Description
In the Linux kernel, the following vulnerability has been resolved:
ipvs: fix ipv4 null-ptr-deref in route error path
The IPv4 code path in __ip_vs_get_out_rt() calls dst_link_failure()
without ensuring skb->dev is set, leading to a NULL pointer dereference
in fib_compute_spec_dst() when ipv4_link_failure() attempts to send
ICMP destination unreachable messages.
The issue emerged after commit ed0de45a1008 ("ipv4: recompile ip options
in ipv4_link_failure") started calling __ip_options_compile() from
ipv4_link_failure(). This code path eventually calls fib_compute_spec_dst()
which dereferences skb->dev. An attempt was made to fix the NULL skb->dev
dereference in commit 0113d9c9d1cc ("ipv4: fix null-deref in
ipv4_link_failure"), but it only addressed the immediate dev_net(skb->dev)
dereference by using a fallback device. The fix was incomplete because
fib_compute_spec_dst() later in the call chain still accesses skb->dev
directly, which remains NULL when IPVS calls dst_link_failure().
The crash occurs when:
1. IPVS processes a packet in NAT mode with a misconfigured destination
2. Route lookup fails in __ip_vs_get_out_rt() before establishing a route
3. The error path calls dst_link_failure(skb) with skb->dev == NULL
4. ipv4_link_failure() → ipv4_send_dest_unreach() →
__ip_options_compile() → fib_compute_spec_dst()
5. fib_compute_spec_dst() dereferences NULL skb->dev
Apply the same fix used for IPv6 in commit 326bf17ea5d4 ("ipvs: fix
ipv6 route unreach panic"): set skb->dev from skb_dst(skb)->dev before
calling dst_link_failure().
KASAN: null-ptr-deref in range [0x0000000000000328-0x000000000000032f]
CPU: 1 PID: 12732 Comm: syz.1.3469 Not tainted 6.6.114 #2
RIP: 0010:__in_dev_get_rcu include/linux/inetdevice.h:233
RIP: 0010:fib_compute_spec_dst+0x17a/0x9f0 net/ipv4/fib_frontend.c:285
Call Trace:
<TASK>
spec_dst_fill net/ipv4/ip_options.c:232
spec_dst_fill net/ipv4/ip_options.c:229
__ip_options_compile+0x13a1/0x17d0 net/ipv4/ip_options.c:330
ipv4_send_dest_unreach net/ipv4/route.c:1252
ipv4_link_failure+0x702/0xb80 net/ipv4/route.c:1265
dst_link_failure include/net/dst.h:437
__ip_vs_get_out_rt+0x15fd/0x19e0 net/netfilter/ipvs/ip_vs_xmit.c:412
ip_vs_nat_xmit+0x1d8/0xc80 net/netfilter/ipvs/ip_vs_xmit.c:764
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 3.18.139 – < 3.19, 4.4.179 – < 4.5, 4.9.171 – < 4.10, 4.14.114 – < 4.15, 4.19.37 – < 4.20, 5.0.10 – < 5.1, 5.1 | 3.19 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.18.3-1 | — |
| Debian 13 | linux | 6.12.69-1 | DSA-6126-1 |
| Debian 12 | linux | 6.1.162-1 | DSA-6127-1 |
| Debian 11 | linux | 5.10.249-1 | DLA-4475-1 |
| Debian 11 | linux-6.1 | 6.1.162-1~deb11u1 | DLA-4476-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1017.21 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1086.88 | — |
| Ubuntu 25.10 | linux | 6.17.0-22.22 | USN-8177-1 |
| Ubuntu 25.10 | linux-aws +1 | 6.17.0-1012.12 | USN-8183-2, USN-8183-1 |
| Ubuntu 25.10 | linux-azure +1 | 6.17.0-1013.13 | USN-8245-1 |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 25.10 | linux-oracle | 6.17.0-1011.11 | USN-8183-2 |
| Ubuntu 25.10 | linux-realtime | 6.17.0-1010.11 | USN-8177-1 |
| Ubuntu 25.10 | linux-riscv | 6.17.0-22.22.1 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-110.110 | USN-8179-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1052.55 | USN-8179-1 |
| Ubuntu 24.04 LTS | linux-aws-6.17 +1 | 6.17.0-1012.12~24.04.1 | USN-8183-2, USN-8183-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1054.60 | USN-8258-1 |
| Ubuntu 24.04 LTS | linux-azure-6.17 | 6.17.0-1013.13~24.04.1 | USN-8245-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1058.65 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1039.42 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1054.57 | USN-8179-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1050.56 | USN-8179-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1037.40 | USN-8179-1 |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | 6.17.0-22.22~24.04.1 | USN-8183-2 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1051.51 | USN-8179-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-110.110.1 | USN-8179-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1051.54 | USN-8185-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | 6.17.0-1018.18 | — |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1051.54.1 | USN-8185-2 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1022.22 | USN-8265-1 |
| Ubuntu 24.04 LTS | linux-oem-6.17 | 6.17.0-1020.20 | USN-8245-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1049.50 | USN-8203-1 |
| Ubuntu 24.04 LTS | linux-oracle-6.17 | 6.17.0-1011.11~24.04.1 | USN-8183-2 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1052.56 | USN-8179-3 |
