Description
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: propagate shared-frag marker through frag-transfer helpers
Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail
to propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()->flags when
moving frags from source to destination. __pskb_copy_fclone() defers
the rest of the shinfo metadata to skb_copy_header() after copying
frag descriptors, but that helper only carries over gso_{size,segs,
type} and never touches skb_shinfo()->flags; skb_shift() moves frag
descriptors directly and leaves flags untouched. As a result, the
destination skb keeps a reference to the same externally-owned or
page-cache-backed pages while reporting skb_has_shared_frag() as
false.
The mismatch is harmful in any in-place writer that uses
skb_has_shared_frag() to decide whether shared pages must be detoured
through skb_cow_data(). ESP input is one such writer (esp4.c,
esp6.c), and a single nft 'dup to <local>' rule -- or any other
nf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()'d
skb in esp_input() with the marker stripped, letting an unprivileged
user write into the page cache of a root-owned read-only file via
authencesn-ESN stray writes.
Set SKBFL_SHARED_FRAG on the destination whenever frag descriptors
were actually moved from the source. skb_copy() and skb_copy_expand()
share skb_copy_header() too but linearize all paged data into freshly
allocated head storage and emerge with nr_frags == 0, so
skb_has_shared_frag() returns false on its own; they need no change.
The same omission exists in skb_gro_receive() and skb_gro_receive_list().
The former moves the incoming skb's frag descriptors into the
accumulator's last sub-skb via two paths (a direct frag-move loop and
the head_frag + memcpy path); the latter chains the incoming skb whole
onto p's frag_list. Downstream skb_segment() reads only
skb_shinfo(p)->flags, and skb_segment_list() reuses each sub-skb's
shinfo as the nskb -- both p and lp must carry the marker.
The same omission also exists in tcp_clone_payload(), which builds an
MTU probe skb by moving frag descriptors from skbs on sk_write_queue
into a freshly allocated nskb. The helper falls into the same family
and warrants the same fix for consistency; no TCP TX-side in-place
writer is currently known to reach a user page through this gap, but
a future consumer depending on the marker would regress silently.
The same omission exists in skb_segment(): the per-iteration flag
merge takes only head_skb's flag, and the inner switch that rebinds
frag_skb to list_skb on head_skb-frags exhaustion does not fold the
new frag_skb's flag into nskb. Fold frag_skb's flag at both sites
so segments drawing frags from frag_list members carry the marker.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 3.9 | 5.10.257 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 7.0.9-1 | — |
| Debian 13 | linux | 6.12.90-1 | — |
| Debian 12 | linux | 6.1.174-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1023.27 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1093.95 | — |
| Ubuntu 26.04 LTS | linux | 7.0.0-22.22 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-aws +1 | 7.0.0-1006.6 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-gcp +1 | 7.0.0-1005.5 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-ibm +1 | 7.0.0-1007.7 | USN-8461-1, USN-8370-1 |
| Ubuntu 26.04 LTS | linux-nvidia | 7.0.0-1009.9 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-oem-7.0 | 7.0.0-1008.8 | USN-8489-1 |
| Ubuntu 26.04 LTS | linux-raspi | 7.0.0-1011.11 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-riscv +1 | 7.0.0-22.22.1 | USN-8370-1 |
| Ubuntu 25.10 | linux | 6.17.0-35.35 | USN-8371-1 |
| Ubuntu 25.10 | linux-aws +1 | 6.17.0-1017.17 | USN-8371-1 |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 25.10 | linux-gcp | 6.17.0-1018.19 | USN-8374-1 |
| Ubuntu 25.10 | linux-oracle | 6.17.0-1016.16 | USN-8371-1 |
| Ubuntu 25.10 | linux-raspi | 6.17.0-1018.18 | USN-8371-1 |
| Ubuntu 25.10 | linux-realtime | 6.17.0-1014.16 | USN-8371-1 |
| Ubuntu 25.10 | linux-riscv | 6.17.0-35.35.1 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-124.124 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1057.60 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-aws-6.17 +1 | 6.17.0-1017.17~24.04.1 | USN-8374-1, USN-8371-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1058.64 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1058.65 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1039.42 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1060.63 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | 6.17.0-1018.19~24.04.1 | USN-8374-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1055.61 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1042.45 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | 6.17.0-35.35~24.04.1 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-28.28~24.04.1 | USN-8569-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1057.58 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-134.134.1 | USN-8497-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1055.58 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | 6.17.0-1021.21 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1055.58.1 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1026.26 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-oem-6.17 | 6.17.0-1024.24 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1054.55 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-oracle-6.17 | 6.17.0-1016.16~24.04.1 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1057.61 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-riscv +18 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-6.17 | 6.17.0-35.35.1~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1032.33 | USN-8499-1 |
