Skip to content
OpenAdvisories
Critical · 9.8 Public exploit CVE-2026-31402 EUVD-2026-18786GHSA-7xf5-3qmr-j4c6

nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

Published Apr 3, 2026 · Updated Nov 10, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.14 Package: linux-aws-6.17 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-6.8 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.11 Package: linux-azure-6.14 Package: linux-azure-6.17 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-6.8 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.15 Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.14 Package: linux-azure-fde-6.2 Package: linux-azure-fde-6.8 Package: linux-azure-fips Package: linux-azure-nvidia Package: linux-azure-nvidia-6.14 Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.11 Package: linux-gcp-6.14 Package: linux-gcp-6.17 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-6.8 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.11 Package: linux-hwe-6.14 Package: linux-hwe-6.17 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-6.8 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-ibm-6.8 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.11 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-lowlatency-hwe-6.8 Package: linux-lts-xenial Package: linux-nvidia Package: linux-nvidia-6.11 Package: linux-nvidia-6.17 Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-6.8 Package: linux-nvidia-lowlatency Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.11 Package: linux-oem-6.14 Package: linux-oem-6.17 Package: linux-oem-6.5 Package: linux-oem-6.8 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-oracle-6.14 Package: linux-oracle-6.17 Package: linux-oracle-6.5 Package: linux-oracle-6.8 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-realtime-6.14 Package: linux-realtime-6.17 Package: linux-realtime-6.8 Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.14 Package: linux-riscv-6.17 Package: linux-riscv-6.5 Package: linux-riscv-6.8 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix heap overflow in NFSv4.0 LOCK replay cache

The NFSv4.0 replay cache uses a fixed 112-byte inline buffer
(rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses.
This size was calculated based on OPEN responses and does not account
for LOCK denied responses, which include the conflicting lock owner as
a variable-length field up to 1024 bytes (NFS4_OPAQUE_LIMIT).

When a LOCK operation is denied due to a conflict with an existing lock
that has a large owner, nfsd4_encode_operation() copies the full encoded
response into the undersized replay buffer via read_bytes_from_xdr_buf()
with no bounds check. This results in a slab-out-of-bounds write of up
to 944 bytes past the end of the buffer, corrupting adjacent heap memory.

This can be triggered remotely by an unauthenticated attacker with two
cooperating NFSv4.0 clients: one sets a lock with a large owner string,
then the other requests a conflicting lock to provoke the denial.

We could fix this by increasing NFSD4_REPLAY_ISIZE to allow for a full
opaque, but that would increase the size of every stateowner, when most
lockowners are not that large.

Instead, fix this by checking the encoded response length against
NFSD4_REPLAY_ISIZE before copying into the replay buffer. If the
response is too large, set rp_buflen to 0 to skip caching the replay
payload. The status is still cached, and the client already received the
