Skip to content
OpenAdvisories
Critical · 9.8 Public exploit CVE-2026-64564 EUVD-2026-52605GHSA-xw85-w2q2-369x

sctp: don't free the ASCONF's own transport in DEL-IP processing

Published Aug 4, 2026 · Updated Oct 19, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: kernel Package: linux Package: linux Package: linux-6.12 Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.14 Package: linux-aws-6.17 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-6.8 Package: linux-aws-7.0 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.11 Package: linux-azure-6.14 Package: linux-azure-6.17 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-6.8 Package: linux-azure-7.0 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.15 Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.14 Package: linux-azure-fde-6.17 Package: linux-azure-fde-6.2 Package: linux-azure-fde-6.8 Package: linux-azure-fde-7.0 Package: linux-azure-fips Package: linux-azure-nvidia Package: linux-azure-nvidia-6.14 Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.11 Package: linux-gcp-6.14 Package: linux-gcp-6.17 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-6.8 Package: linux-gcp-7.0 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.11 Package: linux-hwe-6.14 Package: linux-hwe-6.17 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-6.8 Package: linux-hwe-7.0 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-ibm-6.8 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.11 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-lowlatency-hwe-6.8 Package: linux-lts-xenial Package: linux-nvidia Package: linux-nvidia-6.11 Package: linux-nvidia-6.17 Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-6.8 Package: linux-nvidia-7.0 Package: linux-nvidia-bos Package: linux-nvidia-lowlatency Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.11 Package: linux-oem-6.14 Package: linux-oem-6.17 Package: linux-oem-6.5 Package: linux-oem-6.8 Package: linux-oem-7.0 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-oracle-6.14 Package: linux-oracle-6.17 Package: linux-oracle-6.5 Package: linux-oracle-6.8 Package: linux-oracle-7.0 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-realtime-6.14 Package: linux-realtime-6.17 Package: linux-realtime-6.8 Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.14 Package: linux-riscv-6.17 Package: linux-riscv-6.5 Package: linux-riscv-6.8 Package: linux-riscv-7.0 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

sctp: don't free the ASCONF's own transport in DEL-IP processing

sctp_process_asconf() caches the transport the ASCONF chunk is processed
against in asconf->transport (== chunk->transport, set once in sctp_rcv()).
For an ASCONF located through its Address Parameter by
__sctp_rcv_asconf_lookup(), that cached transport corresponds to the
Address Parameter, which need not be the packet's source address.

sctp_process_asconf_param() rejects a DEL-IP for the packet source address
(ADDIP D8, SCTP_ERROR_DEL_SRC_IP), but nothing protects asconf->transport.
A single ASCONF can therefore carry, in order:

[Address Parameter L] [DEL-IP L] [DEL-IP 0.0.0.0]

where L differs from the source. The DEL-IP for L passes the D8 check and
calls sctp_assoc_rm_peer() on the transport that asconf->transport still
points at, freeing it (RCU-deferred). The following wildcard DEL-IP then
reuses the now-dangling asconf->transport in sctp_assoc_set_primary() and
sctp_assoc_del_nonprimary_peers(): set_primary() dereferences the freed
transport (->ipaddr, ->state) and plants the dangling pointer into
asoc->peer.primary_path / active_path, and del_nonprimary_peers(), keeping
only the pointer that is no longer on the list, removes every real
transport, leaving the association with a transport_count of 0 and
primary_path/active_path pointing at freed memory.

Reject a DEL-IP that targets the transport the ASCONF is being processed
against, mirroring the existing source-address guard, so the wildcard
branch can never reuse a freed transport.