| Ubuntu 24.04 LTS | linux-riscv +18 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-6.17 | 6.17.0-22.22.1~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1028.29 | USN-8261-1 |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-173.183 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1103.110 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1052.55~22.04.1 | USN-8179-1 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1109.118 | USN-8163-2 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1059.65~22.04.1 | USN-8440-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1109.118.1 | — |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1058.65~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1103.112 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1054.57~22.04.1 | USN-8179-4 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1099.105 | USN-8096-3 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1086.94 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 +1 | 6.8.0-110.110~22.04.1 | USN-8179-3 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1097.100 | USN-8141-1, USN-8096-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1051.51~22.04.1 | USN-8179-3 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1098.104 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1095.100 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-110.110.1~22.04.1 | USN-8179-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1098.99 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1051.54~22.04.1 | USN-8185-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1055.55 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1044.44 | USN-8096-5 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1100.106 | USN-8096-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1049.50~22.04.1 | USN-8203-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1067.71 | USN-8096-1 |
Show 18 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2042.43 | USN-8204-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1047.48 | USN-8184-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | 6.17.0-1010.11~24.04.1 | USN-8177-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1094.96 | USN-8116-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1102.111 | USN-8096-4 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1047.48~22.04.1 | USN-8184-1 |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1052.55+fips1 | USN-8179-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1053.59+fips1 | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-110.110+fips2 | USN-8179-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1054.57+fips1 | USN-8179-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1103.110+fips1 | USN-8096-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1109.118+fips1 | USN-8163-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-173.183+fips1 | USN-8096-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1103.112+fips1 | USN-8096-2 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux +10 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1103.110~20.04.1 | USN-8096-3 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1110.119~20.04.1 | USN-8243-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1103.112~20.04.1 | USN-8096-3 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-173.183~20.04.1 | USN-8096-3 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1097.100~20.04.1 | USN-8096-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1098.104~20.04.1 | USN-8096-3 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1055.55~20.04.1 | USN-8096-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1100.106~20.04.1 | USN-8096-3 |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | 5.15.0-1097.101~20.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux +12 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | linux +7 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux-aws +2 | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +6 | 6.4.0-150700.53.31.1 | SUSE-SU-2026:0447-1 |
| SLES 15 SP7 | kernel-azure +2 | 6.4.0-150700.20.27.1 | SUSE-SU-2026:0472-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.31.1.150700.17.21.1 | SUSE-SU-2026:0447-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.87.1.150600.12.40.1 | SUSE-SU-2026:0471-1 |
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.136.1 | SUSE-SU-2026:0474-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.136.1.150500.6.67.1 | SUSE-SU-2026:0474-1 |
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.194.1.150400.24.98.3 | SUSE-SU-2026:0617-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.293.1 | SUSE-SU-2026:0473-1 |
Show 20 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +8 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.26.1.160000.2.7 | SUSE-SU-2026:20599-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_0 | 8-160000.4.3 | SUSE-SU-2026:20946-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_1 | 6-160000.1.1 | SUSE-SU-2026:20945-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_2 | 4-160000.1.1 | SUSE-SU-2026:20947-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_3 | 3-160000.1.1 | SUSE-SU-2026:20944-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_4 | 2-160000.1.1 | SUSE-SU-2026:20943-1 |
| SLES for SAP 15 SP6 | kernel-default-base | 6.4.0-150600.23.87.1.150600.12.40.1 | SUSE-SU-2026:0471-1 |
