Description
In the Linux kernel, the following vulnerability has been resolved:
usbip: validate number_of_packets in usbip_pack_ret_submit()
When a USB/IP client receives a RET_SUBMIT response,
usbip_pack_ret_submit() unconditionally overwrites
urb->number_of_packets from the network PDU. This value is
subsequently used as the loop bound in usbip_recv_iso() and
usbip_pad_iso() to iterate over urb->iso_frame_desc[], a flexible
array whose size was fixed at URB allocation time based on the
*original* number_of_packets from the CMD_SUBMIT.
A malicious USB/IP server can set number_of_packets in the response
to a value larger than what was originally submitted, causing a heap
out-of-bounds write when usbip_recv_iso() writes to
urb->iso_frame_desc[i] beyond the allocated region.
KASAN confirmed this with kernel 7.0.0-rc5:
BUG: KASAN: slab-out-of-bounds in usbip_recv_iso+0x46a/0x640
Write of size 4 at addr ffff888106351d40 by task vhci_rx/69
The buggy address is located 0 bytes to the right of
allocated 320-byte region [ffff888106351c00, ffff888106351d40)
The server side (stub_rx.c) and gadget side (vudc_rx.c) already
validate number_of_packets in the CMD_SUBMIT path since commits
c6688ef9f297 ("usbip: fix stub_rx: harden CMD_SUBMIT path to handle
malicious input") and b78d830f0049 ("usbip: fix vudc_rx: harden
CMD_SUBMIT path to handle malicious input"). The server side validates
against USBIP_MAX_ISO_PACKETS because no URB exists yet at that point.
On the client side we have the original URB, so we can use the tighter
bound: the response must not exceed the original number_of_packets.
This mirrors the existing validation of actual_length against
transfer_buffer_length in usbip_recv_xbuff(), which checks the
response value against the original allocation size.
Kelvin Mbogo's series ("usb: usbip: fix integer overflow in
usbip_recv_iso()", v2) hardens the receive-side functions themselves;
this patch complements that work by catching the bad value at its
source -- in usbip_pack_ret_submit() before the overwrite -- and
using the tighter per-URB allocation bound rather than the global
USBIP_MAX_ISO_PACKETS limit.
Fix this by checking rpdu->number_of_packets against
urb->number_of_packets in usbip_pack_ret_submit() before the
overwrite. On violation, clamp to zero so that usbip_recv_iso() and
usbip_pad_iso() safely return early.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 2.6.32.37 – < 2.6.33, 2.6.33.10 – < 2.6.34, 2.6.34.11 – < 2.6.35, 2.6.35.13 – < 2.6.36, 2.6.38.3 – < 2.6.39, 2.6.39 | 2.6.33 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.19.14-1 | — |
| Debian 13 | linux | 6.12.85-1 | — |
| Debian 12 | linux | 6.1.176-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1026.30 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1095.97 | — |
| Ubuntu 26.04 LTS | linux | 7.0.0-27.27 | USN-8488-1 |
| Ubuntu 26.04 LTS | linux-aws | 7.0.0-1008.8 | USN-8488-1 |
| Ubuntu 26.04 LTS | linux-azure | 7.0.0-1010.10 | USN-8603-1 |
| Ubuntu 26.04 LTS | linux-gcp +1 | 7.0.0-1007.7 | USN-8488-1 |
| Ubuntu 26.04 LTS | linux-ibm +1 | 7.0.0-1009.9 | USN-8603-1, USN-8488-1 |
| Ubuntu 26.04 LTS | linux-nvidia | 7.0.0-1013.13 | USN-8507-1 |
| Ubuntu 26.04 LTS | linux-raspi | 7.0.0-1014.14 | USN-8488-2 |
| Ubuntu 26.04 LTS | linux-riscv +1 | 7.0.0-27.27.1 | USN-8488-1 |
| Ubuntu 25.10 | linux | 6.17.0-40.40 | USN-8490-1 |
| Ubuntu 25.10 | linux-aws | 6.17.0-1019.19 | USN-8490-1 |
| Ubuntu 25.10 | linux-azure +1 | No fix yet | — |
| Ubuntu 25.10 | linux-gcp | 6.17.0-1020.22 | USN-8490-1 |
| Ubuntu 25.10 | linux-oracle | 6.17.0-1018.18 | USN-8490-1 |
| Ubuntu 25.10 | linux-raspi | 6.17.0-1021.21 | USN-8546-1 |
| Ubuntu 25.10 | linux-realtime | 6.17.0-1017.19 | USN-8490-2 |
| Ubuntu 25.10 | linux-riscv | 6.17.0-40.40.1 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-134.134 | USN-8492-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1060.63 | USN-8492-1 |
| Ubuntu 24.04 LTS | linux-aws-6.17 | 6.17.0-1019.19~24.04.1 | USN-8490-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1063.71 | USN-8606-1 |
| Ubuntu 24.04 LTS | linux-azure-6.17 | 6.17.0-1021.21~24.04.1 | USN-8604-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1062.69 | USN-8607-1 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1063.69 | USN-8492-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | 6.17.0-1020.22~24.04.1 | USN-8490-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1058.64 | USN-8492-2 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1045.48 | USN-8492-2 |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | 6.17.0-40.40~24.04.1 | USN-8545-1 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-28.28~24.04.1 | USN-8569-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1060.61 | USN-8492-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-134.134.1 | USN-8497-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1058.61 | USN-8492-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | 6.17.0-1026.26 | USN-8508-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1058.61.1 | USN-8492-2 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1029.30 | USN-8498-1 |
| Ubuntu 24.04 LTS | linux-oem-6.17 | 6.17.0-1028.28 | USN-8491-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1057.58 | USN-8492-1 |
| Ubuntu 24.04 LTS | linux-oracle-6.17 +1 | 6.17.0-1018.18~24.04.1 | USN-8605-1, USN-8490-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1060.64 | USN-8492-4 |