Affected products

VendorProductAffectedFixed
Linux Linux 2.6.25 5.10.265

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 7.1.6-1 —
Debian 13 linux 6.12.101-1 —
Debian 12 linux 6.1.187-1 —
Debian 12 linux-6.12 6.12.101-1~deb12u1 —
ReleasePackageFixed inAdvisory
Ubuntu Nvidia-BlueField 24.04 LTS linux-bluefield 6.8.0-1033.38 —
Ubuntu Nvidia-BlueField 22.04 LTS linux-bluefield 5.15.0-1101.103 —
Ubuntu 26.04 LTS linux 7.0.0-38.38 USN-8887-1
Ubuntu 26.04 LTS linux-aws +1 7.0.0-1014.14 USN-8887-1
Ubuntu 26.04 LTS linux-azure 7.0.0-1017.17 USN-8888-1
Ubuntu 26.04 LTS linux-azure-fde 7.0.0-1016.16 USN-8888-1
Ubuntu 26.04 LTS linux-gke 7.0.0-1008.9 USN-8887-1
Ubuntu 26.04 LTS linux-ibm +1 7.0.0-1015.15 USN-8889-1, USN-8887-1
Ubuntu 26.04 LTS linux-nvidia 7.0.0-1025.26 USN-9043-1
Ubuntu 26.04 LTS linux-nvidia-bos 7.0.0-2022.23 USN-9003-1
Ubuntu 26.04 LTS linux-oracle 7.0.0-1013.13 USN-8887-1
Ubuntu 26.04 LTS linux-raspi 7.0.0-1023.23 USN-9021-1
Ubuntu 26.04 LTS linux-riscv +1 7.0.0-38.38.1 USN-8887-1
Ubuntu 24.04 LTS linux 6.8.0-147.147 USN-8917-1
Ubuntu 24.04 LTS linux-aws +1 6.8.0-1067.70 USN-9024-1, USN-8917-1
Ubuntu 24.04 LTS linux-aws-7.0 +1 7.0.0-1014.14~24.04.1 USN-8887-3, USN-8887-2
Ubuntu 24.04 LTS linux-azure-7.0 7.0.0-1017.17~24.04.1 USN-8888-2
Ubuntu 24.04 LTS linux-azure-fde 6.8.0-1069.76 USN-8918-1
Ubuntu 24.04 LTS linux-azure-fde-7.0 7.0.0-1016.16~24.04.1 USN-8888-2
Ubuntu 24.04 LTS linux-gcp +1 6.8.0-1071.79 USN-8918-1, USN-8917-1
Ubuntu 24.04 LTS linux-gke 6.8.0-1066.74 USN-8917-1
Ubuntu 24.04 LTS linux-gkeop 6.8.0-1052.56 USN-8917-1
Ubuntu 24.04 LTS linux-hwe-7.0 7.0.0-38.38~24.04.4 USN-8887-3
Ubuntu 24.04 LTS linux-ibm 6.8.0-1067.68 USN-8917-1
Ubuntu 24.04 LTS linux-lowlatency 6.8.0-147.147.1 USN-8917-1
Ubuntu 24.04 LTS linux-nvidia-7.0 7.0.0-1024.25~24.04.1 USN-9003-1
Ubuntu 24.04 LTS linux-nvidia-lowlatency 6.8.0-1067.70.1 USN-9040-1
Ubuntu 24.04 LTS linux-nvidia-tegra 6.8.0-1035.38 USN-8781-1
Ubuntu 24.04 LTS linux-oracle 6.8.0-1064.67 USN-8917-1
Ubuntu 24.04 LTS linux-oracle-7.0 7.0.0-1013.13~24.04.1 USN-8887-3
Ubuntu 24.04 LTS linux-raspi 6.8.0-1068.72 USN-9025-1
Ubuntu 24.04 LTS linux-riscv +29 No fix yet —
Ubuntu 24.04 LTS linux-riscv-7.0 7.0.0-38.38.1~24.04.1 —
Ubuntu 24.04 LTS linux-vmware 6.8.0-1008.8 —
Ubuntu 22.04 LTS linux 5.15.0-198.208 USN-8875-1
Ubuntu 22.04 LTS linux-aws 5.15.0-1117.124 USN-8875-1
Ubuntu 22.04 LTS linux-aws-6.8 6.8.0-1069.74~22.04.1 USN-9024-1
Ubuntu 22.04 LTS linux-azure 5.15.0-1123.132 USN-8875-1