| SLES for SAP 15 SP6 | kernel-docs +4 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 |
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.136.1.150500.6.67.1 | SUSE-SU-2026:0474-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.136.1 | SUSE-SU-2026:0474-1 |
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.194.1.150400.24.98.3 | SUSE-SU-2026:0617-1 |
| SLES for SAP 15 SP4 | kernel-docs +4 | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLES 16.0 | kernel-64kb +8 | 6.12.0-160000.26.1 | SUSE-SU-2026:20615-1, SUSE-SU-2026:20599-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.26.1.160000.2.7 | SUSE-SU-2026:20599-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_0 | 8-160000.4.3 | SUSE-SU-2026:20946-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_1 | 6-160000.1.1 | SUSE-SU-2026:20945-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_2 | 4-160000.1.1 | SUSE-SU-2026:20947-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_3 | 3-160000.1.1 | SUSE-SU-2026:20944-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_4 | 2-160000.1.1 | SUSE-SU-2026:20943-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.26.1.160000.2.7 | SUSE-SU-2026:20555-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_0 | 6-160000.3.4 | SUSE-SU-2026:20831-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_1 | 5-160000.1.1 | SUSE-SU-2026:20832-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_0 | 8-160000.4.3 | SUSE-SU-2026:20841-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_1 | 6-160000.1.1 | SUSE-SU-2026:20840-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_2 | 4-160000.1.1 | SUSE-SU-2026:20842-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_3 +1 | 3-160000.1.1 | SUSE-SU-2026:20837-1, SUSE-SU-2026:20829-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_4 +2 | 2-160000.1.1 | SUSE-SU-2026:20836-1, SUSE-SU-2026:20830-1, SUSE-SU-2026:20828-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.26.1 | SUSE-SU-2026:20570-1, SUSE-SU-2026:20555-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-39.1.21.16 | SUSE-SU-2026:20498-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_10 | 11-1.1 | SUSE-SU-2026:20896-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_13 +1 | 2-1.1 | SUSE-SU-2026:20900-1, SUSE-SU-2026:20899-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 16-1.1 | SUSE-SU-2026:20891-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_6 | 14-3.1 | SUSE-SU-2026:20892-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_7 | 14-1.3 | SUSE-SU-2026:20893-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_9 | 11-1.2 | SUSE-SU-2026:20895-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_10 +1 | 7-1.1 | SUSE-SU-2026:20897-1, SUSE-SU-2026:20885-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_11 +2 | 6-1.1 | SUSE-SU-2026:20898-1, SUSE-SU-2026:20887-1, SUSE-SU-2026:20886-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_13 | 4-1.1 | SUSE-SU-2026:20888-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_14 | 2-1.2 | SUSE-SU-2026:20889-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_5 | 17-1.2 | SUSE-SU-2026:20880-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_6 | 15-3.1 | SUSE-SU-2026:20881-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_7 | 14-1.2 | SUSE-SU-2026:20882-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_8 +2 | 13-1.2 | SUSE-SU-2026:20894-1, SUSE-SU-2026:20884-1, SUSE-SU-2026:20883-1 |
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-40.1 | SUSE-SU-2026:20876-1 |
| SLE Micro 6.1 | kernel-source +2 | 6.4.0-39.1 | SUSE-SU-2026:20498-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-39.1.21.16 | SUSE-SU-2026:20477-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_10 | 11-1.1 | SUSE-SU-2026:20852-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_13 +1 | 2-1.1 | SUSE-SU-2026:20856-1, SUSE-SU-2026:20855-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 16-1.1 | SUSE-SU-2026:20847-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_6 | 14-3.1 | SUSE-SU-2026:20848-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_7 | 14-1.3 | SUSE-SU-2026:20849-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_9 | 11-1.2 | SUSE-SU-2026:20851-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_10 +1 | 7-1.1 | SUSE-SU-2026:20862-1, SUSE-SU-2026:20853-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_11 +2 | 6-1.1 | SUSE-SU-2026:20864-1, SUSE-SU-2026:20863-1, SUSE-SU-2026:20854-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_13 | 4-1.1 | SUSE-SU-2026:20865-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_14 | 2-1.2 | SUSE-SU-2026:20866-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_5 | 17-1.2 | SUSE-SU-2026:20857-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_6 | 15-3.1 | SUSE-SU-2026:20858-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_7 | 14-1.2 | SUSE-SU-2026:20859-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_8 +2 | 13-1.2 | SUSE-SU-2026:20861-1, SUSE-SU-2026:20860-1, SUSE-SU-2026:20850-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-40.1 | SUSE-SU-2026:20845-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-39.1 | SUSE-SU-2026:20477-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.136.1.150500.6.67.1 | SUSE-SU-2026:0474-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.121.1 | SUSE-SU-2026:0496-1 |