| Ubuntu 24.04 LTS | linux-riscv +20 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-vmware | 6.8.0-1008.8 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1032.33 | USN-8499-1 |
Show 22 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux | 5.15.0-185.195 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1111.118 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1060.63~22.04.1 | USN-8492-2 |
| Ubuntu 22.04 LTS | linux-azure +1 | 5.15.0-1116.125 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1063.71~22.04.1 | USN-8606-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1062.69~22.04.1 | USN-8609-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1111.121 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1063.69~22.04.1 | USN-8492-2 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1107.113 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1094.102 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-136.136~22.04.1 | USN-8619-1 |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1105.109 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1060.61~22.04.1 | USN-8492-2 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1106.112 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1103.108 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-lowlatency | 5.15.0-183.193 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-134.134.1~22.04.1 | USN-8497-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1106.107 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1058.61~22.04.1 | USN-8492-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1063.63 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1052.52 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1108.114 | USN-8493-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1057.58~22.04.1 | USN-8492-2 |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1105.108 | USN-8527-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-134.134~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1074.78 | USN-8528-1 |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2049.50 | USN-8492-3 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1055.56 | USN-8492-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | 6.17.0-1017.19~24.04.1 | USN-8490-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1103.105 | USN-8493-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1110.119 | USN-8493-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1055.56~22.04.1 | USN-8492-1 |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1060.63+fips1 | USN-8492-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1062.69+fips1 | USN-8492-5 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-134.134+fips1 | USN-8492-5 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1063.69+fips1 | USN-8492-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1111.118+fips1 | USN-8493-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1116.125+fips1 | USN-8547-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-185.195+fips1 | USN-8493-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1111.121+fips1 | USN-8493-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1161.172+fips1 | USN-8615-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1166.172+fips1 | USN-8615-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1135.145 | USN-8615-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1164.173+fips1 | USN-8615-1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2132.138 | USN-8530-1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2112.118 | USN-8529-1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1149.161 | USN-8529-1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2095.101 | USN-8529-1 |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1126.133 | USN-8548-1 |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 26.04 LTS | linux | 7.0.0-28.28 | LSN-0121-1 |
| Ubuntu Pro 26.04 LTS | linux-aws | 7.0.0-1009.9 | LSN-0121-1 |
| Ubuntu Pro 26.04 LTS | linux-azure | 7.0.0-1010.10 | LSN-0121-1 |
| Ubuntu Pro 26.04 LTS | linux-gcp | 7.0.0-1008.8 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux | 6.8.0-136.136 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-aws | 6.8.0-1061.64 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-azure | 6.8.0-1063.71 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-gcp | 6.8.0-1064.72 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-gke | 6.8.0-1059.67 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-ibm | 6.8.0-1061.62 | LSN-0121-1 |
| Ubuntu Pro 24.04 LTS | linux-oracle | 6.8.0-1058.61 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux | 5.15.0-187.197 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-aws | 5.15.0-1113.120 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-aws-6.8 | 6.8.0-1061.64~22.04.1 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-azure | 5.15.0-1118.127 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp | 5.15.0-1114.124 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp-6.8 | 6.8.0-1064.72~22.04.1 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-gke | 5.15.0-1110.116 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-hwe-6.8 | 6.8.0-136.136~22.04.1 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm | 5.15.0-1107.111 | LSN-0121-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm-6.8 | 6.8.0-1061.62~22.04.1 | LSN-0121-1 |
| Ubuntu Pro 20.04 LTS | linux | 5.4.0-233.253 | USN-8615-1, LSN-0121-1 |
| Ubuntu Pro 20.04 LTS | linux-aws | 5.4.0-1161.172 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1111.118~20.04.1 | USN-8493-1 |
