Skip to content
OpenAdvisories
High · 7.8 Public exploit CVE-2026-68138 EUVD-2026-55519GHSA-5w39-288f-6m96

net/sched: serialize qdisc_rtab_list against concurrent get/put

Published Aug 10, 2026 · Updated Oct 19, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: kernel Package: linux Package: linux Package: linux-6.12 Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.14 Package: linux-aws-6.17 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-6.8 Package: linux-aws-7.0 Package: linux-aws-fips Package: linux-azure Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.11 Package: linux-azure-6.14 Package: linux-azure-6.17 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-6.8 Package: linux-azure-7.0 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.15 Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.14 Package: linux-azure-fde-6.17 Package: linux-azure-fde-6.2 Package: linux-azure-fde-6.8 Package: linux-azure-fde-7.0 Package: linux-azure-fips Package: linux-azure-nvidia Package: linux-azure-nvidia-6.14 Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.11 Package: linux-gcp-6.14 Package: linux-gcp-6.17 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-6.8 Package: linux-gcp-7.0 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.11 Package: linux-hwe-6.14 Package: linux-hwe-6.17 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-6.8 Package: linux-hwe-7.0 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-ibm-6.8 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.11 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-lowlatency-hwe-6.8 Package: linux-nvidia Package: linux-nvidia-6.11 Package: linux-nvidia-6.17 Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-6.8 Package: linux-nvidia-7.0 Package: linux-nvidia-bos Package: linux-nvidia-lowlatency Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.11 Package: linux-oem-6.14 Package: linux-oem-6.17 Package: linux-oem-6.5 Package: linux-oem-6.8 Package: linux-oem-7.0 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-oracle-6.14 Package: linux-oracle-6.17 Package: linux-oracle-6.5 Package: linux-oracle-6.8 Package: linux-oracle-7.0 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-realtime-6.14 Package: linux-realtime-6.17 Package: linux-realtime-6.8 Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.14 Package: linux-riscv-6.17 Package: linux-riscv-6.5 Package: linux-riscv-6.8 Package: linux-riscv-7.0 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

net/sched: serialize qdisc_rtab_list against concurrent get/put

qdisc_get_rtab() and qdisc_put_rtab() mutate the process-global singly
linked list qdisc_rtab_list and a plain non-atomic 'int refcnt' with no
lock. This was only safe because every caller historically held the RTNL
mutex, which serialized all rate-table lookups, inserts and frees.

That invariant no longer holds. cls_flower sets
TCF_PROTO_OPS_DOIT_UNLOCKED, so tc_new_tfilter() keeps rtnl_held == false
for it and sets TCA_ACT_FLAGS_NO_RTNL. That flag propagates through
tcf_exts_validate_ex() -> tcf_action_init() -> tcf_action_init_1() ->
tcf_police_init(), which calls qdisc_get_rtab()/qdisc_put_rtab() with the
RTNL mutex NOT held. Two RTM_NEWTFILTER requests on different CPUs, each
adding a flower filter with a police action carrying the same rate, then
race on qdisc_rtab_list and on the non-atomic refcnt, leading to a
use-after-free / double-free of the kmalloc-2k struct qdisc_rate_table.
qdisc_rtab_list is a single global (not per-netns), so the corrupted
object is shared system-wide.

BUG: KASAN: slab-use-after-free in qdisc_put_rtab+0x12f/0x160
qdisc_put_rtab+0x12f/0x160
tcf_police_init+0xda9/0x1590
tcf_action_init_1+0x460/0x6b0
tcf_action_init+0x439/0xa40
tcf_exts_validate_ex+0x42d/0x550
fl_change+0xddd/0x7da0
tc_new_tfilter+0xaa7/0x2420
rtnetlink_rcv_msg+0x95e/0xe90
which belongs to the cache kmalloc-2k of size 2048

Protect qdisc_rtab_list and the refcount with a dedicated spinlock. The
(sleeping, GFP_KERNEL) allocation in qdisc_get_rtab() is performed before
taking the lock; if a concurrent inserter added an identical table in the
meantime the freshly allocated one is freed under the lock, so no
duplicate is leaked. qdisc_put_rtab() now decrements the refcount and
unlinks under the same lock.

