Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: synproxy: refresh tcphdr after skb_ensure_writable
synproxy_tstamp_adjust() rewrites the TCP timestamp option in place
and then patches the TCP checksum via inet_proto_csum_replace4() on
the caller-supplied tcphdr pointer. Both ipv4_synproxy_hook() and
ipv6_synproxy_hook() obtain that pointer with skb_header_pointer()
before calling in, so it may either alias skb->head directly or
point at the caller's on-stack _tcph buffer.
Between obtaining the pointer and using it, the function calls
skb_ensure_writable(skb, optend), which on a cloned or non-linear
skb invokes pskb_expand_head() and frees the old skb->head. After
that point the cached th is stale:
caller (ipv[46]_synproxy_hook)
th = skb_header_pointer(skb, ..., &_tcph)
synproxy_tstamp_adjust(skb, protoff, th, ...)
skb_ensure_writable(skb, optend)
pskb_expand_head() /* kfree(old skb->head) */
...
inet_proto_csum_replace4(&th->check, ...)
/* writes into freed head, or
into the caller's stack copy
leaving the on-wire checksum
stale */
The option bytes are written through skb->data and are fine; only
the checksum update goes through th and so lands in the wrong
place. The result is either a write into freed slab memory or a
packet leaving with a checksum that does not match its payload.
Fix by re-deriving th from skb->data + protoff immediately after
skb_ensure_writable() succeeds, so the subsequent checksum update
targets the linear, writable header.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 3.12 | 5.10.259 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 7.0.12-1 | — |
| Debian 13 | linux | 6.12.94-1 | — |
| Debian 12 | linux | 6.1.176-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1031.36 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1100.102 | — |
| Ubuntu 26.04 LTS | linux | 7.0.0-28.28 | — |
| Ubuntu 26.04 LTS | linux-aws +2 | 7.0.0-1009.9 | USN-8618-1, USN-8603-1 |
| Ubuntu 26.04 LTS | linux-gcp +1 | 7.0.0-1008.8 | USN-8593-1 |
| Ubuntu 26.04 LTS | linux-gke | 7.0.0-1003.4 | — |
| Ubuntu 26.04 LTS | linux-ibm +1 | 7.0.0-1010.10 | USN-8603-1, USN-8593-1 |
| Ubuntu 26.04 LTS | linux-nvidia | 7.0.0-1016.16 | USN-8663-1 |
| Ubuntu 26.04 LTS | linux-nvidia-bos | 7.0.0-2016.16 | USN-8664-1 |
| Ubuntu 26.04 LTS | linux-raspi | 7.0.0-1015.15 | USN-8618-1 |
| Ubuntu 26.04 LTS | linux-riscv +1 | 7.0.0-28.28.1 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-142.142 | USN-8817-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1065.68 | USN-8817-3 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1068.76 | USN-8817-1 |
| Ubuntu 24.04 LTS | linux-azure-7.0 | 7.0.0-1014.14~24.04.1 | USN-8728-2 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1066.73 | USN-8817-1 |
| Ubuntu 24.04 LTS | linux-azure-fde-7.0 | 7.0.0-1013.13~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1069.77 | USN-8817-1 |
| Ubuntu 24.04 LTS | linux-gcp-7.0 +1 | 7.0.0-1011.11~24.04.1 | USN-8728-3, USN-8728-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1064.72 | USN-8817-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1050.54 | USN-8817-1 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-28.28~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1065.66 | USN-8817-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-142.142.1 | USN-8817-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1063.66 | USN-8842-1 |
| Ubuntu 24.04 LTS | linux-nvidia-7.0 | 7.0.0-1016.16~24.04.1 | USN-8663-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1063.66.1 | USN-8842-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1035.38 | USN-8781-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1062.65 | USN-8817-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1065.69 | USN-8817-1 |
| Ubuntu 24.04 LTS | linux-riscv +29 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-7.0 | 7.0.0-28.28.1~24.04.3 | — |
| Ubuntu 24.04 LTS | linux-vmware | 6.8.0-1008.8 | — |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-194.204 | USN-8818-4, USN-8818-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1116.123 | USN-8818-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1065.68~22.04.1 | USN-8817-3 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1122.131 | USN-8818-1 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1068.76~22.04.1 | USN-8817-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1121.130 | USN-8818-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1066.73~22.04.1 | USN-8817-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1117.127 | USN-8818-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1069.77~22.04.1 | USN-8817-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1112.118 | USN-8818-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1099.107 | USN-8818-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-149.149~22.04.1 | USN-9066-1 |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1110.114 | USN-8818-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1066.67~22.04.1 | USN-8906-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1111.117 | USN-8818-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1108.113 | USN-8818-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-142.142.1~22.04.1 | USN-8817-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1111.112 | USN-8818-4 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1063.66~22.04.1 | USN-8842-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1068.70 | USN-8818-5 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1057.57 | USN-8818-5 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1113.119 | USN-8818-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1062.65~22.04.1 | USN-8817-1 |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1110.113 | USN-8871-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-142.142~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1079.83 | USN-8818-1 |
Show 18 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2054.56 | USN-8817-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1060.61 | USN-8817-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 +1 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1108.110 | USN-8818-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1115.124 | USN-8818-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1060.61~22.04.1 | USN-8817-1 |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1065.68+fips1 | USN-8817-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-142.142+fips1 | USN-8817-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips +1 | 6.8.0-1068.76+fips1 | USN-8817-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1116.123+fips1 | USN-8818-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1122.131+fips1 | USN-8818-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-194.204+fips1 | USN-8818-6 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1116.126+fips1 | USN-8818-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux +10 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1116.123~20.04.1 | USN-8818-3 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1122.131~20.04.1 | USN-8818-3 |
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1121.130~20.04.1 | USN-8818-3 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1118.128~20.04.1 | USN-8878-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-194.204~20.04.1 | USN-8818-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 +1 | 5.15.0-1110.114~20.04.1 | USN-8818-2 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1111.117~20.04.1 | USN-8818-3 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1068.70~20.04.1 | USN-8849-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1114.120~20.04.1 | USN-8879-1 |
| Ubuntu Pro 18.04 LTS | linux +12 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | linux +7 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux +3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | rv +75 | 5.14.0-687.41.1.el9_8 | RHSA-2026:57252 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.160.1.rt7.501.el8_10 | RHSA-2026:64770 |
| RHEL 8 | perf +26 | 4.18.0-553.160.1.el8_10 | RHSA-2026:66000 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Rt Els 7 | kernel-rt +7 | 3.10.0-1160.167.1.rt56.1319.el7 | RHSA-2026:81371 |
| RHEL 10.0 EUS | rv +77 | 6.12.0-55.109.1.el10_0 | RHSA-2026:77634 |
| RHEL 9.4 E4S | bpftool | 7.3.0-427.154.1.el9_4 | RHSA-2026:77218 |
| RHEL 9.4 E4S | rv +62 | 5.14.0-427.154.1.el9_4 | RHSA-2026:77218 |
| RHEL 8.6 EUS Long Life | perf +25 | 4.18.0-372.220.1.el8_6 | RHSA-2026:77216 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.220.1.el8_6 | RHSA-2026:77216 |
| RHEL 8.4 EUS Long Life | perf +25 | 4.18.0-305.211.1.el8_4 | RHSA-2026:77217 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.211.1.el8_4 | RHSA-2026:77217 |
| RHEL 7 ELS | perf +18 | 3.10.0-1160.167.1.el7 | RHSA-2026:81349 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | rv +73 | 5.14.0-687.41.1.el9_8 | ALSA-2026:57252 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.160.1.rt7.501.el8_10 | ALSA-2026:64770 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.160.1.el8_10 | ALSA-2026:66000 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | kernel | 5.14.0-687.41.1.el9_8 | RLSA-2026:57252 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.160.1.rt7.501.el8_10 | RLSA-2026:64770 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +7 | 6.4.0-150700.53.81.1 | SUSE-SU-2026:4254-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.81.1.150700.17.45.1 | SUSE-SU-2026:4254-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.135.1 | SUSE-SU-2026:4369-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.135.1.150600.12.62.4 | SUSE-SU-2026:4369-1 |