Show 22 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-181.191 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1109.116 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1057.60~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-azure +1 | 5.15.0-1114.123 | USN-8426-2 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1059.65~22.04.1 | USN-8440-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1058.65~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1109.118 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1060.63~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1105.111 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1092.100 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 +1 | 6.8.0-124.124~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1103.106 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1057.58~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1104.110 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1101.106 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-134.134.1~22.04.1 | USN-8497-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1104.105 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1055.58~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1061.61 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1050.50 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1106.112 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1054.55~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1074.78 | USN-8528-1 |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2046.47 | USN-8373-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1052.53 | USN-8373-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | 6.17.0-1014.16~24.04.1 | USN-8371-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1101.103 | USN-8388-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1108.117 | USN-8388-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1052.53~22.04.1 | USN-8373-1 |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1057.60+fips1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1059.65+fips1 | USN-8393-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-124.124+fips1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1060.63+fips1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1109.116+fips1 | USN-8388-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1114.123+fips1 | USN-8426-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-181.191+fips1 | USN-8388-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1109.118+fips1 | USN-8388-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1161.172+fips1 | USN-8615-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1166.172+fips1 | USN-8615-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1135.145 | USN-8615-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1164.173+fips1 | USN-8615-1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2132.138 | USN-8530-1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2112.118 | USN-8529-1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1149.161 | USN-8529-1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2095.101 | USN-8529-1 |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1126.133 | USN-8548-1 |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 26.04 LTS | linux | 7.0.0-30.30 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-aws | 7.0.0-1011.11 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-azure | 7.0.0-1012.12 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-gcp | 7.0.0-1010.10 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux | 6.8.0-142.142 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-aws | 6.8.0-1065.68 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-azure | 6.8.0-1068.76 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-gcp | 6.8.0-1069.77 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-gke | 6.8.0-1064.72 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-ibm | 6.8.0-1065.66 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-oracle | 6.8.0-1062.65 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux | 5.15.0-202.212 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-aws | 5.15.0-1119.126 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-aws-6.8 | 6.8.0-1065.68~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-azure | 5.15.0-1125.134 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp | 5.15.0-1120.130 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp-6.8 | 6.8.0-1069.77~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gke | 5.15.0-1115.121 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-hwe-6.8 | 6.8.0-149.149~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm | 5.15.0-1113.117 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm-6.8 | 6.8.0-1066.67~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-lowlatency | 5.15.0-197.207 | LSN-0122-1 |