Affected products

VendorProductAffectedFixed
Linux Linux 5.1 5.10.266

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 7.1.6-1 —
Debian 13 linux 6.12.105-1 —
Debian 12 linux 6.1.187-1 —
Debian 12 linux-6.12 6.12.107-1~deb12u1 —
ReleasePackageFixed inAdvisory
Ubuntu Nvidia-BlueField 24.04 LTS linux-bluefield 6.8.0-1036.41 —
Ubuntu Nvidia-BlueField 22.04 LTS linux-bluefield 5.15.0-1103.105 —
Ubuntu 26.04 LTS linux 7.0.0-38.38 USN-8887-1
Ubuntu 26.04 LTS linux-aws +1 7.0.0-1014.14 USN-8887-1
Ubuntu 26.04 LTS linux-azure 7.0.0-1017.17 USN-8888-1
Ubuntu 26.04 LTS linux-azure-fde 7.0.0-1016.16 USN-8888-1
Ubuntu 26.04 LTS linux-gke 7.0.0-1008.9 USN-8887-1
Ubuntu 26.04 LTS linux-ibm +1 7.0.0-1015.15 USN-8889-1, USN-8887-1
Ubuntu 26.04 LTS linux-nvidia 7.0.0-1025.26 USN-9043-1
Ubuntu 26.04 LTS linux-nvidia-bos 7.0.0-2022.23 USN-9003-1
Ubuntu 26.04 LTS linux-oracle 7.0.0-1013.13 USN-8887-1
Ubuntu 26.04 LTS linux-raspi 7.0.0-1023.23 USN-9021-1
Ubuntu 26.04 LTS linux-riscv +1 7.0.0-38.38.1 USN-8887-1
Ubuntu 24.04 LTS linux 6.8.0-149.149 USN-9022-1
Ubuntu 24.04 LTS linux-aws 6.8.0-1069.74 USN-9022-1
Ubuntu 24.04 LTS linux-aws-7.0 +1 7.0.0-1014.14~24.04.1 USN-8887-3, USN-8887-2
Ubuntu 24.04 LTS linux-azure 6.8.0-1073.82 USN-9022-1
Ubuntu 24.04 LTS linux-azure-7.0 7.0.0-1017.17~24.04.1 USN-8888-2
Ubuntu 24.04 LTS linux-azure-fde 6.8.0-1071.78 USN-9039-1
Ubuntu 24.04 LTS linux-azure-fde-7.0 7.0.0-1016.16~24.04.1 USN-8888-2
Ubuntu 24.04 LTS linux-gcp 6.8.0-1073.81 USN-9022-1
Ubuntu 24.04 LTS linux-gke 6.8.0-1068.77 USN-9022-1
Ubuntu 24.04 LTS linux-gkeop 6.8.0-1053.57 USN-9023-1
Ubuntu 24.04 LTS linux-hwe-7.0 7.0.0-38.38~24.04.4 USN-8887-3
Ubuntu 24.04 LTS linux-ibm 6.8.0-1069.70 USN-9022-1
Ubuntu 24.04 LTS linux-lowlatency 6.8.0-149.149.1 USN-9022-1
Ubuntu 24.04 LTS linux-nvidia 6.8.0-1067.70 USN-9024-1
Ubuntu 24.04 LTS linux-nvidia-7.0 7.0.0-1024.25~24.04.1 USN-9003-1
Ubuntu 24.04 LTS linux-nvidia-lowlatency 6.8.0-1067.70.1 USN-9040-1
Ubuntu 24.04 LTS linux-nvidia-tegra 6.8.0-1035.38 USN-8781-1
Ubuntu 24.04 LTS linux-oracle 6.8.0-1067.71 USN-9022-1