correct response on the original request.

Affected products

VendorProductAffectedFixed
Linux Linux 2.6.12 5.10.253

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 6.19.10-1 —
Debian 13 linux 6.12.85-1 —
Debian 12 linux 6.1.170-1 —
ReleasePackageFixed inAdvisory
Ubuntu Nvidia-BlueField 24.04 LTS linux-bluefield 6.8.0-1026.30 —
Ubuntu Nvidia-BlueField 22.04 LTS linux-bluefield 5.15.0-1095.97 —
Ubuntu 25.10 linux 6.17.0-40.40 USN-8490-1
Ubuntu 25.10 linux-aws 6.17.0-1019.19 USN-8490-1
Ubuntu 25.10 linux-azure +1 No fix yet —
Ubuntu 25.10 linux-gcp 6.17.0-1020.22 USN-8490-1
Ubuntu 25.10 linux-oracle 6.17.0-1018.18 USN-8490-1
Ubuntu 25.10 linux-raspi 6.17.0-1021.21 USN-8546-1
Ubuntu 25.10 linux-realtime 6.17.0-1017.19 USN-8490-2
Ubuntu 25.10 linux-riscv 6.17.0-40.40.1 —
Ubuntu 24.04 LTS linux 6.8.0-134.134 USN-8492-1
Ubuntu 24.04 LTS linux-aws 6.8.0-1060.63 USN-8492-1
Ubuntu 24.04 LTS linux-aws-6.17 6.17.0-1019.19~24.04.1 USN-8490-1
Ubuntu 24.04 LTS linux-azure 6.8.0-1063.71 USN-8606-1
Ubuntu 24.04 LTS linux-azure-6.17 6.17.0-1021.21~24.04.1 USN-8604-1
Ubuntu 24.04 LTS linux-azure-fde 6.8.0-1062.69 USN-8607-1
Ubuntu 24.04 LTS linux-gcp 6.8.0-1063.69 USN-8492-1
Ubuntu 24.04 LTS linux-gcp-6.17 6.17.0-1020.22~24.04.1 USN-8490-1
Ubuntu 24.04 LTS linux-gke 6.8.0-1058.64 USN-8492-2
Ubuntu 24.04 LTS linux-gkeop 6.8.0-1045.48 USN-8492-2
Ubuntu 24.04 LTS linux-hwe-6.17 6.17.0-40.40~24.04.1 USN-8545-1
Ubuntu 24.04 LTS linux-ibm 6.8.0-1060.61 USN-8492-1
Ubuntu 24.04 LTS linux-lowlatency 6.8.0-134.134.1 USN-8497-1
Ubuntu 24.04 LTS linux-nvidia 6.8.0-1058.61 USN-8492-1
Ubuntu 24.04 LTS linux-nvidia-6.17 6.17.0-1026.26 USN-8508-1
Ubuntu 24.04 LTS linux-nvidia-lowlatency 6.8.0-1058.61.1 USN-8492-2
Ubuntu 24.04 LTS linux-nvidia-tegra 6.8.0-1029.30 USN-8498-1
Ubuntu 24.04 LTS linux-oem-6.17 6.17.0-1028.28 USN-8491-1
Ubuntu 24.04 LTS linux-oracle 6.8.0-1057.58 USN-8492-1
Ubuntu 24.04 LTS linux-oracle-6.17 +1 6.17.0-1018.18~24.04.1 USN-8605-1, USN-8490-1
Ubuntu 24.04 LTS linux-raspi 6.8.0-1060.64 USN-8492-4
Ubuntu 24.04 LTS linux-riscv +20 No fix yet —
Ubuntu 24.04 LTS linux-vmware 6.8.0-1008.8 —
Ubuntu 24.04 LTS linux-xilinx 6.8.0-1032.33 USN-8499-1
Ubuntu 22.04 LTS linux 5.15.0-185.195 USN-8493-1
Ubuntu 22.04 LTS linux-aws 5.15.0-1111.118 USN-8493-1
Ubuntu 22.04 LTS linux-aws-6.8 6.8.0-1060.63~22.04.1 USN-8492-2
Ubuntu 22.04 LTS linux-azure +1 5.15.0-1116.125 USN-8493-1
Ubuntu 22.04 LTS linux-azure-6.8 6.8.0-1063.71~22.04.1 USN-8606-1
Ubuntu 22.04 LTS linux-azure-fde-6.8 6.8.0-1062.69~22.04.1 USN-8609-1
Ubuntu 22.04 LTS linux-gcp 5.15.0-1111.121 USN-8493-1
Ubuntu 22.04 LTS linux-gcp-6.8 6.8.0-1063.69~22.04.1 USN-8492-2
Ubuntu 22.04 LTS linux-gke 5.15.0-1107.113 USN-8493-1
Ubuntu 22.04 LTS linux-gkeop 5.15.0-1094.102 USN-8493-1
Ubuntu 22.04 LTS linux-hwe-6.8 6.8.0-136.136~22.04.1 USN-8619-1
Ubuntu 22.04 LTS linux-ibm 5.15.0-1105.109 USN-8493-1
Ubuntu 22.04 LTS linux-ibm-6.8 6.8.0-1060.61~22.04.1 USN-8492-2
Ubuntu 22.04 LTS linux-intel-iotg 5.15.0-1106.112 USN-8493-1
Ubuntu 22.04 LTS linux-kvm 5.15.0-1103.108 USN-8493-1
Ubuntu 22.04 LTS linux-lowlatency 5.15.0-183.193 USN-8493-1
Ubuntu 22.04 LTS linux-lowlatency-hwe-6.8 6.8.0-134.134.1~22.04.1 USN-8497-1
Ubuntu 22.04 LTS linux-nvidia 5.15.0-1106.107 USN-8493-1
Ubuntu 22.04 LTS linux-nvidia-6.8 6.8.0-1058.61~22.04.1 USN-8492-1
Ubuntu 22.04 LTS linux-nvidia-tegra 5.15.0-1063.63 USN-8493-1
Ubuntu 22.04 LTS linux-nvidia-tegra-igx 5.15.0-1052.52 USN-8493-1