| Ubuntu Pro 20.04 LTS | linux | 5.4.0-233.253 | USN-8615-1, LSN-0122-1 |
| Ubuntu Pro 20.04 LTS | linux-aws | 5.4.0-1161.172 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1109.116~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-azure | 5.4.0-1166.172 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1114.123~20.04.1 | USN-8426-1 |
| Ubuntu Pro 20.04 LTS | linux-bluefield | 5.4.0-1120.127 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp | 5.4.0-1164.173 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1109.118~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-181.191~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm | 5.4.0-1107.112 | USN-8616-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1103.106~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1104.110~20.04.1 | — |
| Ubuntu Pro 20.04 LTS | linux-iot | 5.4.0-1065.68 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-kvm | 5.4.0-1148.157 | USN-8617-1 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1061.61~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle | 5.4.0-1159.169 | USN-8615-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1106.112~20.04.1 | USN-8462-1 |
| Ubuntu Pro 20.04 LTS | linux-raspi | 5.4.0-1144.157 | USN-8615-2 |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | 5.15.0-1103.107~20.04.1 | — |
| Ubuntu Pro 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1079.83 | USN-8615-1 |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-253.265 | USN-8529-1, LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1194.207 | USN-8530-1, LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1161.172~18.04.1 | USN-8615-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | 4.15.0-1204.219 | USN-8529-1, LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1166.172~18.04.1 | USN-8615-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | 4.15.0-1187.204 | USN-8529-1, LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1164.173~18.04.1 | USN-8615-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-233.253~18.04.1 | USN-8615-1, LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1107.112~18.04.1 | USN-8616-1 |
| Ubuntu Pro 18.04 LTS | linux-kvm | 4.15.0-1176.181 | USN-8529-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle | 4.15.0-1156.167 | USN-8529-1, LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1159.169~18.04.1 | USN-8615-1 |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1144.157~18.04.1 | USN-8615-2 |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-283.317 | USN-8548-2, LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1194.209 | USN-8548-2, LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1194.207~16.04.1 | USN-8530-2, LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1204.219~16.04.1 | USN-8529-2, LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1187.204~16.04.1 | USN-8529-2, LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-253.265~16.04.1 | USN-8529-2, LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-kvm | 4.4.0-1157.168 | USN-8548-2 |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1156.167~16.04.1 | USN-8529-2 |
| Ubuntu Pro 14.04 LTS | linux | 3.13.0-214.265 | USN-8501-1 |
| Ubuntu Pro 14.04 LTS | linux-aws | 4.4.0-1156.162 | USN-8548-1 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1205.220~14.04.1 | USN-8635-1 |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-283.317~14.04.1 | USN-8548-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +76 | 6.12.0-211.16.1.el10_2 | RHSA-2026:19569 |
| RHEL 9 | rv +75 | 5.14.0-687.10.1.el9_8 | RHSA-2026:19568 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.125.1.rt7.466.el8_10 | RHSA-2026:19664 |
| RHEL 8 | kpatch-patch-4_18_0-553_109_1 | 1-3.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_40_1 | 1-12.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_53_1 | 1-10.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_72_1 | 1-7.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_85_1 | 1-5.el8_10 | RHSA-2026:23470 |
| RHEL 8 | perf +26 | 4.18.0-553.125.1.el8_10 | RHSA-2026:19666 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | rv +77 | 6.12.0-55.75.1.el10_0 | RHSA-2026:20299 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_17_1 | 1-15.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_39_1 | 1-6.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_66_1 | 1-5.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_94_1 | 1-3.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | rv +77 | 5.14.0-570.116.1.el9_6 | RHSA-2026:20129 |
| RHEL 9.4 EUS | bpftool | 7.3.0-427.126.1.el9_4 | RHSA-2026:20054 |