Ubuntu 24.04 LTS linux-oracle-7.0 7.0.0-1013.13~24.04.1 USN-8887-3
Ubuntu 24.04 LTS linux-raspi 6.8.0-1068.72 USN-9025-1
Ubuntu 24.04 LTS linux-riscv +29 No fix yet —
Ubuntu 24.04 LTS linux-riscv-7.0 7.0.0-38.38.1~24.04.1 —
Ubuntu 24.04 LTS linux-vmware 6.8.0-1010.10 USN-9022-1
Ubuntu 22.04 LTS linux 5.15.0-202.212 USN-8961-1
Ubuntu 22.04 LTS linux-aws 5.15.0-1119.126 USN-8961-1
Ubuntu 22.04 LTS linux-aws-6.8 6.8.0-1069.74~22.04.1 USN-9024-1
Ubuntu 22.04 LTS linux-azure 5.15.0-1125.134 USN-8961-1
Ubuntu 22.04 LTS linux-azure-6.8 6.8.0-1073.82~22.04.1 USN-9026-1
Ubuntu 22.04 LTS linux-azure-fde 5.15.0-1124.133 —
Ubuntu 22.04 LTS linux-azure-fde-6.8 6.8.0-1071.78~22.04.1 USN-9026-1
Ubuntu 22.04 LTS linux-gcp 5.15.0-1120.130 USN-8961-1
Ubuntu 22.04 LTS linux-gcp-6.8 6.8.0-1073.81~22.04.1 USN-9024-1
Ubuntu 22.04 LTS linux-gke 5.15.0-1115.121 USN-8961-1
Ubuntu 22.04 LTS linux-gkeop 5.15.0-1102.110 USN-8961-1
Ubuntu 22.04 LTS linux-hwe-6.8 6.8.0-149.149~22.04.1 USN-9066-1
Ubuntu 22.04 LTS linux-ibm 5.15.0-1113.117 USN-8961-1
Ubuntu 22.04 LTS linux-ibm-6.8 6.8.0-1069.70~22.04.1 USN-9024-1
Ubuntu 22.04 LTS linux-intel-iotg 5.15.0-1114.120 USN-8961-1
Ubuntu 22.04 LTS linux-kvm 5.15.0-1111.116 USN-8961-1
Ubuntu 22.04 LTS linux-lowlatency 5.15.0-197.207 USN-8961-1
Ubuntu 22.04 LTS linux-lowlatency-hwe-6.8 6.8.0-149.149.1~22.04.1 USN-9024-1
Ubuntu 22.04 LTS linux-nvidia 5.15.0-1114.115 USN-8961-1
Ubuntu 22.04 LTS linux-nvidia-tegra 5.15.0-1070.72 USN-8963-1
Ubuntu 22.04 LTS linux-nvidia-tegra-igx 5.15.0-1059.59 USN-8963-1
Ubuntu 22.04 LTS linux-oracle 5.15.0-1116.122 USN-8961-1
Ubuntu 22.04 LTS linux-oracle-6.8 6.8.0-1067.71~22.04.1 USN-9025-1
Ubuntu 22.04 LTS linux-raspi 5.15.0-1113.116 USN-9029-1
Ubuntu 22.04 LTS linux-riscv +34 No fix yet —
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS linux-gke +28 No fix yet —
Ubuntu 18.04 LTS linux-gcp +14 No fix yet —
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu Pro Realtime 24.04 LTS linux-raspi-realtime 6.8.0-2056.58 USN-9025-1
Ubuntu Pro Realtime 24.04 LTS linux-realtime 6.8.1-1064.65 USN-9023-1