Ubuntu 22.04 LTS linux-azure-6.8 6.8.0-1073.82~22.04.1 USN-9026-1
Ubuntu 22.04 LTS linux-azure-fde 5.15.0-1122.131 USN-8876-1
Ubuntu 22.04 LTS linux-azure-fde-6.8 6.8.0-1071.78~22.04.1 USN-9026-1
Ubuntu 22.04 LTS linux-gcp 5.15.0-1118.128 USN-8877-1
Ubuntu 22.04 LTS linux-gcp-6.8 6.8.0-1073.81~22.04.1 USN-9024-1
Ubuntu 22.04 LTS linux-gke 5.15.0-1113.119 USN-8875-1
Ubuntu 22.04 LTS linux-gkeop 5.15.0-1100.108 USN-8875-1
Ubuntu 22.04 LTS linux-hwe-6.8 6.8.0-149.149~22.04.1 USN-9066-1
Ubuntu 22.04 LTS linux-ibm 5.15.0-1111.115 USN-8875-1
Ubuntu 22.04 LTS linux-ibm-6.8 6.8.0-1069.70~22.04.1 USN-9024-1
Ubuntu 22.04 LTS linux-intel-iotg 5.15.0-1112.118 USN-8875-1
Ubuntu 22.04 LTS linux-kvm 5.15.0-1109.114 USN-8875-1
Ubuntu 22.04 LTS linux-lowlatency 5.15.0-195.205 USN-8875-1
Ubuntu 22.04 LTS linux-lowlatency-hwe-6.8 6.8.0-149.149.1~22.04.1 USN-9024-1
Ubuntu 22.04 LTS linux-nvidia 5.15.0-1112.113 USN-8875-2
Ubuntu 22.04 LTS linux-nvidia-tegra 5.15.0-1070.72 USN-8963-1
Ubuntu 22.04 LTS linux-nvidia-tegra-igx 5.15.0-1059.59 USN-8963-1
Ubuntu 22.04 LTS linux-oracle 5.15.0-1114.120 USN-8875-1
Ubuntu 22.04 LTS linux-oracle-6.8 6.8.0-1067.71~22.04.1 USN-9025-1
Ubuntu 22.04 LTS linux-raspi 5.15.0-1113.116 USN-9029-1
Ubuntu 22.04 LTS linux-riscv +33 No fix yet —
Ubuntu 22.04 LTS linux-xilinx-zynqmp 5.15.0-1080.84 USN-8875-1
Show 18 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS linux-gke +28 No fix yet —
Ubuntu 18.04 LTS linux-gcp +14 No fix yet —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu Pro Realtime 24.04 LTS linux-raspi-realtime 6.8.0-2056.58 USN-9025-1
Ubuntu Pro Realtime 24.04 LTS linux-realtime 6.8.1-1062.63 USN-8917-1
Ubuntu Pro Realtime 24.04 LTS linux-realtime-6.14 +1 No fix yet —
Ubuntu Pro Realtime 22.04 LTS linux-intel-iot-realtime 5.15.0-1109.111 USN-8875-1
Ubuntu Pro Realtime 22.04 LTS linux-realtime 5.15.0-1116.125 USN-8875-1
Ubuntu Pro Realtime 22.04 LTS linux-realtime-6.8 6.8.1-1064.65~22.04.1 USN-9024-1
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 24.04 LTS linux-aws-fips 6.8.0-1067.70+fips1 USN-8917-1
Ubuntu Pro FIPS-updates 24.04 LTS linux-fips 6.8.0-147.147+fips1 USN-8917-1
Ubuntu Pro FIPS-updates 24.04 LTS linux-gcp-fips +1 6.8.0-1071.79+fips1 USN-8918-1, USN-8917-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-aws-fips 5.15.0-1117.124+fips1 USN-8875-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-azure-fips 5.15.0-1123.132+fips1 USN-8875-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-fips 5.15.0-198.208+fips1 USN-8875-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-gcp-fips 5.15.0-1118.128+fips1 USN-8877-1