| RHEL 9.4 EUS | rv +64 | 5.14.0-427.126.1.el9_4 | RHSA-2026:20054 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_100_1 | 1-5.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_113_1 | 1-3.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_55_1 | 1-15.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_68_2 | 1-12.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_84_1 | 1-7.el9_4 | RHSA-2026:24814 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.172.1.el9_2 | RHSA-2026:20593 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.172.1.rt14.457.el9_2 | RHSA-2026:19875 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_104_1 | 1-16.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_117_1 | 1-13.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_134_1 | 1-7.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_148_1 | 1-5.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_158_1 | 1-3.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.172.1.el9_2 | RHSA-2026:20593 |
| RHEL 9.0 E4S | kernel-rt +12 | 5.14.0-70.180.1.rt21.252.el9_0 | RHSA-2026:19711 |
| RHEL 9.0 E4S | perf +28 | 5.14.0-70.180.1.el9_0 | RHSA-2026:19705 |
| RHEL 8.8 TUS | perf +17 | 4.18.0-477.143.1.el8_8 | RHSA-2026:19521 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_107_1 | 1-6.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_120_1 | 1-5.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_130_1 | 1-3.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_89_1 | 1-12.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_97_1 | 1-10.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | perf +18 | 4.18.0-477.143.1.el8_8 | RHSA-2026:19521 |
| RHEL 8.6 TUS | perf +17 | 4.18.0-372.193.1.el8_6 | RHSA-2026:20051 |
| RHEL 8.6 E4S | perf +25 | 4.18.0-372.193.1.el8_6 | RHSA-2026:20051 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.193.1.el8_6 | RHSA-2026:20051 |
| RHEL 8.4 EUS Long Life | perf +17 | 4.18.0-305.192.1.el8_4 | RHSA-2026:20130 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.192.1.el8_4 | RHSA-2026:20130 |
| Red Hat Enterprise Linux Nvidia 10 | rv +35 | 6.12.0-211.8.el10nv | RHSA-2026:33486, RHSA-2026:19540 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | rv +74 | 6.12.0-211.16.1.el10_2 | ALSA-2026:19569 |
| AlmaLinux 9 | rv +73 | 5.14.0-687.10.1.el9_8 | ALSA-2026:19568 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.125.1.rt7.466.el8_10 | ALSA-2026:19664 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.125.1.el8_10 | ALSA-2026:19666 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.55.1.150700.17.33.1 | SUSE-SU-2026:2238-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.115.1 | SUSE-SU-2026:2310-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.115.1.150600.12.54.1 | SUSE-SU-2026:2310-1 |
| SLES 15 SP5 | kernel-64kb +4 | 5.14.21-150500.55.172.2 | SUSE-SU-2026:2658-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.172.2.150500.6.81.2 | SUSE-SU-2026:2658-1 |
| SLES 15 SP5 | kernel-docs +1 | 5.14.21-150500.55.172.1 | SUSE-SU-2026:2658-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.317.1 | SUSE-SU-2026:2450-1 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_0 | 14-160000.4.3 | SUSE-SU-2026:22383-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_1 | 12-160000.1.1 | SUSE-SU-2026:22384-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_2 | 10-160000.1.1 | SUSE-SU-2026:22385-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_3 | 9-160000.1.1 | SUSE-SU-2026:22390-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_4 | 8-160000.1.1 | SUSE-SU-2026:22386-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_5 | 7-160000.1.1 | SUSE-SU-2026:22507-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_6 | 6-160000.1.1 | SUSE-SU-2026:22387-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_7 | 5-160000.1.1 | SUSE-SU-2026:22388-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_8 | 4-160000.1.1 | SUSE-SU-2026:22389-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_9 +2 | 3-160000.1.1 | SUSE-SU-2026:22509-1, SUSE-SU-2026:22508-1, SUSE-SU-2026:22391-1 |
| SLES for SAP 15 SP6 | kernel-default-base | 6.4.0-150600.23.115.1.150600.12.54.1 | SUSE-SU-2026:2310-1 |
| SLES for SAP 15 SP6 | kernel-docs +4 | 6.4.0-150600.23.115.1 | SUSE-SU-2026:2310-1 |
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.172.2.150500.6.81.2 | SUSE-SU-2026:2658-1 |
| SLES for SAP 15 SP5 | kernel-docs +1 | 5.14.21-150500.55.172.1 | SUSE-SU-2026:2658-1 |