Ubuntu Pro Realtime 24.04 LTS linux-realtime-6.14 +1 No fix yet —
Ubuntu Pro Realtime 22.04 LTS linux-intel-iot-realtime 5.15.0-1111.115 USN-8961-1
Ubuntu Pro Realtime 22.04 LTS linux-realtime 5.15.0-1118.127 USN-8961-1
Ubuntu Pro Realtime 22.04 LTS linux-realtime-6.8 6.8.1-1064.65~22.04.1 USN-9024-1
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 24.04 LTS linux-aws-fips 6.8.0-1069.74+fips1 USN-9023-1
Ubuntu Pro FIPS-updates 24.04 LTS linux-azure-fips 6.8.0-1073.82+fips1 USN-9022-1
Ubuntu Pro FIPS-updates 24.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 24.04 LTS linux-gcp-fips 6.8.0-1073.81+fips1 USN-9023-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-aws-fips 5.15.0-1119.126+fips1 USN-8961-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-azure-fips 5.15.0-1125.134+fips1 USN-8961-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-fips 5.15.0-202.212+fips1 USN-8961-1
Ubuntu Pro FIPS-updates 22.04 LTS linux-gcp-fips 5.15.0-1120.130+fips1 USN-8961-1
Ubuntu Pro FIPS-updates 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-preview 22.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro 20.04 LTS linux +10 No fix yet —
Ubuntu Pro 20.04 LTS linux-aws-5.15 5.15.0-1119.126~20.04.1 USN-8961-1
Ubuntu Pro 20.04 LTS linux-azure-5.15 5.15.0-1125.134~20.04.1 USN-8961-1
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 5.15.0-1124.133~20.04.1 USN-8961-1
Ubuntu Pro 20.04 LTS linux-gcp-5.15 5.15.0-1120.130~20.04.1 USN-8961-1
Ubuntu Pro 20.04 LTS linux-hwe-5.15 5.15.0-202.212~20.04.1 USN-8961-1
Ubuntu Pro 20.04 LTS linux-ibm-5.15 5.15.0-1113.117~20.04.1 USN-8961-1
Ubuntu Pro 20.04 LTS linux-intel-iotg-5.15 5.15.0-1114.120~20.04.1 USN-8961-1
Ubuntu Pro 20.04 LTS linux-lowlatency-hwe-5.15 5.15.0-197.207~20.04.1 USN-8961-1
Ubuntu Pro 20.04 LTS linux-nvidia-tegra-5.15 5.15.0-1070.72~20.04.1 USN-8963-1
Ubuntu Pro 20.04 LTS linux-oracle-5.15 5.15.0-1116.122~20.04.1 USN-8961-1
Ubuntu Pro 20.04 LTS linux-riscv-5.15 5.15.0-1113.117~20.04.2 —
Ubuntu Pro 18.04 LTS linux-aws-5.4 +6 No fix yet —