| Ubuntu Pro 20.04 LTS | linux-azure | 5.4.0-1166.172 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 +1 | 5.15.0-1116.125~20.04.1 | USN-8493-1 |
| Ubuntu Pro 20.04 LTS | linux-bluefield | 5.4.0-1120.127 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp | 5.4.0-1164.173 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1111.121~20.04.1 | USN-8547-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 | 5.15.0-185.195~20.04.1 | USN-8493-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm | 5.4.0-1107.112 | USN-8616-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 +1 | 5.15.0-1105.109~20.04.1 | USN-8493-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1106.112~20.04.1 | USN-8547-1 |
| Ubuntu Pro 20.04 LTS | linux-iot | 5.4.0-1065.68 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-kvm | 5.4.0-1148.157 | USN-8617-1 |
| Ubuntu Pro 20.04 LTS | linux-lowlatency-hwe-5.15 | 5.15.0-183.193~20.04.1 | USN-8493-1 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1063.63~20.04.1 | USN-8493-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle | 5.4.0-1159.169 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1108.114~20.04.1 | USN-8493-2 |
| Ubuntu Pro 20.04 LTS | linux-raspi | 5.4.0-1144.157 | USN-8615-2 |
| Ubuntu Pro 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1079.83 | USN-8615-1 |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-253.265 | USN-8529-1, LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1194.207 | USN-8530-1, LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1161.172~18.04.1 | USN-8615-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | 4.15.0-1204.219 | USN-8529-1, LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1166.172~18.04.1 | USN-8615-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | 4.15.0-1187.204 | USN-8529-1, LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1164.173~18.04.1 | USN-8615-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-233.253~18.04.1 | USN-8615-1, LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1107.112~18.04.1 | USN-8616-1 |
| Ubuntu Pro 18.04 LTS | linux-kvm | 4.15.0-1176.181 | USN-8529-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle | 4.15.0-1156.167 | USN-8529-1, LSN-0121-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1159.169~18.04.1 | USN-8615-1 |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1144.157~18.04.1 | USN-8615-2 |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-283.317 | USN-8548-2, LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1194.209 | USN-8548-2, LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1194.207~16.04.1 | USN-8530-2, LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1204.219~16.04.1 | USN-8529-2, LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1187.204~16.04.1 | USN-8529-2, LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-253.265~16.04.1 | USN-8529-2, LSN-0121-1 |
| Ubuntu Pro 16.04 LTS | linux-kvm | 4.4.0-1157.168 | USN-8548-2 |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1156.167~16.04.1 | USN-8529-2 |
| Ubuntu Pro 14.04 LTS | linux | 3.13.0-214.265 | USN-8501-1 |
| Ubuntu Pro 14.04 LTS | linux-aws | 4.4.0-1156.162 | USN-8548-1 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1205.220~14.04.1 | USN-8635-1 |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-283.317~14.04.1 | USN-8548-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +76 | 6.12.0-211.16.1.el10_2 | RHSA-2026:19569 |
| RHEL 9 | rv +75 | 5.14.0-687.10.1.el9_8 | RHSA-2026:19568 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Rt Els 7 | kernel-rt +7 | 3.10.0-1160.155.1.rt56.1307.el7 | RHSA-2026:41236 |
| RHEL 10.0 EUS | rv +77 | 6.12.0-55.77.1.el10_0 | RHSA-2026:24343 |
| RHEL 9.6 EUS | rv +77 | 5.14.0-570.119.1.el9_6 | RHSA-2026:23224 |
| RHEL 7 ELS | perf +18 | 3.10.0-1160.151.1.el7 | RHSA-2026:25095 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | rv +74 | 6.12.0-211.16.1.el10_2 | ALSA-2026:19569 |
| AlmaLinux 9 | rv +73 | 5.14.0-687.10.1.el9_8 | ALSA-2026:19568 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | kernel | 6.12.0-211.16.1.el10_2.0.1 | RLSA-2026:19569 |
| Rocky Linux 9 | kernel | 5.14.0-687.10.1.el9_8.0.1 | RLSA-2026:19568 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.55.1.150700.17.33.1 | SUSE-SU-2026:2238-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.112.1 | SUSE-SU-2026:2195-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.112.1.150600.12.52.1 | SUSE-SU-2026:2195-1 |
| SLES 11 SP4 | kernel-ec2 +6 | 3.0.101-108.210.1 | SUSE-SU-2026:2317-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +8 | 6.12.0-160000.37.1 | SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLES for SAP 15 SP6 | kernel-default-base | 6.4.0-150600.23.112.1.150600.12.52.1 | SUSE-SU-2026:2195-1 |
| SLES for SAP 15 SP6 | kernel-docs +4 | 6.4.0-150600.23.112.1 | SUSE-SU-2026:2195-1 |
| SLES 16.0 | kernel-64kb +8 | 6.12.0-160000.37.1 | SUSE-SU-2026:23237-1, SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | SUSE-SU-2026:23068-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.37.1 | SUSE-SU-2026:23068-1, SUSE-SU-2026:23066-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_15 | 1-150700.15.3.1 | SUSE-SU-2026:2238-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.112.1 | SUSE-SU-2026:2195-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_26 | 1-150600.13.3.1 | SUSE-SU-2026:2195-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 7.0.3-1.1 | openSUSE-SU-2026:10703-1 |