Ubuntu 22.04 LTS linux-oracle 5.15.0-1108.114 USN-8493-1
Ubuntu 22.04 LTS linux-oracle-6.8 6.8.0-1057.58~22.04.1 USN-8492-2
Ubuntu 22.04 LTS linux-raspi 5.15.0-1105.108 USN-8527-1
Ubuntu 22.04 LTS linux-riscv +32 No fix yet —
Ubuntu 22.04 LTS linux-riscv-6.8 6.8.0-134.134~22.04.1 —
Ubuntu 22.04 LTS linux-xilinx-zynqmp 5.15.0-1074.78 USN-8528-1
Show 21 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS linux-gke +28 No fix yet —
Ubuntu 18.04 LTS linux-gcp +14 No fix yet —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu Pro Realtime 24.04 LTS linux-raspi-realtime 6.8.0-2049.50 USN-8492-3
Ubuntu Pro Realtime 24.04 LTS linux-realtime 6.8.1-1055.56 USN-8492-1
Ubuntu Pro Realtime 24.04 LTS linux-realtime-6.14 No fix yet —
Ubuntu Pro Realtime 24.04 LTS linux-realtime-6.17 6.17.0-1017.19~24.04.1 USN-8490-2
Ubuntu Pro Realtime 22.04 LTS linux-intel-iot-realtime 5.15.0-1103.105 USN-8493-1
Ubuntu Pro Realtime 22.04 LTS linux-realtime 5.15.0-1110.119 USN-8493-1
Ubuntu Pro Realtime 22.04 LTS linux-realtime-6.8 6.8.1-1055.56~22.04.1 USN-8492-1
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 24.04 LTS linux-aws-fips 6.8.0-1060.63+fips1 USN-8492-1
Ubuntu Pro FIPS-updates 24.04 LTS linux-azure-fips 6.8.0-1062.69+fips1 USN-8492-5
Ubuntu Pro FIPS-updates 24.04 LTS linux-fips 6.8.0-134.134+fips1 USN-8492-5
Ubuntu Pro FIPS-updates 24.04 LTS linux-gcp-fips 6.8.0-1063.69+fips1 USN-8492-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-aws-fips 5.15.0-1111.118+fips1 USN-8493-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-azure-fips 5.15.0-1116.125+fips1 USN-8547-2
Ubuntu Pro FIPS-updates 22.04 LTS linux-fips 5.15.0-185.195+fips1 USN-8493-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-gcp-fips 5.15.0-1111.121+fips1 USN-8493-1
Ubuntu Pro FIPS-updates 20.04 LTS linux-aws-fips 5.4.0-1161.172+fips1 USN-8615-1
Ubuntu Pro FIPS-updates 20.04 LTS linux-azure-fips 5.4.0-1166.172+fips1 USN-8615-1
Ubuntu Pro FIPS-updates 20.04 LTS linux-fips 5.4.0-1135.145 USN-8615-1
Ubuntu Pro FIPS-updates 20.04 LTS linux-gcp-fips 5.4.0-1164.173+fips1 USN-8615-1
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2132.138 USN-8530-1
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2112.118 USN-8529-1
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips 4.15.0-1149.161 USN-8529-1
Ubuntu Pro FIPS-updates 18.04 LTS linux-gcp-fips 4.15.0-2095.101 USN-8529-1
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1126.133 USN-8548-1
Ubuntu Pro FIPS-preview 22.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro 26.04 LTS linux 7.0.0-28.28 LSN-0122-1, LSN-0121-1
Ubuntu Pro 26.04 LTS linux-aws 7.0.0-1009.9 LSN-0122-1, LSN-0121-1
Ubuntu Pro 26.04 LTS linux-azure 7.0.0-1010.10 LSN-0122-1, LSN-0121-1
Ubuntu Pro 26.04 LTS linux-gcp 7.0.0-1008.8 LSN-0122-1, LSN-0121-1
Ubuntu Pro 24.04 LTS linux 6.8.0-136.136 LSN-0122-1, LSN-0121-1
Ubuntu Pro 24.04 LTS linux-aws 6.8.0-1061.64 LSN-0122-1, LSN-0121-1
Ubuntu Pro 24.04 LTS linux-azure 6.8.0-1063.71 LSN-0122-1, LSN-0121-1
Ubuntu Pro 24.04 LTS linux-gcp 6.8.0-1064.72 LSN-0122-1, LSN-0121-1
Ubuntu Pro 24.04 LTS linux-gke 6.8.0-1059.67 LSN-0122-1, LSN-0121-1
Ubuntu Pro 24.04 LTS linux-ibm 6.8.0-1061.62 LSN-0122-1, LSN-0121-1
Ubuntu Pro 24.04 LTS linux-oracle 6.8.0-1058.61 LSN-0122-1, LSN-0121-1
Ubuntu Pro 22.04 LTS linux 5.15.0-187.197 LSN-0122-1, LSN-0121-1
Ubuntu Pro 22.04 LTS linux-aws 5.15.0-1113.120 LSN-0122-1, LSN-0121-1
Ubuntu Pro 22.04 LTS linux-aws-6.8 6.8.0-1061.64~22.04.1 LSN-0122-1, LSN-0121-1
