Description
In the Linux kernel, the following vulnerability has been resolved:
xfrm: fix stale skb->prev after async crypto steals a GSO segment
skb_gso_segment() leaves the segment list head with ->prev pointing at
the last segment, an invariant validate_xmit_skb_list() relies on when
it sets its tail pointer (tail = skb->prev).
When validate_xmit_xfrm() walks a GSO list and some segments are stolen
by async crypto (->xmit() returns -EINPROGRESS), those segments are
unlinked from the list but the head ->prev is never updated. If the
last segment is the one stolen, the returned head still has ->prev
pointing at it, even though it is now owned by the crypto engine and may
be freed. validate_xmit_skb_list() later does tail->next = skb, writing
through that stale pointer -- a use-after-free.
Repoint skb->prev at the last retained segment before returning.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 4.16 | 6.1.191 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 7.1.6-1 | — |
| Debian 13 | linux | 6.12.115-2 | — |
| Debian 12 | linux | No fix yet | — |
| Debian 12 | linux-6.12 | 6.12.115-2~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | No fix yet | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | No fix yet | — |
| Ubuntu 26.04 LTS | linux | 7.0.0-38.38 | USN-8887-1 |
| Ubuntu 26.04 LTS | linux-aws +1 | 7.0.0-1014.14 | USN-8887-1 |
| Ubuntu 26.04 LTS | linux-azure | 7.0.0-1017.17 | USN-8888-1 |
| Ubuntu 26.04 LTS | linux-azure-fde | 7.0.0-1016.16 | USN-8888-1 |
| Ubuntu 26.04 LTS | linux-gke | 7.0.0-1008.9 | USN-8887-1 |
| Ubuntu 26.04 LTS | linux-ibm +1 | 7.0.0-1015.15 | USN-8889-1, USN-8887-1 |
| Ubuntu 26.04 LTS | linux-nvidia | 7.0.0-1025.26 | USN-9043-1 |
| Ubuntu 26.04 LTS | linux-nvidia-bos | 7.0.0-2022.23 | USN-9003-1 |
| Ubuntu 26.04 LTS | linux-oracle | 7.0.0-1013.13 | USN-8887-1 |
| Ubuntu 26.04 LTS | linux-raspi | 7.0.0-1023.23 | USN-9021-1 |
| Ubuntu 26.04 LTS | linux-riscv +1 | 7.0.0-38.38.1 | USN-8887-1 |
| Ubuntu 24.04 LTS | linux +43 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-aws-7.0 +1 | 7.0.0-1014.14~24.04.1 | USN-8887-3, USN-8887-2 |
| Ubuntu 24.04 LTS | linux-azure-7.0 | 7.0.0-1017.17~24.04.1 | USN-8888-2 |
| Ubuntu 24.04 LTS | linux-azure-fde-7.0 | 7.0.0-1016.16~24.04.1 | USN-8888-2 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-38.38~24.04.4 | USN-8887-3 |
| Ubuntu 24.04 LTS | linux-nvidia-7.0 | 7.0.0-1024.25~24.04.1 | USN-9003-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1035.38 | USN-8781-1 |
| Ubuntu 24.04 LTS | linux-oracle-7.0 | 7.0.0-1013.13~24.04.1 | USN-8887-3 |
| Ubuntu 24.04 LTS | linux-riscv-7.0 | 7.0.0-38.38.1~24.04.1 | — |
| Ubuntu 22.04 LTS | linux +59 | No fix yet | — |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime +3 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime +2 | No fix yet | — |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux +21 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 +6 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +76 | 6.12.0-211.55.1.el10_2 | RHSA-2026:67471 |
| RHEL 9 | rv +75 | 5.14.0-687.49.1.el9_8 | RHSA-2026:68570 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.164.1.rt7.505.el8_10 | RHSA-2026:68532 |
| RHEL 8 | perf +26 | 4.18.0-553.164.1.el8_10 | RHSA-2026:68531 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | rv +77 | 6.12.0-55.108.1.el10_0 | RHSA-2026:75560 |
| RHEL 9.6 EUS | rv +77 | 5.14.0-570.146.1.el9_6 | RHSA-2026:74174 |
| RHEL 9.4 E4S | bpftool | 7.3.0-427.154.1.el9_4 | RHSA-2026:77218 |
| RHEL 9.4 E4S | rv +62 | 5.14.0-427.154.1.el9_4 | RHSA-2026:77218 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.197.1.el9_2 | RHSA-2026:80908 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.197.1.rt14.482.el9_2 | RHSA-2026:82860 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.197.1.el9_2 | RHSA-2026:80908 |
| RHEL 8.8 TUS | perf +17 | 4.18.0-477.172.1.el8_8 | RHSA-2026:77301 |
| RHEL 8.8 E4S | perf +18 | 4.18.0-477.172.1.el8_8 | RHSA-2026:77301 |
| RHEL 8.6 EUS Long Life | perf +25 | 4.18.0-372.220.1.el8_6 | RHSA-2026:77216 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.220.1.el8_6 | RHSA-2026:77216 |
| RHEL 8.4 EUS Long Life | perf +25 | 4.18.0-305.211.1.el8_4 | RHSA-2026:77217 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.211.1.el8_4 | RHSA-2026:77217 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | rv +74 | 6.12.0-211.55.1.el10_2 | ALSA-2026:67471 |
| AlmaLinux 9 | rv +73 | 5.14.0-687.49.1.el9_8 | ALSA-2026:68570 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.164.1.rt7.505.el8_10 | ALSA-2026:68532 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.164.1.el8_10 | ALSA-2026:68531 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | kernel | 6.12.0-211.55.1.el10_2 | RLSA-2026:67471 |
| Rocky Linux 9 | kernel | 5.14.0-687.49.1.el9_8 | RLSA-2026:68570 |
