd04fb349577316f5
- https://git.kernel.org/stable/c/db4f7968a75250ca6c4ed70d0a78beabb2dcee18
- https://git.kernel.org/stable/c/8f9ba1a99a89feef9b5867c15a0141a97e893309
- https://git.kernel.org/stable/c/ac28dfddedf6f209190950fc71bcff65ec4ab47b
- https://git.kernel.org/stable/c/3fc7723ed01d1130d4bf7063c50e0af60ecccbb4
- https://git.kernel.org/stable/c/035bca3f017ee9dea3a5a756e77a6f7138cc6eea