Ubuntu Pro FIPS-updates 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-preview 22.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro 20.04 LTS linux +10 No fix yet —
Ubuntu Pro 20.04 LTS linux-aws-5.15 5.15.0-1117.124~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-azure-5.15 5.15.0-1123.132~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 5.15.0-1122.131~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-gcp-5.15 5.15.0-1118.128~20.04.1 USN-8878-1
Ubuntu Pro 20.04 LTS linux-hwe-5.15 5.15.0-198.208~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-ibm-5.15 +1 5.15.0-1111.115~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-intel-iotg-5.15 5.15.0-1112.118~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-lowlatency-hwe-5.15 5.15.0-195.205~20.04.1 USN-8875-1
Ubuntu Pro 20.04 LTS linux-nvidia-tegra-5.15 5.15.0-1070.72~20.04.1 USN-8963-1
Ubuntu Pro 20.04 LTS linux-oracle-5.15 5.15.0-1114.120~20.04.1 USN-8879-1
Ubuntu Pro 18.04 LTS linux +12 No fix yet —
Ubuntu Pro 16.04 LTS linux +7 No fix yet —
Ubuntu Pro 14.04 LTS linux +3 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 10 rv +76 6.12.0-211.59.1.el10_2 RHSA-2026:71233
RHEL 9 rv +75 5.14.0-687.51.1.el9_8 RHSA-2026:71232
RHEL 8 kernel-rt +12 4.18.0-553.167.1.rt7.508.el8_10 RHSA-2026:71016
RHEL 8 perf +26 4.18.0-553.167.1.el8_10 RHSA-2026:71213
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Rt Els 7 kernel-rt +7 3.10.0-1160.162.1.rt56.1314.el7 RHSA-2026:70308
RHEL 10.0 EUS rv +77 6.12.0-55.105.1.el10_0 RHSA-2026:69089
RHEL 9.6 EUS rv +77 5.14.0-570.142.1.el9_6 RHSA-2026:70484
RHEL 9.4 E4S bpftool 7.3.0-427.151.1.el9_4 RHSA-2026:69908
RHEL 9.4 E4S rv +62 5.14.0-427.151.1.el9_4 RHSA-2026:69908
RHEL 9.2 E4S bpftool 7.0.0-284.193.1.el9_2 RHSA-2026:70482
RHEL 9.2 E4S kernel-rt +14 5.14.0-284.193.1.rt14.478.el9_2 RHSA-2026:70483
RHEL 9.2 E4S perf +47 5.14.0-284.193.1.el9_2 RHSA-2026:70482
RHEL 8.8 TUS perf +17 4.18.0-477.168.1.el8_8 RHSA-2026:69837
RHEL 8.8 E4S perf +18 4.18.0-477.168.1.el8_8 RHSA-2026:69837
RHEL 8.6 EUS Long Life perf +25 4.18.0-372.216.1.el8_6 RHSA-2026:69906
RHEL 8.6 AUS perf +17 4.18.0-372.216.1.el8_6 RHSA-2026:69906
RHEL 8.4 EUS Long Life perf +25 4.18.0-305.208.1.el8_4 RHSA-2026:69874
RHEL 8.4 AUS perf +17 4.18.0-305.208.1.el8_4 RHSA-2026:69874
RHEL 7 ELS perf +18 3.10.0-1160.162.1.el7 RHSA-2026:70290