Ubuntu Pro 22.04 LTS linux-azure 5.15.0-1118.127 LSN-0122-1, LSN-0121-1
Ubuntu Pro 22.04 LTS linux-gcp 5.15.0-1114.124 LSN-0122-1, LSN-0121-1
Ubuntu Pro 22.04 LTS linux-gcp-6.8 6.8.0-1064.72~22.04.1 LSN-0122-1, LSN-0121-1
Ubuntu Pro 22.04 LTS linux-gke 5.15.0-1110.116 LSN-0122-1, LSN-0121-1
Ubuntu Pro 22.04 LTS linux-hwe-6.8 6.8.0-136.136~22.04.1 LSN-0122-1, LSN-0121-1
Ubuntu Pro 22.04 LTS linux-ibm 5.15.0-1107.111 LSN-0122-1, LSN-0121-1
Ubuntu Pro 22.04 LTS linux-ibm-6.8 6.8.0-1061.62~22.04.1 LSN-0122-1, LSN-0121-1
Ubuntu Pro 22.04 LTS linux-lowlatency 5.15.0-197.207 LSN-0122-1
Ubuntu Pro 20.04 LTS linux 5.4.0-233.253 USN-8615-1, LSN-0122-1, LSN-0121-1
Ubuntu Pro 20.04 LTS linux-aws 5.4.0-1161.172 USN-8615-1
Ubuntu Pro 20.04 LTS linux-aws-5.15 5.15.0-1111.118~20.04.1 USN-8493-1
Ubuntu Pro 20.04 LTS linux-azure 5.4.0-1166.172 USN-8615-1
Ubuntu Pro 20.04 LTS linux-azure-5.15 +1 5.15.0-1116.125~20.04.1 USN-8493-1
Ubuntu Pro 20.04 LTS linux-bluefield 5.4.0-1120.127 USN-8615-1
Ubuntu Pro 20.04 LTS linux-gcp 5.4.0-1164.173 USN-8615-1
Ubuntu Pro 20.04 LTS linux-gcp-5.15 5.15.0-1111.121~20.04.1 USN-8547-1
Ubuntu Pro 20.04 LTS linux-hwe-5.15 5.15.0-185.195~20.04.1 USN-8493-1
Ubuntu Pro 20.04 LTS linux-ibm 5.4.0-1107.112 USN-8616-1
Ubuntu Pro 20.04 LTS linux-ibm-5.15 +1 5.15.0-1105.109~20.04.1 USN-8493-1
Ubuntu Pro 20.04 LTS linux-intel-iotg-5.15 5.15.0-1106.112~20.04.1 USN-8547-1
Ubuntu Pro 20.04 LTS linux-iot 5.4.0-1065.68 USN-8615-1
Ubuntu Pro 20.04 LTS linux-kvm 5.4.0-1149.158 USN-8667-1
Ubuntu Pro 20.04 LTS linux-lowlatency-hwe-5.15 5.15.0-183.193~20.04.1 USN-8493-1
Ubuntu Pro 20.04 LTS linux-nvidia-tegra-5.15 5.15.0-1063.63~20.04.1 USN-8493-1
Ubuntu Pro 20.04 LTS linux-oracle 5.4.0-1159.169 USN-8615-1
Ubuntu Pro 20.04 LTS linux-oracle-5.15 5.15.0-1108.114~20.04.1 USN-8493-2
Ubuntu Pro 20.04 LTS linux-raspi 5.4.0-1144.157 USN-8615-2
Ubuntu Pro 20.04 LTS linux-xilinx-zynqmp 5.4.0-1079.83 USN-8615-1
Ubuntu Pro 18.04 LTS linux 4.15.0-253.265 USN-8529-1, LSN-0122-1, LSN-0121-1
Ubuntu Pro 18.04 LTS linux-aws 4.15.0-1194.207 USN-8530-1, LSN-0122-1, LSN-0121-1
Ubuntu Pro 18.04 LTS linux-aws-5.4 5.4.0-1161.172~18.04.1 USN-8615-1
Ubuntu Pro 18.04 LTS linux-azure-4.15 4.15.0-1204.219 USN-8529-1, LSN-0122-1, LSN-0121-1
Ubuntu Pro 18.04 LTS linux-azure-5.4 5.4.0-1166.172~18.04.1 USN-8615-1
Ubuntu Pro 18.04 LTS linux-gcp-4.15 4.15.0-1187.204 USN-8529-1, LSN-0122-1, LSN-0121-1
Ubuntu Pro 18.04 LTS linux-gcp-5.4 5.4.0-1164.173~18.04.1 USN-8615-1
Ubuntu Pro 18.04 LTS linux-hwe-5.4 5.4.0-233.253~18.04.1 USN-8615-1, LSN-0122-1, LSN-0121-1
Ubuntu Pro 18.04 LTS linux-ibm-5.4 5.4.0-1107.112~18.04.1 USN-8616-1
Ubuntu Pro 18.04 LTS linux-kvm 4.15.0-1176.181 USN-8529-1
Ubuntu Pro 18.04 LTS linux-oracle 4.15.0-1156.167 USN-8529-1, LSN-0122-1, LSN-0121-1
Ubuntu Pro 18.04 LTS linux-oracle-5.4 5.4.0-1159.169~18.04.1 USN-8615-1
Ubuntu Pro 18.04 LTS linux-raspi-5.4 5.4.0-1144.157~18.04.1 USN-8615-2
Ubuntu Pro 16.04 LTS linux 4.4.0-283.317 USN-8548-2, LSN-0122-1, LSN-0121-1
Ubuntu Pro 16.04 LTS linux-aws 4.4.0-1194.209 USN-8548-2, LSN-0122-1, LSN-0121-1
Ubuntu Pro 16.04 LTS linux-aws-hwe 4.15.0-1194.207~16.04.1 USN-8530-2, LSN-0122-1, LSN-0121-1
Ubuntu Pro 16.04 LTS linux-azure 4.15.0-1204.219~16.04.1 USN-8529-2, LSN-0122-1, LSN-0121-1
Ubuntu Pro 16.04 LTS linux-gcp 4.15.0-1187.204~16.04.1 USN-8529-2, LSN-0122-1, LSN-0121-1
Ubuntu Pro 16.04 LTS linux-hwe 4.15.0-253.265~16.04.1 USN-8529-2, LSN-0122-1, LSN-0121-1