| SLES for SAP 15 SP5 | kernel-source +2 | 5.14.21-150500.55.172.2 | SUSE-SU-2026:2658-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_0 | 14-160000.4.3 | SUSE-SU-2026:22383-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_1 | 12-160000.1.1 | SUSE-SU-2026:22384-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_2 | 10-160000.1.1 | SUSE-SU-2026:22385-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_3 | 9-160000.1.1 | SUSE-SU-2026:22390-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_4 | 8-160000.1.1 | SUSE-SU-2026:22386-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_5 | 7-160000.1.1 | SUSE-SU-2026:22507-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_6 | 6-160000.1.1 | SUSE-SU-2026:22387-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_7 | 5-160000.1.1 | SUSE-SU-2026:22388-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_8 | 4-160000.1.1 | SUSE-SU-2026:22389-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_9 +2 | 3-160000.1.1 | SUSE-SU-2026:22509-1, SUSE-SU-2026:22508-1, SUSE-SU-2026:22391-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_0 | 14-160000.4.3 | SUSE-SU-2026:22276-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_1 | 12-160000.1.1 | SUSE-SU-2026:22277-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_10 | 3-160000.1.1 | SUSE-SU-2026:22288-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_2 | 10-160000.1.1 | SUSE-SU-2026:22278-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_3 | 9-160000.1.1 | SUSE-SU-2026:22283-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_4 | 8-160000.1.1 | SUSE-SU-2026:22279-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_6 | 6-160000.1.1 | SUSE-SU-2026:22280-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_7 | 5-160000.1.1 | SUSE-SU-2026:22281-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_8 | 4-160000.1.1 | SUSE-SU-2026:22282-1 |
| SLE Micro 6.2 | kernel-syms +1 | 6.12.0-160000.33.1 | SUSE-SU-2026:21834-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-47.1.21.24 | SUSE-SU-2026:22137-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_10 | 17-1.1 | SUSE-SU-2026:22480-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_13 +1 | 8-1.1 | SUSE-SU-2026:22484-1, SUSE-SU-2026:22483-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_22 | 2-1.2 | SUSE-SU-2026:22490-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_9 | 17-1.2 | SUSE-SU-2026:22479-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_10 +1 | 13-1.1 | SUSE-SU-2026:22481-1, SUSE-SU-2026:22468-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_11 +2 | 12-1.1 | SUSE-SU-2026:22482-1, SUSE-SU-2026:22472-1, SUSE-SU-2026:22469-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_13 | 10-1.1 | SUSE-SU-2026:22470-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_14 | 8-1.2 | SUSE-SU-2026:22467-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_16 +1 | 7-1.1 | SUSE-SU-2026:22485-1, SUSE-SU-2026:22471-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_17 +1 | 6-1.1 | SUSE-SU-2026:22486-1, SUSE-SU-2026:22466-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_18 +1 | 5-1.1 | SUSE-SU-2026:22487-1, SUSE-SU-2026:22461-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_19 +1 | 3-1.1 | SUSE-SU-2026:22488-1, SUSE-SU-2026:22462-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_20 +5 | 2-1.1 | SUSE-SU-2026:22491-1, SUSE-SU-2026:22489-1, SUSE-SU-2026:22476-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_7 | 20-1.2 | SUSE-SU-2026:22463-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_8 +2 | 19-1.2 | SUSE-SU-2026:22478-1, SUSE-SU-2026:22465-1, SUSE-SU-2026:22464-1 |
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-48.1 | SUSE-SU-2026:22458-1 |
| SLE Micro 6.1 | kernel-source +2 | 6.4.0-47.1 | SUSE-SU-2026:22137-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-47.1.21.24 | SUSE-SU-2026:22108-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_10 | 17-1.1 | SUSE-SU-2026:22403-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_13 +1 | 8-1.1 | SUSE-SU-2026:22407-1, SUSE-SU-2026:22406-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_22 | 2-1.2 | SUSE-SU-2026:22413-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_9 | 17-1.2 | SUSE-SU-2026:22397-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_10 +1 | 13-1.1 | SUSE-SU-2026:22415-1, SUSE-SU-2026:22404-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_11 +2 | 12-1.1 | SUSE-SU-2026:22417-1, SUSE-SU-2026:22416-1, SUSE-SU-2026:22405-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_13 | 10-1.1 | SUSE-SU-2026:22418-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_14 | 8-1.2 | SUSE-SU-2026:22419-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_16 +1 | 7-1.1 | SUSE-SU-2026:22420-1, SUSE-SU-2026:22408-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_17 +1 | 6-1.1 | SUSE-SU-2026:22421-1, SUSE-SU-2026:22409-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_18 +1 | 5-1.1 | SUSE-SU-2026:22410-1, SUSE-SU-2026:22401-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_19 +1 | 3-1.1 | SUSE-SU-2026:22411-1, SUSE-SU-2026:22402-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_20 +5 | 2-1.1 | SUSE-SU-2026:22428-1, SUSE-SU-2026:22427-1, SUSE-SU-2026:22426-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_7 | 20-1.2 | SUSE-SU-2026:22398-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_8 +2 | 19-1.2 | SUSE-SU-2026:22400-1, SUSE-SU-2026:22399-1, SUSE-SU-2026:22396-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-48.1 | SUSE-SU-2026:22433-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-47.1 | SUSE-SU-2026:22108-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.172.2.150500.6.81.2 | SUSE-SU-2026:2658-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.146.1 | SUSE-SU-2026:2630-1 |