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 perf +13 6.12.0-211.59.1.el10_2 ALSA-2026:71233
AlmaLinux 9 kernel +16 5.14.0-687.51.1.el9_8 ALSA-2026:71232
AlmaLinux 8 kernel-rt +9 4.18.0-553.167.1.rt7.508.el8_10 ALSA-2026:71016
AlmaLinux 8 perf +24 4.18.0-553.167.1.el8_10 ALSA-2026:71213

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 kernel 5.14.0-687.51.1.el9_8 RLSA-2026:71232
ReleasePackageFixed inAdvisory
SLES 15 SP7 kernel-64kb +7 6.4.0-150700.53.78.1 SUSE-SU-2026:3790-1
SLES 15 SP7 kernel-default-base 6.4.0-150700.53.78.1.150700.17.43.2 SUSE-SU-2026:3790-1
SLES 15 SP6 kernel-64kb +6 6.4.0-150600.23.130.1 SUSE-SU-2026:3602-1
SLES 15 SP6 kernel-default-base 6.4.0-150600.23.130.1.150600.12.60.3 SUSE-SU-2026:3602-1
SLES 15 SP5 kernel-64kb +6 5.14.21-150500.55.182.1 SUSE-SU-2026:3595-1
SLES 15 SP5 kernel-default-base 5.14.21-150500.55.182.1.150500.6.85.2 SUSE-SU-2026:3595-1
SLES 15 SP4 kernel-64kb +6 5.14.21-150400.24.235.1 SUSE-SU-2026:3593-1
SLES 15 SP4 kernel-default-base 5.14.21-150400.24.235.1.150400.24.118.3 SUSE-SU-2026:3593-1
SLES 12 SP5 kernel-syms +2 4.12.14-122.323.1 SUSE-SU-2026:3594-1
Show 20 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 11 SP4 kernel-ec2 +6 3.0.101-108.216.1 SUSE-SU-2026:3809-1
SLES for SAP 16.0 kernel-64kb +8 6.12.0-160000.37.1 SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1
SLES for SAP 16.0 kernel-default-base 6.12.0-160000.37.1.160000.2.19 SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_0 18-160000.4.3 SUSE-SU-2026:23936-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_1 16-160000.1.1 SUSE-SU-2026:23938-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_14 5-160000.1.1 SUSE-SU-2026:23790-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_15 3-160000.1.1 SUSE-SU-2026:23951-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_2 14-160000.1.1 SUSE-SU-2026:23939-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_3 13-160000.1.1 SUSE-SU-2026:23941-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_4 12-160000.1.1 SUSE-SU-2026:23942-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_5 11-160000.1.1 SUSE-SU-2026:23944-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_8 8-160000.1.1 SUSE-SU-2026:23791-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_9 +1 7-160000.1.1 SUSE-SU-2026:23940-1, SUSE-SU-2026:23937-1
SLES for SAP 15 SP6 kernel-default-base 6.4.0-150600.23.130.1.150600.12.60.3 SUSE-SU-2026:3602-1
SLES for SAP 15 SP6 kernel-docs +4 6.4.0-150600.23.130.1 SUSE-SU-2026:3602-1
SLES for SAP 15 SP5 kernel-default-base 5.14.21-150500.55.182.1.150500.6.85.2 SUSE-SU-2026:3595-1
SLES for SAP 15 SP5 kernel-docs +4 5.14.21-150500.55.182.1 SUSE-SU-2026:3595-1
SLES for SAP 15 SP4 kernel-default-base 5.14.21-150400.24.235.1.150400.24.118.3 SUSE-SU-2026:3593-1
SLES for SAP 15 SP4 kernel-docs +4 5.14.21-150400.24.235.1 SUSE-SU-2026:3593-1
SLES 16.0 kernel-64kb +8 6.12.0-160000.37.1 SUSE-SU-2026:23237-1, SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1
SLES 16.0 kernel-default-base 6.12.0-160000.37.1.160000.2.19 SUSE-SU-2026:23231-1, SUSE-SU-2026:23221-1
SLES 16.0 kernel-livepatch-SLE16_Update_0 18-160000.4.3 SUSE-SU-2026:23936-1
SLES 16.0 kernel-livepatch-SLE16_Update_1 16-160000.1.1 SUSE-SU-2026:23938-1
SLES 16.0 kernel-livepatch-SLE16_Update_14 5-160000.1.1 SUSE-SU-2026:23790-1