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.189.1 | SUSE-SU-2026:4595-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.189.1.150500.6.87.4 | SUSE-SU-2026:4595-1 |
| SLES 15 SP4 | kernel-64kb +2 | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.240.2.150400.24.120.2 | SUSE-SU-2026:4284-1 |
| SLES 15 SP4 | kernel-docs +3 | 5.14.21-150400.24.240.1 | SUSE-SU-2026:4284-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.328.1 | SUSE-SU-2026:4282-1 |
Show 19 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +8 | 6.12.0-160000.38.1 | SUSE-SU-2026:23902-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.38.1.160000.2.23 | SUSE-SU-2026:23902-1 |
| SLES for SAP 15 SP6 | kernel-default-base | 6.4.0-150600.23.135.1.150600.12.62.4 | SUSE-SU-2026:4369-1 |
| SLES for SAP 15 SP6 | kernel-docs +4 | 6.4.0-150600.23.135.1 | SUSE-SU-2026:4369-1 |
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.189.1.150500.6.87.4 | SUSE-SU-2026:4595-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.189.1 | SUSE-SU-2026:4595-1 |
| SLES for SAP 15 SP4 | kernel-default | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.240.2.150400.24.120.2 | SUSE-SU-2026:4284-1 |
| SLES for SAP 15 SP4 | kernel-docs +3 | 5.14.21-150400.24.240.1 | SUSE-SU-2026:4284-1 |
| SLES 16.0 | kernel-64kb +8 | 6.12.0-160000.38.1 | SUSE-SU-2026:23902-1, SUSE-SU-2026:23897-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.38.1.160000.2.23 | SUSE-SU-2026:23902-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.38.1.160000.2.23 | SUSE-SU-2026:23887-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.38.1 | SUSE-SU-2026:23887-1, SUSE-SU-2026:23881-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-52.1.21.34 | SUSE-SU-2026:23529-1 |
| SLE Micro 6.1 | kernel-rt +4 | 6.4.0-52.1 | SUSE-SU-2026:23529-1, SUSE-SU-2026:23528-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-52.1.21.36 | SUSE-SU-2026:23481-1 |
| SLE Micro 6.0 | kernel-rt +4 | 6.4.0-52.1 | SUSE-SU-2026:23481-1, SUSE-SU-2026:23477-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.189.1.150500.6.87.4 | SUSE-SU-2026:4595-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.161.1 | SUSE-SU-2026:4347-1 |
| SLE Micro 5.5 | kernel-source +1 | 5.14.21-150500.55.189.1 | SUSE-SU-2026:4595-1 |
| SLE Micro 5.4 | kernel-default | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.240.2.150400.24.120.2 | SUSE-SU-2026:4284-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.186.1 | SUSE-SU-2026:4279-1 |
| SLE Micro 5.4 | kernel-source | 5.14.21-150400.24.240.1 | SUSE-SU-2026:4284-1 |
| SLE Micro 5.3 | kernel-default | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.240.2.150400.24.120.2 | SUSE-SU-2026:4284-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.186.1 | SUSE-SU-2026:4279-1 |
| SLE Micro 5.3 | kernel-source | 5.14.21-150400.24.240.1 | SUSE-SU-2026:4284-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.81.1 | SUSE-SU-2026:4254-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_20 | 1-150700.1.3.1 | SUSE-SU-2026:4120-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_21 | 1-150700.15.3.1 | SUSE-SU-2026:4254-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.135.1 | SUSE-SU-2026:4369-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_31 | 1-150600.13.3.4 | SUSE-SU-2026:4369-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.189.1 | SUSE-SU-2026:4595-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_45 | 1-150500.11.5.3 | SUSE-SU-2026:4595-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_59 | 1-150400.9.5.1 | SUSE-SU-2026:4284-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.328.1 | SUSE-SU-2026:4282-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_87 | 1-8.5.1 | SUSE-SU-2026:4282-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.189.1 | SUSE-SU-2026:4595-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.189.1.150500.6.87.4 | SUSE-SU-2026:4595-1 |
| SLE HPC 15 SP4 | kernel-64kb +1 | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.240.2.150400.24.120.2 | SUSE-SU-2026:4284-1 |
| SLE HPC 15 SP4 | kernel-docs +3 | 5.14.21-150400.24.240.1 | SUSE-SU-2026:4284-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.75.1 | SUSE-SU-2026:4120-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.38.1.160000.2.22 | openSUSE-SU-2026:21910-1 |
| openSUSE Leap 16.0 | kernel-rt +11 | 6.12.0-160000.38.1 | openSUSE-SU-2026:21910-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.18.35-68.127 +2 | 1:1.0-0.amzn2023 | ALAS2023-2026-1968, ALAS2023-2026-1924, ALAS2023-2026-1881 |