| SLE Micro 5.5 | kernel-source +1 | 5.14.21-150500.55.172.2 | SUSE-SU-2026:2658-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_1 | 18-150700.2.1 | SUSE-SU-2026:2532-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_8 | 8-150700.2.1 | SUSE-SU-2026:2500-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_11 +1 | 5-150700.2.1 | SUSE-SU-2026:2520-1, SUSE-SU-2026:2503-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_14 | 2-150700.2.1 | SUSE-SU-2026:2594-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_15 | 1-150700.15.3.1 | SUSE-SU-2026:2238-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.115.1 | SUSE-SU-2026:2310-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_11 +1 | 19-150600.2.1 | SUSE-SU-2026:2610-1, SUSE-SU-2026:2532-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_18 | 8-150600.2.1 | SUSE-SU-2026:2588-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_22 | 5-150600.2.1 | SUSE-SU-2026:2520-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_23 | 4-150600.2.1 | SUSE-SU-2026:2559-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_24 | 3-150600.2.1 | SUSE-SU-2026:2608-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_26 | 2-150600.2.1 | SUSE-SU-2026:2553-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_27 | 1-150600.13.3.1 | SUSE-SU-2026:2310-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.172.2 | SUSE-SU-2026:2658-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_26 | 21-150500.2.1 | SUSE-SU-2026:2567-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_30 | 14-150500.2.1 | SUSE-SU-2026:2571-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_38 | 4-150500.2.1 | SUSE-SU-2026:2601-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_42 | 1-150500.11.3.2 | SUSE-SU-2026:2658-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_40 | 21-150400.2.1 | SUSE-SU-2026:2567-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_44 | 15-150400.2.1 | SUSE-SU-2026:2607-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_45 | 13-150400.2.1 | SUSE-SU-2026:2601-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_46 +1 | 9-150400.2.1 | SUSE-SU-2026:2511-1, SUSE-SU-2026:2496-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_50 | 5-150400.2.1 | SUSE-SU-2026:2571-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.317.1 | SUSE-SU-2026:2450-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_69 +1 | 17-2.1 | SUSE-SU-2026:2518-1, SUSE-SU-2026:2494-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_71 | 14-2.1 | SUSE-SU-2026:2549-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_79 | 5-2.1 | SUSE-SU-2026:2592-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_80 | 4-2.1 | SUSE-SU-2026:2603-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_83 | 2-2.1 | SUSE-SU-2026:2553-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_84 | 1-8.7.1 | SUSE-SU-2026:2450-1 |
| SLE HPC 15 SP5 | kernel-64kb +3 | 5.14.21-150500.55.172.2 | SUSE-SU-2026:2658-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.172.2.150500.6.81.2 | SUSE-SU-2026:2658-1 |
| SLE HPC 15 SP5 | kernel-docs +1 | 5.14.21-150500.55.172.1 | SUSE-SU-2026:2658-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 7.0.11-1.1 | openSUSE-SU-2026:10954-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.18.25-57.109 +2 | 1:1.0-0.amzn2023 | ALAS2023-2026-1710, ALAS2023-2026-1709, ALAS2023-2026-1708 |
| Amazon Linux 2023 | perf +11 | 1:6.1.170-213.321.amzn2023 | ALAS2023-2026-1710 |
| Amazon Linux 2023 | perf6.12 +11 | 1:6.12.83-115.161.amzn2023 | ALAS2023-2026-1708 |
| Amazon Linux 2023 | perf6.18 +11 | 1:6.18.25-57.109.amzn2023 | ALAS2023-2026-1709 |
| Amazon Linux 2 | kernel-livepatch-4.14.355-282.729 | 1.0-0.amzn2 | ALAS2-2026-3307 |
| Amazon Linux 2 | perf +8 | 4.14.355-282.729.amzn2 | ALAS2-2026-3307 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.141.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +29 | 6.12.0-211.34.1.el10_2 | ELSA-2026-19569 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-204.92.4.2.el10uek | ELSA-2026-50372 |
| Oracle Linux 7 | kernel-uek +6 | 5.4.17-2136.356.4.1.el8uek | ELSA-2026-50299 |
| Oracle Linux 7 | kernel-uek-tools | 5.4.17-2136.356.4.1.el7uek | ELSA-2026-50299 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Linux Kernel DirtyClone Local Privilege Escalation
exploit/linux/local/dirtyclone_cve_2026_43503
GitHub 8 repositories
-
ashrafzaryouh/CVE-2026-43503 ★ 40 · Jun 25, 2026
CVE-2026-43503
-
entra1337/DirtyClone ★ 27 · Jun 29, 2026
Python Proof of Concept for DirtyClone (CVE-2026-43503) - Linux kernel LPE via page-cache corruption
-
mooder1/dirtyclone-CVE-2026-43503 ★ 17 · Jun 26, 2026
-
gl1tch0x1/DirtyClone ★ 3 · Jun 28, 2026
DirtyClone - local privilege escalation (LPE) proof-of-concept targeting a kernel/XFRM-related vulnerability described in the source as CVE-2026-43503
-
douglasmun/pagecache-lpe-containment-kit ★ 3 · Jun 27, 2026
Educational, defensive kit for two Linux page-cache-corruption LPEs (DirtyClone CVE-2026-43503, pedit COW CVE-2026-46331): hardening, detection, verification, seccomp + validation harness. Detection …
-