SLES 16.0 kernel-livepatch-SLE16_Update_15 3-160000.1.1 SUSE-SU-2026:23951-1
SLES 16.0 kernel-livepatch-SLE16_Update_2 14-160000.1.1 SUSE-SU-2026:23939-1
SLES 16.0 kernel-livepatch-SLE16_Update_3 13-160000.1.1 SUSE-SU-2026:23941-1
SLES 16.0 kernel-livepatch-SLE16_Update_4 12-160000.1.1 SUSE-SU-2026:23942-1
SLES 16.0 kernel-livepatch-SLE16_Update_5 11-160000.1.1 SUSE-SU-2026:23944-1
SLES 16.0 kernel-livepatch-SLE16_Update_8 8-160000.1.1 SUSE-SU-2026:23791-1
SLES 16.0 kernel-livepatch-SLE16_Update_9 +1 7-160000.1.1 SUSE-SU-2026:23940-1, SUSE-SU-2026:23937-1
SLE Micro 6.2 kernel-default-base 6.12.0-160000.37.1.160000.2.19 SUSE-SU-2026:23068-1
SLE Micro 6.2 kernel-livepatch-SLE16-RT_Update_0 16-160000.3.4 SUSE-SU-2026:23676-1
SLE Micro 6.2 kernel-livepatch-SLE16-RT_Update_1 15-160000.1.1 SUSE-SU-2026:23677-1
SLE Micro 6.2 kernel-livepatch-SLE16-RT_Update_7 9-160000.1.1 SUSE-SU-2026:23682-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_0 18-160000.4.3 SUSE-SU-2026:23960-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_1 16-160000.1.1 SUSE-SU-2026:23961-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_14 +3 5-160000.1.1 SUSE-SU-2026:23798-1, SUSE-SU-2026:23674-1, SUSE-SU-2026:23673-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_15 3-160000.1.1 SUSE-SU-2026:23968-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_2 14-160000.1.1 SUSE-SU-2026:23963-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_3 +1 13-160000.1.1 SUSE-SU-2026:23965-1, SUSE-SU-2026:23678-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_4 +2 12-160000.1.1 SUSE-SU-2026:23966-1, SUSE-SU-2026:23687-1, SUSE-SU-2026:23679-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_5 +1 11-160000.1.1 SUSE-SU-2026:23967-1, SUSE-SU-2026:23680-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_6 +1 10-160000.1.1 SUSE-SU-2026:23801-1, SUSE-SU-2026:23681-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_8 +1 8-160000.1.1 SUSE-SU-2026:23799-1, SUSE-SU-2026:23683-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_9 +4 7-160000.1.1 SUSE-SU-2026:23964-1, SUSE-SU-2026:23962-1, SUSE-SU-2026:23686-1
SLE Micro 6.2 kernel-rt +5 6.12.0-160000.37.1 SUSE-SU-2026:23068-1, SUSE-SU-2026:23066-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_13 +1 12-1.1 SUSE-SU-2026:23781-1, SUSE-SU-2026:23780-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_22 6-1.2 SUSE-SU-2026:23771-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_10 +1 17-1.1 SUSE-SU-2026:23778-1, SUSE-SU-2026:23747-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_11 +2 16-1.1 SUSE-SU-2026:23779-1, SUSE-SU-2026:23749-1, SUSE-SU-2026:23748-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_13 14-1.1 SUSE-SU-2026:23750-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_14 12-1.2 SUSE-SU-2026:23751-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_16 +1 11-1.1 SUSE-SU-2026:23766-1, SUSE-SU-2026:23752-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_17 +1 10-1.1 SUSE-SU-2026:23767-1, SUSE-SU-2026:23753-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_18 +1 9-1.1 SUSE-SU-2026:23768-1, SUSE-SU-2026:23754-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_19 +1 7-1.1 SUSE-SU-2026:23769-1, SUSE-SU-2026:23755-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_20 +5 6-1.1 SUSE-SU-2026:23772-1, SUSE-SU-2026:23770-1, SUSE-SU-2026:23760-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_24 +1 5-1.1 SUSE-SU-2026:23773-1, SUSE-SU-2026:23759-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_25 +1 4-1.1 SUSE-SU-2026:23774-1, SUSE-SU-2026:23761-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_26 +3 3-1.1 SUSE-SU-2026:23776-1, SUSE-SU-2026:23775-1, SUSE-SU-2026:23763-1