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 kernel-rt +9 4.18.0-553.178.1.rt7.519.el8_10 ALSA-2026:89082
AlmaLinux 8 perf +24 4.18.0-553.178.1.el8_10 ALSA-2026:89083

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 kernel 4.18.0-553.178.1.el8_10 RLSA-2026:89083
Rocky Linux 8 kernel-rt 4.18.0-553.178.1.rt7.519.el8_10 RLSA-2026:89082
ReleasePackageFixed inAdvisory
SLES 15 SP7 kernel-64kb +7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1
SLES 15 SP7 kernel-default-base 6.4.0-150700.53.81.1.150700.17.45.1 SUSE-SU-2026:4254-1
SLES 15 SP6 kernel-64kb +6 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1
SLES 15 SP6 kernel-default-base 6.4.0-150600.23.135.1.150600.12.62.4 SUSE-SU-2026:4369-1
SLES 15 SP5 kernel-64kb +6 5.14.21-150500.55.189.1 SUSE-SU-2026:4595-1
SLES 15 SP5 kernel-default-base 5.14.21-150500.55.189.1.150500.6.87.4 SUSE-SU-2026:4595-1
SLES 15 SP4 kernel-64kb +2 5.14.21-150400.24.240.2 SUSE-SU-2026:4284-1
SLES 15 SP4 kernel-default-base 5.14.21-150400.24.240.2.150400.24.120.2 SUSE-SU-2026:4284-1
SLES 15 SP4 kernel-docs +3 5.14.21-150400.24.240.1 SUSE-SU-2026:4284-1
Show 18 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 kernel-64kb +8 6.12.0-160000.38.1 SUSE-SU-2026:23902-1
SLES for SAP 16.0 kernel-default-base 6.12.0-160000.38.1.160000.2.23 SUSE-SU-2026:23902-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_0 18-160000.4.3 SUSE-SU-2026:23936-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_1 16-160000.1.1 SUSE-SU-2026:23938-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_14 5-160000.1.1 SUSE-SU-2026:23790-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_15 3-160000.1.1 SUSE-SU-2026:23951-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_16 2-160000.1.1 SUSE-SU-2026:23789-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_2 14-160000.1.1 SUSE-SU-2026:23939-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_3 13-160000.1.1 SUSE-SU-2026:23941-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_4 12-160000.1.1 SUSE-SU-2026:23942-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_5 11-160000.1.1 SUSE-SU-2026:23944-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_8 8-160000.1.1 SUSE-SU-2026:23791-1
SLES for SAP 16.0 kernel-livepatch-SLE16_Update_9 +1 7-160000.1.1 SUSE-SU-2026:23940-1, SUSE-SU-2026:23937-1
SLES for SAP 15 SP6 kernel-default-base 6.4.0-150600.23.135.1.150600.12.62.4 SUSE-SU-2026:4369-1
SLES for SAP 15 SP6 kernel-docs +4 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1
SLES for SAP 15 SP5 kernel-default-base 5.14.21-150500.55.189.1.150500.6.87.4 SUSE-SU-2026:4595-1
SLES for SAP 15 SP5 kernel-docs +4 5.14.21-150500.55.189.1 SUSE-SU-2026:4595-1
SLES for SAP 15 SP4 kernel-default 5.14.21-150400.24.240.2 SUSE-SU-2026:4284-1
SLES for SAP 15 SP4 kernel-default-base 5.14.21-150400.24.240.2.150400.24.120.2 SUSE-SU-2026:4284-1
SLES for SAP 15 SP4 kernel-docs +3 5.14.21-150400.24.240.1 SUSE-SU-2026:4284-1
SLES 16.0 kernel-64kb +8 6.12.0-160000.38.1 SUSE-SU-2026:23902-1, SUSE-SU-2026:23897-1
SLES 16.0 kernel-default-base 6.12.0-160000.38.1.160000.2.23 SUSE-SU-2026:23902-1
SLES 16.0 kernel-livepatch-SLE16_Update_0 18-160000.4.3 SUSE-SU-2026:23936-1
SLES 16.0 kernel-livepatch-SLE16_Update_1 16-160000.1.1 SUSE-SU-2026:23938-1
SLES 16.0 kernel-livepatch-SLE16_Update_14 5-160000.1.1 SUSE-SU-2026:23790-1
SLES 16.0 kernel-livepatch-SLE16_Update_15 3-160000.1.1 SUSE-SU-2026:23951-1