lieehrdiansyah12/CVE-2026-43503 ★ 1 · Jul 9, 2026
-
SecureWithUmer/CVE-2026-43503 ★ 0 · Jun 29, 2026
DirtyClone - local privilege escalation (LPE) proof-of-concept targeting a kernel/XFRM-related vulnerability described in the source as CVE-2026-43503
-
sec0x/CVE-2026-43503 ★ 0 · Jun 26, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 50
- LSN-0122-1 Kernel Live Patch Security Notice Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8569-1 linux-hwe-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8373-1 linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-azure, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-nvidia-tegra, linux-oracle, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8440-1 linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8461-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8489-1 linux-oem-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8371-1 linux, linux-aws, linux-azure, linux-azure-6.17, linux-hwe-6.17, linux-nvidia-6.17, linux-oem-6.17, linux-oracle, linux-oracle-6.17, linux-raspi, linux-realtime, linux-realtime-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8370-1 linux, linux-aws, linux-gcp, linux-ibm, linux-nvidia, linux-oracle, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8374-1 linux-aws-6.17, linux-gcp, linux-gcp-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8497-1 linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8499-1 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8393-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8528-1 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8462-1 linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8426-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8426-1 linux-azure-5.15, linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8615-1 linux, linux-aws, linux-aws-5.4, linux-aws-fips, linux-azure, linux-azure-5.4, linux-azure-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8635-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8616-1 linux-ibm, linux-ibm-5.4 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8615-2 linux-raspi, linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8529-2 linux-azure, linux-gcp, linux-hwe, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8529-1 linux, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp-4.15, linux-gcp-fips, linux-kvm, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8617-1 linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8530-1 linux-aws, linux-aws-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8530-2 linux-aws-hwe vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8548-2 linux, linux-aws, linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-8548-1 linux-aws, linux-fips, linux-lts-xenial vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- ALSA-2026:19569 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19568 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19666 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19664 Important: kernel-rt security update AlmaLinux Security Advisories · Oct 29, 2026
- USN-8501-1 linux vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- ICSA-26-295-16 Siemens SIMATIC S7-1500 TM MFP CISA ICS & IT advisories · Oct 22, 2026
- WID-SEC-2026-3891 Siemens SIMATIC S7: Mehrere Schwachstelle BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2026:19521 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:20593 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:19875 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:20130 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:19711 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:19705 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:19568 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- SSA-784472 SSA-784472: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1 Siemens ProductCERT · Oct 13, 2026
- RHSA-2026:33486 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2026:24814 Red Hat Security Advisory: kpatch-patch security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:23471 Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:23469 Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, and kpatch-patch-5_14_0-284_158_1 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:23470 Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:23468 Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:20299 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:20129 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
References
- https://git.kernel.org/stable/c/fbeab9555564a1b98e8582cd106dfe46c4606991
- https://git.kernel.org/stable/c/179f1852bdedc300e373e807cc102cd81feff196
- https://git.kernel.org/stable/c/12401fcfb01f53ccc63ab0a3246570fe8f3105ee
- https://git.kernel.org/stable/c/989214c66884d70716d83dc1d0bf5e16287bf349
- https://git.kernel.org/stable/c/fc6eb39c55e97df2f94ad974b8a5bbcd019da2c8
- https://git.kernel.org/stable/c/ff375cc75f9167168db38e0464a482d5fbc8d81d
- https://git.kernel.org/stable/c/9bc9d6d6967a2239aa57af2aa53554eddd640d20
- https://git.kernel.org/stable/c/48f6a5356a33dd78e7144ae1faef95ffc990aae0