SLE Micro 6.1 kernel-rt +4 6.4.0-51.1 SUSE-SU-2026:23194-1, SUSE-SU-2026:23193-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_13 +1 12-1.1 SUSE-SU-2026:23835-1, SUSE-SU-2026:23834-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_22 6-1.2 SUSE-SU-2026:23808-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_10 +1 17-1.1 SUSE-SU-2026:23832-1, SUSE-SU-2026:23815-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_11 +2 16-1.1 SUSE-SU-2026:23833-1, SUSE-SU-2026:23817-1, SUSE-SU-2026:23816-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_13 14-1.1 SUSE-SU-2026:23818-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_14 12-1.2 SUSE-SU-2026:23819-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_16 +1 11-1.1 SUSE-SU-2026:23820-1, SUSE-SU-2026:23803-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_17 +1 10-1.1 SUSE-SU-2026:23821-1, SUSE-SU-2026:23804-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_18 +1 9-1.1 SUSE-SU-2026:23822-1, SUSE-SU-2026:23805-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_19 +1 7-1.1 SUSE-SU-2026:23823-1, SUSE-SU-2026:23806-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_20 +5 6-1.1 SUSE-SU-2026:23827-1, SUSE-SU-2026:23826-1, SUSE-SU-2026:23825-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_24 +1 5-1.1 SUSE-SU-2026:23828-1, SUSE-SU-2026:23810-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_25 +1 4-1.1 SUSE-SU-2026:23836-1, SUSE-SU-2026:23811-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_26 +3 3-1.1 SUSE-SU-2026:23838-1, SUSE-SU-2026:23837-1, SUSE-SU-2026:23813-1
SLE Micro 6.0 kernel-rt +4 6.4.0-51.1 SUSE-SU-2026:23244-1, SUSE-SU-2026:23241-1
SLE Micro 5.5 kernel-default-base 5.14.21-150500.55.182.1.150500.6.85.2 SUSE-SU-2026:3595-1
SLE Micro 5.5 kernel-rt +1 5.14.21-150500.13.156.1 SUSE-SU-2026:3617-1
SLE Micro 5.5 kernel-source +1 5.14.21-150500.55.182.1 SUSE-SU-2026:3595-1
SLE Micro 5.4 kernel-default-base 5.14.21-150400.24.235.1.150400.24.118.3 SUSE-SU-2026:3593-1
SLE Micro 5.4 kernel-rt +1 5.14.21-150400.15.181.1 SUSE-SU-2026:3616-1
SLE Micro 5.4 kernel-source +1 5.14.21-150400.24.235.1 SUSE-SU-2026:3593-1
SLE Micro 5.3 kernel-default-base 5.14.21-150400.24.235.1.150400.24.118.3 SUSE-SU-2026:3593-1
SLE Micro 5.3 kernel-rt +1 5.14.21-150400.15.181.1 SUSE-SU-2026:3616-1
SLE Micro 5.3 kernel-source +1 5.14.21-150400.24.235.1 SUSE-SU-2026:3593-1
SLE Live Patching 15 SP7 kernel-default 6.4.0-150700.53.78.1 SUSE-SU-2026:3790-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_18 2-150700.2.1 SUSE-SU-2026:4172-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_19 1-150700.1.5.1 SUSE-SU-2026:3810-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_13 7-150700.2.1 SUSE-SU-2026:4258-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_14 6-150700.2.1 SUSE-SU-2026:4356-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_17 +2 4-150700.2.1 SUSE-SU-2026:4359-1, SUSE-SU-2026:4357-1, SUSE-SU-2026:4170-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_19 3-150700.2.1 SUSE-SU-2026:4383-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_20 1-150700.15.3.2 SUSE-SU-2026:3790-1