Ubuntu Pro 16.04 LTS linux-kvm 4.4.0-1157.168 USN-8548-2
Ubuntu Pro 16.04 LTS linux-oracle 4.15.0-1156.167~16.04.1 USN-8529-2
Ubuntu Pro 14.04 LTS linux 3.13.0-214.265 USN-8501-1
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1156.162 USN-8548-1
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1205.220~14.04.1 USN-8635-1
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-283.317~14.04.1 USN-8548-1
ReleasePackageFixed inAdvisory
RHEL 10 rv +76 6.12.0-124.55.1.el10_1 RHSA-2026:19569, RHSA-2026:13566
RHEL 9 rv +75 5.14.0-611.54.1.el9_7 RHSA-2026:19568, RHSA-2026:13565
RHEL 8 kernel-rt +12 4.18.0-553.123.1.rt7.464.el8_10 RHSA-2026:13578
RHEL 8 kpatch-patch-4_18_0-553_109_1 1-6.el8_10 RHSA-2026:36530
RHEL 8 kpatch-patch-4_18_0-553_125_1 1-3.el8_10 RHSA-2026:36530
RHEL 8 kpatch-patch-4_18_0-553_53_1 1-13.el8_10 RHSA-2026:36530
RHEL 8 kpatch-patch-4_18_0-553_72_1 1-10.el8_10 RHSA-2026:36530
RHEL 8 kpatch-patch-4_18_0-553_85_1 1-8.el8_10 RHSA-2026:36530
RHEL 8 perf +26 4.18.0-553.123.1.el8_10 RHSA-2026:13577
Show 16 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Rt Els 7 kernel-rt +7 3.10.0-1160.149.1.rt56.1301.el7 RHSA-2026:14869
RHEL 10.0 EUS rv +77 6.12.0-55.72.1.el10_0 RHSA-2026:15883
RHEL 9.6 EUS kpatch-patch-5_14_0-570_116_1 1-3.el9_6 RHSA-2026:36534
RHEL 9.6 EUS kpatch-patch-5_14_0-570_17_1 1-18.el9_6 RHSA-2026:36534
RHEL 9.6 EUS kpatch-patch-5_14_0-570_39_1 1-9.el9_6 RHSA-2026:36534
RHEL 9.6 EUS kpatch-patch-5_14_0-570_66_1 1-8.el9_6 RHSA-2026:36534
RHEL 9.6 EUS kpatch-patch-5_14_0-570_94_1 1-6.el9_6 RHSA-2026:36534
RHEL 9.6 EUS rv +77 5.14.0-570.110.1.el9_6 RHSA-2026:11313
RHEL 9.4 EUS bpftool 7.3.0-427.121.1.el9_4 RHSA-2026:10108
RHEL 9.4 EUS rv +64 5.14.0-427.121.1.el9_4 RHSA-2026:10108
RHEL 9.4 E4S kpatch-patch-5_14_0-427_100_1 1-8.el9_4 RHSA-2026:36533
RHEL 9.4 E4S kpatch-patch-5_14_0-427_113_1 1-6.el9_4 RHSA-2026:36533
RHEL 9.4 E4S kpatch-patch-5_14_0-427_126_1 1-3.el9_4 RHSA-2026:36533
RHEL 9.4 E4S kpatch-patch-5_14_0-427_68_2 1-15.el9_4 RHSA-2026:36533
RHEL 9.4 E4S kpatch-patch-5_14_0-427_84_1 1-10.el9_4 RHSA-2026:36533
RHEL 9.2 E4S bpftool 7.0.0-284.169.1.el9_2 RHSA-2026:13734
RHEL 9.2 E4S kernel-rt +14 5.14.0-284.169.1.rt14.454.el9_2 RHSA-2026:14301
RHEL 9.2 E4S kpatch-patch-5_14_0-284_117_1 1-16.el9_2 RHSA-2026:36532
RHEL 9.2 E4S kpatch-patch-5_14_0-284_134_1 1-10.el9_2 RHSA-2026:36532
RHEL 9.2 E4S kpatch-patch-5_14_0-284_148_1 1-8.el9_2 RHSA-2026:36532
RHEL 9.2 E4S kpatch-patch-5_14_0-284_158_1 1-6.el9_2 RHSA-2026:36532
RHEL 9.2 E4S kpatch-patch-5_14_0-284_172_1 1-3.el9_2 RHSA-2026:36532
RHEL 9.2 E4S perf +47 5.14.0-284.169.1.el9_2 RHSA-2026:13734
RHEL 9.0 E4S kernel-rt +12 5.14.0-70.178.1.rt21.250.el9_0 RHSA-2026:14137
RHEL 9.0 E4S perf +28 5.14.0-70.178.1.el9_0 RHSA-2026:13936
RHEL 8.8 TUS perf +17 4.18.0-477.139.1.el8_8 RHSA-2026:13681
RHEL 8.8 E4S kpatch-patch-4_18_0-477_107_1 1-9.el8_8 RHSA-2026:36531
RHEL 8.8 E4S kpatch-patch-4_18_0-477_120_1 1-8.el8_8 RHSA-2026:36531
RHEL 8.8 E4S kpatch-patch-4_18_0-477_130_1 1-6.el8_8 RHSA-2026:36531
RHEL 8.8 E4S kpatch-patch-4_18_0-477_97_1 1-13.el8_8 RHSA-2026:36531
RHEL 8.8 E4S perf +18 4.18.0-477.139.1.el8_8 RHSA-2026:13681
RHEL 8.6 TUS perf +17 4.18.0-372.190.1.el8_6 RHSA-2026:13664
RHEL 8.6 E4S perf +25 4.18.0-372.190.1.el8_6 RHSA-2026:13664
RHEL 8.6 AUS perf +17 4.18.0-372.190.1.el8_6 RHSA-2026:13664
RHEL 8.4 EUS Long Life perf +17 4.18.0-305.190.1.el8_4 RHSA-2026:14165
RHEL 8.4 AUS perf +17 4.18.0-305.190.1.el8_4 RHSA-2026:14165