SLES 16.0 kernel-livepatch-SLE16_Update_16 2-160000.1.1 SUSE-SU-2026:23789-1
SLES 16.0 kernel-livepatch-SLE16_Update_2 14-160000.1.1 SUSE-SU-2026:23939-1
SLES 16.0 kernel-livepatch-SLE16_Update_3 13-160000.1.1 SUSE-SU-2026:23941-1
SLES 16.0 kernel-livepatch-SLE16_Update_4 12-160000.1.1 SUSE-SU-2026:23942-1
SLES 16.0 kernel-livepatch-SLE16_Update_5 11-160000.1.1 SUSE-SU-2026:23944-1
SLES 16.0 kernel-livepatch-SLE16_Update_8 8-160000.1.1 SUSE-SU-2026:23791-1
SLES 16.0 kernel-livepatch-SLE16_Update_9 +1 7-160000.1.1 SUSE-SU-2026:23940-1, SUSE-SU-2026:23937-1
SLE Micro 6.2 kernel-default-base 6.12.0-160000.38.1.160000.2.23 SUSE-SU-2026:23887-1
SLE Micro 6.2 kernel-livepatch-SLE16-RT_Update_0 16-160000.3.4 SUSE-SU-2026:23676-1
SLE Micro 6.2 kernel-livepatch-SLE16-RT_Update_1 15-160000.1.1 SUSE-SU-2026:23677-1
SLE Micro 6.2 kernel-livepatch-SLE16-RT_Update_7 9-160000.1.1 SUSE-SU-2026:23682-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_0 18-160000.4.3 SUSE-SU-2026:23960-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_1 16-160000.1.1 SUSE-SU-2026:23961-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_14 +3 5-160000.1.1 SUSE-SU-2026:23798-1, SUSE-SU-2026:23674-1, SUSE-SU-2026:23673-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_15 3-160000.1.1 SUSE-SU-2026:23968-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_16 +1 2-160000.1.1 SUSE-SU-2026:23797-1, SUSE-SU-2026:23675-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_2 14-160000.1.1 SUSE-SU-2026:23963-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_3 +1 13-160000.1.1 SUSE-SU-2026:23965-1, SUSE-SU-2026:23678-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_4 +2 12-160000.1.1 SUSE-SU-2026:23966-1, SUSE-SU-2026:23687-1, SUSE-SU-2026:23679-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_5 +1 11-160000.1.1 SUSE-SU-2026:23967-1, SUSE-SU-2026:23680-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_6 +1 10-160000.1.1 SUSE-SU-2026:23801-1, SUSE-SU-2026:23681-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_8 +1 8-160000.1.1 SUSE-SU-2026:23799-1, SUSE-SU-2026:23683-1
SLE Micro 6.2 kernel-livepatch-SLE16_Update_9 +4 7-160000.1.1 SUSE-SU-2026:23964-1, SUSE-SU-2026:23962-1, SUSE-SU-2026:23686-1
SLE Micro 6.2 kernel-rt +5 6.12.0-160000.38.1 SUSE-SU-2026:23887-1, SUSE-SU-2026:23881-1
SLE Micro 6.1 kernel-default-base 6.4.0-52.1.21.34 SUSE-SU-2026:23529-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_13 +1 12-1.1 SUSE-SU-2026:23781-1, SUSE-SU-2026:23780-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_22 6-1.2 SUSE-SU-2026:23771-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_10 +1 17-1.1 SUSE-SU-2026:23778-1, SUSE-SU-2026:23747-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_11 +2 16-1.1 SUSE-SU-2026:23779-1, SUSE-SU-2026:23749-1, SUSE-SU-2026:23748-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_13 14-1.1 SUSE-SU-2026:23750-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_14 12-1.2 SUSE-SU-2026:23751-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_16 +1 11-1.1 SUSE-SU-2026:23766-1, SUSE-SU-2026:23752-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_17 +1 10-1.1 SUSE-SU-2026:23767-1, SUSE-SU-2026:23753-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_18 +1 9-1.1 SUSE-SU-2026:23768-1, SUSE-SU-2026:23754-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_19 +1 7-1.1 SUSE-SU-2026:23769-1, SUSE-SU-2026:23755-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_20 +5 6-1.1 SUSE-SU-2026:23772-1, SUSE-SU-2026:23770-1, SUSE-SU-2026:23760-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_24 +1 5-1.1 SUSE-SU-2026:23773-1, SUSE-SU-2026:23759-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_25 +1 4-1.1 SUSE-SU-2026:23774-1, SUSE-SU-2026:23761-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_26 +3 3-1.1 SUSE-SU-2026:23776-1, SUSE-SU-2026:23775-1, SUSE-SU-2026:23763-1