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.37.1.160000.2.19 | openSUSE-SU-2026:21555-1 |
| openSUSE Leap 16.0 | kernel-rt +11 | 6.12.0-160000.37.1 | openSUSE-SU-2026:21555-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.18.25-55.108 +2 | 1:1.0-0.amzn2023 | ALAS2023-2026-1882, ALAS2023-2026-1695, ALAS2023-2026-1693 |
| Amazon Linux 2023 | perf +11 | 1:6.1.175-219.357.amzn2023 | ALAS2023-2026-1882 |
| Amazon Linux 2023 | perf6.12 +11 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 |
| Amazon Linux 2023 | perf6.18 +11 | 1:6.18.25-55.108.amzn2023 | ALAS2023-2026-1693 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.137.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +29 | 6.12.0-211.34.1.el10_2 | ELSA-2026-19569 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-204.92.4.2.el10uek | ELSA-2026-50372 |
| Oracle Linux 9 | rv +28 | 5.14.0-687.17.1.el9_8 | ELSA-2026-19568 |
Advisories 50
- USN-8607-1 linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8603-1 linux-azure, linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8609-1 linux-azure-fde-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8619-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8606-1 linux-azure, linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- RHSA-2026:41236 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:24343 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:19568 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:19569 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- WID-SEC-2026-1279 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-8569-1 linux-hwe-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8488-1 linux, linux-aws, linux-gcp, linux-ibm, linux-oracle, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8604-1 linux-azure-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8488-2 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8507-1 linux-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8490-2 linux-realtime, linux-realtime-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8546-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8508-1 linux-nvidia-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8491-1 linux-oem-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8545-1 linux-hwe-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8490-1 linux, linux-aws, linux-aws-6.17, linux-gcp, linux-gcp-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8497-1 linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8499-1 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8492-1 linux, linux-aws, linux-aws-fips, linux-gcp, linux-gcp-fips, linux-ibm, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8492-2 linux-aws-6.8, linux-gcp-6.8, linux-gke, linux-gkeop, linux-ibm-6.8, linux-nvidia-lowlatency, linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8498-1 linux-nvidia-tegra vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8492-3 linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8492-5 linux-azure-fips, linux-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8492-4 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8528-1 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8493-1 linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8615-1 linux, linux-aws, linux-aws-5.4, linux-aws-fips, linux-azure, linux-azure-5.4, linux-azure-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8635-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8616-1 linux-ibm, linux-ibm-5.4 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8615-2 linux-raspi, linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8547-2 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8529-2 linux-azure, linux-gcp, linux-hwe, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8529-1 linux, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp-4.15, linux-gcp-fips, linux-kvm, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8530-1 linux-aws, linux-aws-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8617-1 linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8547-1 linux-gcp-5.15, linux-intel-iotg-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8527-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8530-2 linux-aws-hwe vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8493-2 linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8548-2 linux, linux-aws, linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-8548-1 linux-aws, linux-fips, linux-lts-xenial vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- ALSA-2026:19569 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19568 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- USN-8501-1 linux vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- WID-SEC-2026-3623 IBM DataPower Gateway: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
References
- https://git.kernel.org/stable/c/324262c38438255bf6bdbf6342ca47c0badaab76
- https://git.kernel.org/stable/c/973f2c250289f5bf6cc146b98aa6fdde11fe50d6
- https://git.kernel.org/stable/c/ce744264b06b97069b3722511ab355738311fee0
- https://git.kernel.org/stable/c/885c8591784da6314f9aa82fa460ac69f9f79e5f
- https://git.kernel.org/stable/c/8d155e2d1c4102f74f82a2bf9c016164bb0f7384
- https://git.kernel.org/stable/c/906f16a836de13fe61f49cdce2f66f2dbd14caf4
- https://git.kernel.org/stable/c/ef8ebb1c637b4cfb61a9dd2e013376774ee2033b
- https://git.kernel.org/stable/c/5e1c4ece08ccdc197177631f111845a2c68eede3
- https://git.kernel.org/stable/c/2ab833a16a825373aad2ba7d54b572b277e95b71