| Amazon Linux 2023 | perf +11 | 1:6.1.176-220.358.amzn2023 | ALAS2023-2026-1924 |
| Amazon Linux 2023 | perf6.12 +11 | 1:6.12.94-123.174.amzn2023 | ALAS2023-2026-1968 |
| Amazon Linux 2023 | perf6.18 +12 | 1:6.18.35-68.127.amzn2023 | ALAS2023-2026-1881 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-206.104.3.3.el10uek | ELSA-2026-500248 |
| Oracle Linux 9 | rv +28 | 5.14.0-687.41.1.el9_8 | ELSA-2026-57252 |
Advisories 50
- USN-9066-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- WID-SEC-2026-2403 Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Nov 12, 2026
- USN-8879-1 linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8728-1 linux-gcp-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8728-2 linux-azure-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8878-1 linux-gcp-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8728-3 linux-oracle-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8906-1 linux-ibm-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8593-1 linux-ibm, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8664-1 linux-nvidia-bos vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8603-1 linux-azure, linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8663-1 linux-nvidia, linux-nvidia-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8781-1 linux-nvidia-tegra vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8618-1 linux-aws, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8817-1 linux, linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8818-1 linux-aws, linux-aws-fips, linux-azure, linux-azure-fde, linux-azure-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8871-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8818-3 linux-aws-5.15, linux-azure-5.15, linux-azure-fde-5.15, linux-intel-iotg-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8817-2 linux-aws-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8817-3 linux-aws, linux-aws-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8842-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8818-4 linux, linux-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8818-2 linux-ibm-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8818-5 linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8818-6 linux-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8849-1 linux-nvidia-tegra-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- ALSA-2026:57252 Important: kernel security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:66000 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:64770 Important: kernel-rt security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:77217 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:77218 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:77216 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:66000 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:64770 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:77634 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:57252 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:81349 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:81371 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- SUSE-SU-2026:4595-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Oct 9, 2026
- SUSE-SU-2026:4254-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Oct 8, 2026
- SUSE-SU-2026:4369-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Oct 2, 2026
- SUSE-SU-2026:23902-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:23881-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:23887-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:23897-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Sep 30, 2026
- openSUSE-SU-2026:21910-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Sep 25, 2026
- SUSE-SU-2026:4347-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Sep 25, 2026
- SUSE-SU-2026:4279-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Sep 23, 2026
- SUSE-SU-2026:4282-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Sep 23, 2026
- SUSE-SU-2026:4284-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Sep 23, 2026
References
- https://git.kernel.org/stable/c/9902a1058992de5d95656b64a3bd95c077f7ba2c
- https://git.kernel.org/stable/c/d3019c61799adc21811af4b521f11f3dc77f8e04
- https://git.kernel.org/stable/c/dd206819f210522579010d889d45a9530bb494bc
- https://git.kernel.org/stable/c/af2c22ccb1f621aff487ff47a040e38e058541e7
- https://git.kernel.org/stable/c/c7f945f7da097245a2f8ed7775ce48421047ee96
- https://git.kernel.org/stable/c/f0fea2b6d5453a11ad11713bbf37561b9b3a7edf
- https://git.kernel.org/stable/c/a91887a5b6ee4b98dfbf1db657ed2b879430149e
- https://git.kernel.org/stable/c/92170e6afe927ab2792a3f71902845789c8e31b1