SLE Micro 6.1 kernel-livepatch-MICRO-6-0_Update_28 +1 2-1.1 SUSE-SU-2026:23777-1, SUSE-SU-2026:23764-1
SLE Micro 6.1 kernel-rt +4 6.4.0-52.1 SUSE-SU-2026:23529-1, SUSE-SU-2026:23528-1
SLE Micro 6.0 kernel-default-base 6.4.0-52.1.21.36 SUSE-SU-2026:23481-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_13 +1 12-1.1 SUSE-SU-2026:23835-1, SUSE-SU-2026:23834-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_22 6-1.2 SUSE-SU-2026:23808-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_10 +1 17-1.1 SUSE-SU-2026:23832-1, SUSE-SU-2026:23815-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_11 +2 16-1.1 SUSE-SU-2026:23833-1, SUSE-SU-2026:23817-1, SUSE-SU-2026:23816-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_13 14-1.1 SUSE-SU-2026:23818-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_14 12-1.2 SUSE-SU-2026:23819-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_16 +1 11-1.1 SUSE-SU-2026:23820-1, SUSE-SU-2026:23803-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_17 +1 10-1.1 SUSE-SU-2026:23821-1, SUSE-SU-2026:23804-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_18 +1 9-1.1 SUSE-SU-2026:23822-1, SUSE-SU-2026:23805-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_19 +1 7-1.1 SUSE-SU-2026:23823-1, SUSE-SU-2026:23806-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_20 +5 6-1.1 SUSE-SU-2026:23827-1, SUSE-SU-2026:23826-1, SUSE-SU-2026:23825-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_24 +1 5-1.1 SUSE-SU-2026:23828-1, SUSE-SU-2026:23810-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_25 +1 4-1.1 SUSE-SU-2026:23836-1, SUSE-SU-2026:23811-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_26 +3 3-1.1 SUSE-SU-2026:23838-1, SUSE-SU-2026:23837-1, SUSE-SU-2026:23813-1
SLE Micro 6.0 kernel-livepatch-MICRO-6-0_Update_28 +1 2-1.1 SUSE-SU-2026:23839-1, SUSE-SU-2026:23814-1
SLE Micro 6.0 kernel-rt +4 6.4.0-52.1 SUSE-SU-2026:23481-1, SUSE-SU-2026:23477-1
SLE Micro 5.5 kernel-default-base 5.14.21-150500.55.189.1.150500.6.87.4 SUSE-SU-2026:4595-1
SLE Micro 5.5 kernel-rt +1 5.14.21-150500.13.161.1 SUSE-SU-2026:4347-1
SLE Micro 5.5 kernel-source +1 5.14.21-150500.55.189.1 SUSE-SU-2026:4595-1
SLE Micro 5.4 kernel-default 5.14.21-150400.24.240.2 SUSE-SU-2026:4284-1
SLE Micro 5.4 kernel-default-base 5.14.21-150400.24.240.2.150400.24.120.2 SUSE-SU-2026:4284-1
SLE Micro 5.4 kernel-rt +1 5.14.21-150400.15.186.1 SUSE-SU-2026:4279-1
SLE Micro 5.4 kernel-source 5.14.21-150400.24.240.1 SUSE-SU-2026:4284-1
SLE Micro 5.3 kernel-default 5.14.21-150400.24.240.2 SUSE-SU-2026:4284-1
SLE Micro 5.3 kernel-default-base 5.14.21-150400.24.240.2.150400.24.120.2 SUSE-SU-2026:4284-1
SLE Micro 5.3 kernel-rt +1 5.14.21-150400.15.186.1 SUSE-SU-2026:4279-1
SLE Micro 5.3 kernel-source 5.14.21-150400.24.240.1 SUSE-SU-2026:4284-1