| SLE Micro 5.5 | kernel-source +1 | 5.14.21-150500.55.136.1 | SUSE-SU-2026:0474-1 |
| SLE Micro 5.4 | kernel-default | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.194.1.150400.24.98.3 | SUSE-SU-2026:0617-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.142.1 | SUSE-SU-2026:0411-1 |
| SLE Micro 5.3 | kernel-default | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.194.1.150400.24.98.3 | SUSE-SU-2026:0617-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.142.1 | SUSE-SU-2026:0411-1 |
| SLE Micro 5.2 | kernel-default | 5.3.18-150300.59.232.1 | SUSE-SU-2026:0369-1 |
| SLE Micro 5.2 | kernel-default-base | 5.3.18-150300.59.232.1.150300.18.138.1 | SUSE-SU-2026:0369-1 |
| SLE Micro 5.2 | kernel-rt +1 | 5.3.18-150300.232.1 | SUSE-SU-2026:0350-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.31.1 | SUSE-SU-2026:0447-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_0 | 12-150700.3.1 | SUSE-SU-2026:0939-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_6 | 3-150700.2.1 | SUSE-SU-2026:0946-1, SUSE-SU-2026:0943-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_9 | 1-150700.1.3.2 | SUSE-SU-2026:0587-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_0 | 12-150700.3.33.1 | SUSE-SU-2026:1125-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_1 +1 | 12-150700.2.1 | SUSE-SU-2026:1101-1, SUSE-SU-2026:0940-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_2 +1 | 11-150700.2.1 | SUSE-SU-2026:1132-1, SUSE-SU-2026:0951-1, SUSE-SU-2026:0941-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_4 | 7-150700.2.1 | SUSE-SU-2026:1096-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_5 | 4-150700.2.1 | SUSE-SU-2026:1099-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_7 +3 | 2-150700.2.1 | SUSE-SU-2026:1136-1, SUSE-SU-2026:1102-1, SUSE-SU-2026:0945-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_9 | 1-150700.15.3.1 | SUSE-SU-2026:0447-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_10 | 14-150600.2.2 | SUSE-SU-2026:1073-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_12 | 13-150600.2.1 | SUSE-SU-2026:1125-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_13 | 11-150600.2.1 | SUSE-SU-2026:1083-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_14 +1 | 7-150600.2.1 | SUSE-SU-2026:1096-1, SUSE-SU-2026:1089-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_17 +2 | 2-150600.2.1 | SUSE-SU-2026:1102-1, SUSE-SU-2026:1100-1, SUSE-SU-2026:1099-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_20 | 1-150600.13.3.1 | SUSE-SU-2026:0471-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.136.1 | SUSE-SU-2026:0474-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_24 | 16-150500.2.2 | SUSE-SU-2026:1000-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_25 | 15-150500.2.2 | SUSE-SU-2026:1049-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_27 | 14-150500.2.1 | SUSE-SU-2026:1002-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_29 | 11-150500.2.1 | SUSE-SU-2026:1039-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_31 | 6-150500.2.1 | SUSE-SU-2026:1048-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_34 | 3-150500.2.1 | SUSE-SU-2026:1059-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_35 | 1-150500.11.3.1 | SUSE-SU-2026:0474-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_36 +1 | 16-150400.2.2 | SUSE-SU-2026:1046-1, SUSE-SU-2026:0983-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_44 | 9-150400.2.1 | SUSE-SU-2026:0992-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_45 | 7-150400.2.1 | SUSE-SU-2026:0997-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_47 | 3-150400.2.1 | SUSE-SU-2026:1048-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_48 | 1-150400.9.7.1 | SUSE-SU-2026:0617-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.293.1 | SUSE-SU-2026:0473-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_65 | 15-2.1 | SUSE-SU-2026:0953-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_67 | 14-2.1 | SUSE-SU-2026:1088-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_68 | 12-2.1 | SUSE-SU-2026:0954-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_70 | 11-2.1 | SUSE-SU-2026:1044-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_72 | 7-2.1 | SUSE-SU-2026:0958-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_73 | 5-2.1 | SUSE-SU-2026:0970-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_75 +1 | 3-2.1 | SUSE-SU-2026:0967-1, SUSE-SU-2026:0964-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_77 | 1-8.3.1 | SUSE-SU-2026:0473-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.136.1 | SUSE-SU-2026:0474-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.136.1.150500.6.67.1 | SUSE-SU-2026:0474-1 |
| SLE HPC 15 SP4 | kernel-64kb +5 | 5.14.21-150400.24.194.1 | SUSE-SU-2026:0617-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.194.1.150400.24.98.3 | SUSE-SU-2026:0617-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt | 6.4.0-150700.7.31.2 | SUSE-SU-2026:0587-1 |