RHEL 7 ELS perf +18 3.10.0-1160.149.1.el7 RHSA-2026:14925
RHEL 6 ELS perf +13 2.6.32-754.60.1.el6 RHSA-2026:14823

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 kernel-doc +1 6.12.0-124.55.1.el10_1 ALSA-2026:19569, ALSA-2026:13566
AlmaLinux 10 rv +72 6.12.0-211.16.1.el10_2 ALSA-2026:19569
AlmaLinux 9 rv +73 5.14.0-611.54.1.el9_7 ALSA-2026:19568, ALSA-2026:13565
AlmaLinux 8 kernel-rt +9 4.18.0-553.123.1.rt7.464.el8_10 ALSA-2026:13578
AlmaLinux 8 perf +24 4.18.0-553.123.1.el8_10 ALSA-2026:13577

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 kernel 6.12.0-124.55.1.el10_1 RLSA-2026:19569, RLSA-2026:13566
Rocky Linux 9 kernel 5.14.0-611.54.1.el9_7 RXSA-2026:13565, RLSA-2026:19568, RLSA-2026:13565
Rocky Linux 8 kernel 4.18.0-553.123.1.el8_10 RXSA-2026:13577, RLSA-2026:13577
Rocky Linux 8 kernel-rt 4.18.0-553.123.1.rt7.464.el8_10 RLSA-2026:13578
ReleasePackageFixed inAdvisory
SLES 15 SP7 kernel-64kb +7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1
SLES 15 SP7 kernel-default-base 6.4.0-150700.53.55.1.150700.17.33.1 SUSE-SU-2026:2238-1
SLES 15 SP6 kernel-64kb +6 6.4.0-150600.23.112.1 SUSE-SU-2026:2195-1
SLES 15 SP6 kernel-default-base 6.4.0-150600.23.112.1.150600.12.52.1 SUSE-SU-2026:2195-1
SLES 11 SP4 kernel-ec2 +6 3.0.101-108.210.1 SUSE-SU-2026:2317-1
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_0 14-160000.4.3 SUSE-SU-2026:22383-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_1 12-160000.1.1 SUSE-SU-2026:22384-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_2 10-160000.1.1 SUSE-SU-2026:22385-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_3 9-160000.1.1 SUSE-SU-2026:22390-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_4 8-160000.1.1 SUSE-SU-2026:22386-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_5 7-160000.1.1 SUSE-SU-2026:22507-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_6 6-160000.1.1 SUSE-SU-2026:22387-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_7 5-160000.1.1 SUSE-SU-2026:22388-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_8 4-160000.1.1 SUSE-SU-2026:22389-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_9 +2 3-160000.1.1 SUSE-SU-2026:22509-1, SUSE-SU-2026:22508-1, SUSE-SU-2026:22391-1
SLES for SAP 15 SP6 kernel-default-base 6.4.0-150600.23.112.1.150600.12.52.1 SUSE-SU-2026:2195-1
SLES for SAP 15 SP6 kernel-docs +4 6.4.0-150600.23.112.1 SUSE-SU-2026:2195-1
SLES 16.0 kernel-livepatch-SLE16_Update_0 14-160000.4.3 SUSE-SU-2026:22383-1
SLES 16.0 kernel-livepatch-SLE16_Update_1 12-160000.1.1 SUSE-SU-2026:22384-1
SLES 16.0 kernel-livepatch-SLE16_Update_2 10-160000.1.1 SUSE-SU-2026:22385-1
SLES 16.0 kernel-livepatch-SLE16_Update_3 9-160000.1.1 SUSE-SU-2026:22390-1
SLES 16.0 kernel-livepatch-SLE16_Update_4 8-160000.1.1 SUSE-SU-2026:22386-1
SLES 16.0 kernel-livepatch-SLE16_Update_5 7-160000.1.1 SUSE-SU-2026:22507-1
SLES 16.0 kernel-livepatch-SLE16_Update_6 6-160000.1.1 SUSE-SU-2026:22387-1
SLES 16.0 kernel-livepatch-SLE16_Update_7 5-160000.1.1 SUSE-SU-2026:22388-1
SLES 16.0 kernel-livepatch-SLE16_Update_8 4-160000.1.1 SUSE-SU-2026:22389-1