SLE Live Patching 15 SP6 kernel-default 6.4.0-150600.23.130.1 SUSE-SU-2026:3602-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_16 14-150600.2.1 SUSE-SU-2026:4231-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_30 1-150600.13.5.1 SUSE-SU-2026:3602-1
SLE Live Patching 15 SP5 kernel-default 5.14.21-150500.55.182.1 SUSE-SU-2026:3595-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_30 18-150500.2.1 SUSE-SU-2026:4256-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_39 7-150500.2.1 SUSE-SU-2026:4244-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_41 5-150500.2.1 SUSE-SU-2026:4315-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_44 1-150500.11.5.1 SUSE-SU-2026:3595-1
SLE Live Patching 15 SP4 kernel-default 5.14.21-150400.24.235.1 SUSE-SU-2026:3593-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_55 +1 5-150400.2.1 SUSE-SU-2026:4259-1, SUSE-SU-2026:4256-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_57 3-150400.2.1 SUSE-SU-2026:4255-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_58 1-150400.9.7.1 SUSE-SU-2026:3593-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.323.1 SUSE-SU-2026:3594-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_82 6-2.1 SUSE-SU-2026:4310-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_86 1-8.3.1 SUSE-SU-2026:3594-1
SLE HPC 15 SP5 kernel-64kb +5 5.14.21-150500.55.182.1 SUSE-SU-2026:3595-1
SLE HPC 15 SP5 kernel-default-base 5.14.21-150500.55.182.1.150500.6.85.2 SUSE-SU-2026:3595-1
SLE HPC 15 SP4 kernel-64kb +5 5.14.21-150400.24.235.1 SUSE-SU-2026:3593-1
SLE HPC 15 SP4 kernel-default-base 5.14.21-150400.24.235.1.150400.24.118.3 SUSE-SU-2026:3593-1
SUSE Real Time Module 15 SP7 kernel-rt +2 6.4.0-150700.7.72.1 SUSE-SU-2026:3810-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed kernel-source 7.1.7-1.1 openSUSE-SU-2026:11476-1
openSUSE Leap 16.0 kernel-default-base 6.12.0-160000.37.1.160000.2.19 openSUSE-SU-2026:21555-1
openSUSE Leap 16.0 kernel-rt +11 6.12.0-160000.37.1 openSUSE-SU-2026:21555-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 kernel-livepatch-6.18.44-99.149 +2 1:1.0-0.amzn2023 ALAS2023-2026-2110, ALAS2023-2026-2107, ALAS2023-2026-2106
Amazon Linux 2023 perf +11 1:6.1.182-227.379.amzn2023 ALAS2023-2026-2107
Amazon Linux 2023 perf6.12 +11 1:6.12.103-127.188.amzn2023 ALAS2023-2026-2110
Amazon Linux 2023 perf6.18 +12 1:6.18.44-99.149.amzn2023 ALAS2023-2026-2106
Amazon Linux 2 kernel-livepatch-4.14.355-287.753 1.0-0.amzn2 ALAS2-2026-3962
Amazon Linux 2 perf +8 4.14.355-287.753.amzn2 ALAS2-2026-3962

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 kernel 6.6.150.1-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 rv +29 6.12.0-211.60.1.el10_2 ELSA-2026-71233
Oracle Linux 9 kernel-uek +34 6.12.0-206.104.3.3.el10uek ELSA-2026-500374, ELSA-2026-500248
Oracle Linux 9 rv +28 5.14.0-687.51.1.el9_8 ELSA-2026-71232
Oracle Linux 8 kernel-uek +17 5.15.0-325.220.5.el9uek ELSA-2026-500377
Oracle Linux 8 perf +19 4.18.0-553.168.1.el8_10 ELSA-2026-500377, ELSA-2026-71213

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 5 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 50

References