| SUSE Real Time Module 15 SP7 | kernel-syms-rt +1 | 6.4.0-150700.7.31.1 | SUSE-SU-2026:0587-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.26.1.160000.2.7 | openSUSE-SU-2026:20287-1 |
| openSUSE Leap 16.0 | kernel-rt +11 | 6.12.0-160000.26.1 | openSUSE-SU-2026:20287-1 |
| openSUSE Leap 15.6 | dtb-aarch64 +10 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.87.1.150600.12.40.1 | SUSE-SU-2026:0471-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.12.64-87.122 +1 | 1:1.0-0.amzn2023 | ALAS2023-2026-1494, ALAS2023-2026-1423 |
| Amazon Linux 2023 | perf +14 | 1:6.1.161-183.298.amzn2023 | ALAS2023-2026-1494 |
| Amazon Linux 2023 | perf6.12 +14 | 1:6.12.64-87.122.amzn2023 | ALAS2023-2026-1423 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-108.64.6.3.el10uek | ELSA-2026-50112 |
| Oracle Linux 8 | bpftool +18 | 5.15.0-318.199.3.2.el9uek | ELSA-2026-50145 |
Advisories 50
- WID-SEC-2026-0086 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-8440-1 linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8096-1 linux, linux-aws, linux-gcp, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8179-1 linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8183-2 linux-aws, linux-aws-6.17, linux-hwe-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8243-1 linux-azure-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8203-1 linux-oracle, linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8204-1 linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8184-1 linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8185-1 linux-nvidia, linux-nvidia-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8185-2 linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8096-3 linux-aws-5.15, linux-gcp-5.15, linux-gke, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8179-3 linux-hwe-6.8, linux-ibm-6.8, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8265-1 linux-nvidia-tegra vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8258-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8116-1 linux-intel-iot-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8179-4 linux-gcp-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8096-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8163-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8183-1 linux-gcp, linux-gcp-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8245-1 linux-azure, linux-azure-6.17, linux-oem-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8177-2 linux-realtime-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8141-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8179-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8163-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8096-5 linux-nvidia-tegra-igx vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8177-1 linux, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8096-4 linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8261-1 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Sep 7, 2026
- SUSE-SU-2026:20570-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 9, 2026
- SUSE-SU-2026:20947-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Apr 2, 2026
- SUSE-SU-2026:20946-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Apr 2, 2026
- SUSE-SU-2026:20945-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Apr 2, 2026
- SUSE-SU-2026:20944-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Apr 2, 2026
- SUSE-SU-2026:20943-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Apr 2, 2026
- SUSE-SU-2026:20899-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20900-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20898-1 Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20891-1 Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20897-1 Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20883-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20889-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20880-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20881-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20885-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20896-1 Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20882-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20894-1 Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20895-1 Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20887-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Mar 31, 2026
References
- https://git.kernel.org/stable/c/dd72a93c80408f06327dd2d956eb1a656d0b5903
- https://git.kernel.org/stable/c/312d7cd88882fc6cadcc08b02287497aaaf94bcd
- https://git.kernel.org/stable/c/cdeff10851c37a002d87a035818ebd60fdb74447
- https://git.kernel.org/stable/c/4729ff0581fbb7ad098b6153b76b6f5aac94618a
- https://git.kernel.org/stable/c/25ab24df31f7af843c96a38e0781b9165216e1a8
- https://git.kernel.org/stable/c/689a627d14788ad772e0fa24c2e57a23dbc7ce90
- https://git.kernel.org/stable/c/ad891bb3d079a46a821bf2b8867854645191bab0