SLES 16.0 kernel-livepatch-SLE16_Update_9 +2 3-160000.1.1 SUSE-SU-2026:22509-1, SUSE-SU-2026:22508-1, SUSE-SU-2026:22391-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_0 14-160000.4.3 SUSE-SU-2026:22276-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_1 12-160000.1.1 SUSE-SU-2026:22277-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_10 3-160000.1.1 SUSE-SU-2026:22288-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_2 10-160000.1.1 SUSE-SU-2026:22278-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_3 9-160000.1.1 SUSE-SU-2026:22283-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_4 8-160000.1.1 SUSE-SU-2026:22279-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_6 6-160000.1.1 SUSE-SU-2026:22280-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_7 5-160000.1.1 SUSE-SU-2026:22281-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_8 4-160000.1.1 SUSE-SU-2026:22282-1
SLE Micro 6.2 kernel-syms +1 6.12.0-160000.33.1 SUSE-SU-2026:21834-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_10 17-1.1 SUSE-SU-2026:22480-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_13 +1 8-1.1 SUSE-SU-2026:22484-1, SUSE-SU-2026:22483-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_22 2-1.2 SUSE-SU-2026:22490-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_9 17-1.2 SUSE-SU-2026:22479-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_10 +1 13-1.1 SUSE-SU-2026:22481-1, SUSE-SU-2026:22468-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_11 +2 12-1.1 SUSE-SU-2026:22482-1, SUSE-SU-2026:22472-1, SUSE-SU-2026:22469-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_13 10-1.1 SUSE-SU-2026:22470-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_14 8-1.2 SUSE-SU-2026:22467-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_16 +1 7-1.1 SUSE-SU-2026:22485-1, SUSE-SU-2026:22471-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_17 +1 6-1.1 SUSE-SU-2026:22486-1, SUSE-SU-2026:22466-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_18 +1 5-1.1 SUSE-SU-2026:22487-1, SUSE-SU-2026:22461-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_19 +1 3-1.1 SUSE-SU-2026:22488-1, SUSE-SU-2026:22462-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_20 +5 2-1.1 SUSE-SU-2026:22491-1, SUSE-SU-2026:22489-1, SUSE-SU-2026:22476-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_7 20-1.2 SUSE-SU-2026:22463-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_8 +2 19-1.2 SUSE-SU-2026:22478-1, SUSE-SU-2026:22465-1, SUSE-SU-2026:22464-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_10 17-1.1 SUSE-SU-2026:22403-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_13 +1 8-1.1 SUSE-SU-2026:22407-1, SUSE-SU-2026:22406-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_22 2-1.2 SUSE-SU-2026:22413-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_9 17-1.2 SUSE-SU-2026:22397-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_10 +1 13-1.1 SUSE-SU-2026:22415-1, SUSE-SU-2026:22404-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_11 +2 12-1.1 SUSE-SU-2026:22417-1, SUSE-SU-2026:22416-1, SUSE-SU-2026:22405-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_13 10-1.1 SUSE-SU-2026:22418-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_14 8-1.2 SUSE-SU-2026:22419-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_16 +1 7-1.1 SUSE-SU-2026:22420-1, SUSE-SU-2026:22408-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_17 +1 6-1.1 SUSE-SU-2026:22421-1, SUSE-SU-2026:22409-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_18 +1 5-1.1 SUSE-SU-2026:22410-1, SUSE-SU-2026:22401-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_19 +1 3-1.1 SUSE-SU-2026:22411-1, SUSE-SU-2026:22402-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_20 +5 2-1.1 SUSE-SU-2026:22428-1, SUSE-SU-2026:22427-1, SUSE-SU-2026:22426-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_7 20-1.2 SUSE-SU-2026:22398-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_8 +2 19-1.2 SUSE-SU-2026:22400-1, SUSE-SU-2026:22399-1, SUSE-SU-2026:22396-1