SLE Live Patching 15 SP7 kernel-default 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_20 1-150700.1.3.1 SUSE-SU-2026:4120-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_13 7-150700.2.1 SUSE-SU-2026:4258-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_14 6-150700.2.1 SUSE-SU-2026:4356-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_17 +2 4-150700.2.1 SUSE-SU-2026:4359-1, SUSE-SU-2026:4357-1, SUSE-SU-2026:4170-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_19 3-150700.2.1 SUSE-SU-2026:4383-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_20 +2 2-150700.2.1 SUSE-SU-2026:4183-1, SUSE-SU-2026:4172-1, SUSE-SU-2026:4168-1
SLE Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_21 1-150700.15.3.1 SUSE-SU-2026:4254-1
SLE Live Patching 15 SP6 kernel-default 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_16 14-150600.2.1 SUSE-SU-2026:4231-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_30 2-150600.2.1 SUSE-SU-2026:4183-1
SLE Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_31 1-150600.13.3.4 SUSE-SU-2026:4369-1
SLE Live Patching 15 SP5 kernel-default 5.14.21-150500.55.189.1 SUSE-SU-2026:4595-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_30 18-150500.2.1 SUSE-SU-2026:4256-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_39 7-150500.2.1 SUSE-SU-2026:4244-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_41 5-150500.2.1 SUSE-SU-2026:4315-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_44 2-150500.2.1 SUSE-SU-2026:4185-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_45 1-150500.11.5.3 SUSE-SU-2026:4595-1
SLE Live Patching 15 SP4 kernel-default 5.14.21-150400.24.240.2 SUSE-SU-2026:4284-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_55 +1 5-150400.2.1 SUSE-SU-2026:4259-1, SUSE-SU-2026:4256-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_57 3-150400.2.1 SUSE-SU-2026:4255-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_58 2-150400.2.1 SUSE-SU-2026:4193-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_59 1-150400.9.5.1 SUSE-SU-2026:4284-1
SLE HPC 15 SP5 kernel-64kb +5 5.14.21-150500.55.189.1 SUSE-SU-2026:4595-1
SLE HPC 15 SP5 kernel-default-base 5.14.21-150500.55.189.1.150500.6.87.4 SUSE-SU-2026:4595-1
SLE HPC 15 SP4 kernel-64kb +1 5.14.21-150400.24.240.2 SUSE-SU-2026:4284-1
SLE HPC 15 SP4 kernel-default-base 5.14.21-150400.24.240.2.150400.24.120.2 SUSE-SU-2026:4284-1
SLE HPC 15 SP4 kernel-docs +3 5.14.21-150400.24.240.1 SUSE-SU-2026:4284-1
SUSE Real Time Module 15 SP7 kernel-rt +2 6.4.0-150700.7.75.1 SUSE-SU-2026:4120-1
ReleasePackageFixed inAdvisory
openSUSE Leap 16.0 kernel-default-base 6.12.0-160000.38.1.160000.2.22 openSUSE-SU-2026:21910-1
openSUSE Leap 16.0 kernel-rt +11 6.12.0-160000.38.1 openSUSE-SU-2026:21910-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 kernel-livepatch-6.18.44-99.149 +2 1:1.0-0.amzn2023 ALAS2023-2026-2110, ALAS2023-2026-2107, ALAS2023-2026-2106
Amazon Linux 2023 perf +11 1:6.1.182-227.379.amzn2023 ALAS2023-2026-2107
Amazon Linux 2023 perf6.12 +11 1:6.12.103-127.188.amzn2023 ALAS2023-2026-2110
Amazon Linux 2023 perf6.18 +12 1:6.18.44-99.149.amzn2023 ALAS2023-2026-2106

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 kernel 6.6.157.1-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 kernel-uek +34 6.12.0-206.104.3.3.el10uek ELSA-2026-500374, ELSA-2026-500248
Oracle Linux 8 kernel-uek +17 5.15.0-324.217.5.2.el9uek ELSA-2026-500377, ELSA-2026-500249
Oracle Linux 8 perf +19 4.18.0-553.178.1.el8_10 ELSA-2026-500377, ELSA-2026-500249, ELSA-2026-89083

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 3 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 50

References