SLE Live Patching 15 SP7 kernel-default 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_1 18-150700.2.1 SUSE-SU-2026:2532-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_8 8-150700.2.1 SUSE-SU-2026:2500-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_11 +1 5-150700.2.1 SUSE-SU-2026:2520-1, SUSE-SU-2026:2503-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_14 2-150700.2.1 SUSE-SU-2026:2594-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_15 1-150700.15.3.1 SUSE-SU-2026:2238-1
SLE Live Patching 15 SP6 kernel-default 6.4.0-150600.23.112.1 SUSE-SU-2026:2195-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_11 +1 19-150600.2.1 SUSE-SU-2026:2610-1, SUSE-SU-2026:2532-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_18 8-150600.2.1 SUSE-SU-2026:2588-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_22 5-150600.2.1 SUSE-SU-2026:2520-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_23 4-150600.2.1 SUSE-SU-2026:2559-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_24 3-150600.2.1 SUSE-SU-2026:2608-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_26 1-150600.13.3.1 SUSE-SU-2026:2195-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_26 21-150500.2.1 SUSE-SU-2026:2567-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_30 14-150500.2.1 SUSE-SU-2026:2571-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_38 4-150500.2.1 SUSE-SU-2026:2601-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_40 21-150400.2.1 SUSE-SU-2026:2567-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_44 15-150400.2.1 SUSE-SU-2026:2607-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_45 13-150400.2.1 SUSE-SU-2026:2601-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_46 +1 9-150400.2.1 SUSE-SU-2026:2511-1, SUSE-SU-2026:2496-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_50 5-150400.2.1 SUSE-SU-2026:2571-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_69 +1 17-2.1 SUSE-SU-2026:2518-1, SUSE-SU-2026:2494-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_71 14-2.1 SUSE-SU-2026:2549-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_79 5-2.1 SUSE-SU-2026:2592-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_80 4-2.1 SUSE-SU-2026:2603-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 kernel-livepatch-6.18.20-20.229 +2 1:1.0-0.amzn2023 ALAS2023-2026-1681, ALAS2023-2026-1596, ALAS2023-2026-1594
Amazon Linux 2023 perf +14 1:6.1.168-202.320.amzn2023 ALAS2023-2026-1681
Amazon Linux 2023 perf6.12 +14 1:6.12.79-101.147.amzn2023 ALAS2023-2026-1594
Amazon Linux 2023 perf6.18 +14 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 rv +29 6.12.0-124.55.1.el10_1 ELSA-2026-19569, ELSA-2026-13566
Oracle Linux 9 kernel-uek +34 6.12.0-202.76.4.2.el10uek ELSA-2026-50372, ELSA-2026-50293, ELSA-2026-50270
Oracle Linux 9 rv +28 5.14.0-611.54.1.el9_7 ELSA-2026-19568, ELSA-2026-13565
Oracle Linux 8 kernel-uek +17 5.15.0-320.202.8.3.el9uek ELSA-2026-50294, ELSA-2026-50271
Oracle Linux 8 perf +19 4.18.0-553.123.1.el8_10 ELSA-2026-50294, ELSA-2026-50271, ELSA-2026-13577
Oracle Linux 7 kernel-uek +6 5.4.17-2136.356.4.1.el8uek ELSA-2026-50299
Oracle Linux 7 kernel-uek-tools 5.4.17-2136.356.4.1.el7uek ELSA-2026-50299

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 50

References