| Rocky Linux 8 | kernel | 4.18.0-553.164.1.el8_10 | RLSA-2026:68531 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.164.1.rt7.505.el8_10 | RLSA-2026:68532 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +7 | 6.4.0-150700.53.81.1 | SUSE-SU-2026:4254-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.81.1.150700.17.45.1 | SUSE-SU-2026:4254-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.135.1 | SUSE-SU-2026:4369-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.135.1.150600.12.62.4 | SUSE-SU-2026:4369-1 |
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.189.1 | SUSE-SU-2026:4595-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.189.1.150500.6.87.4 | SUSE-SU-2026:4595-1 |
| SLES 15 SP4 | kernel-64kb +2 | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.240.2.150400.24.120.2 | SUSE-SU-2026:4284-1 |
| SLES 15 SP4 | kernel-docs +3 | 5.14.21-150400.24.240.1 | SUSE-SU-2026:4284-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.328.1 | SUSE-SU-2026:4282-1 |
Show 19 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +8 | 6.12.0-160000.38.1 | SUSE-SU-2026:23902-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.38.1.160000.2.23 | SUSE-SU-2026:23902-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_0 | 21-160000.4.3 | SUSE-SU-2026:24672-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_1 | 19-160000.1.1 | SUSE-SU-2026:24678-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_12 +1 | 8-160000.1.1 | SUSE-SU-2026:24679-1, SUSE-SU-2026:24664-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_13 | 8-160000.1.2 | SUSE-SU-2026:24668-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_15 | 6-160000.1.1 | SUSE-SU-2026:24681-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_16 | 5-160000.1.1 | SUSE-SU-2026:24666-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_2 | 17-160000.1.1 | SUSE-SU-2026:24671-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_3 | 16-160000.1.1 | SUSE-SU-2026:24677-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_4 | 15-160000.1.1 | SUSE-SU-2026:24670-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_5 | 14-160000.1.1 | SUSE-SU-2026:24676-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_6 | 13-160000.1.1 | SUSE-SU-2026:24667-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_7 | 12-160000.1.1 | SUSE-SU-2026:24680-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_8 | 11-160000.1.1 | SUSE-SU-2026:24675-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_9 +2 | 10-160000.1.1 | SUSE-SU-2026:24674-1, SUSE-SU-2026:24669-1, SUSE-SU-2026:24663-1 |
| SLES for SAP 15 SP6 | kernel-default-base | 6.4.0-150600.23.135.1.150600.12.62.4 | SUSE-SU-2026:4369-1 |
| SLES for SAP 15 SP6 | kernel-docs +4 | 6.4.0-150600.23.135.1 | SUSE-SU-2026:4369-1 |
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.189.1.150500.6.87.4 | SUSE-SU-2026:4595-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.189.1 | SUSE-SU-2026:4595-1 |
| SLES for SAP 15 SP4 | kernel-default | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.240.2.150400.24.120.2 | SUSE-SU-2026:4284-1 |
| SLES for SAP 15 SP4 | kernel-docs +3 | 5.14.21-150400.24.240.1 | SUSE-SU-2026:4284-1 |
| SLES 16.0 | kernel-64kb +8 | 6.12.0-160000.38.1 | SUSE-SU-2026:23902-1, SUSE-SU-2026:23897-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.38.1.160000.2.23 | SUSE-SU-2026:23902-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_0 | 21-160000.4.3 | SUSE-SU-2026:24672-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_1 | 19-160000.1.1 | SUSE-SU-2026:24678-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_12 +1 | 8-160000.1.1 | SUSE-SU-2026:24679-1, SUSE-SU-2026:24664-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_13 | 8-160000.1.2 | SUSE-SU-2026:24668-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_15 | 6-160000.1.1 | SUSE-SU-2026:24681-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_16 | 5-160000.1.1 | SUSE-SU-2026:24666-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_2 | 17-160000.1.1 | SUSE-SU-2026:24671-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_3 | 16-160000.1.1 | SUSE-SU-2026:24677-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_4 | 15-160000.1.1 | SUSE-SU-2026:24670-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_5 | 14-160000.1.1 | SUSE-SU-2026:24676-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_6 | 13-160000.1.1 | SUSE-SU-2026:24667-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_7 | 12-160000.1.1 | SUSE-SU-2026:24680-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_8 | 11-160000.1.1 | SUSE-SU-2026:24675-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_9 +2 | 10-160000.1.1 | SUSE-SU-2026:24674-1, SUSE-SU-2026:24669-1, SUSE-SU-2026:24663-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.38.1.160000.2.23 | SUSE-SU-2026:23887-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_0 | 19-160000.3.4 | SUSE-SU-2026:24538-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_1 | 18-160000.1.1 | SUSE-SU-2026:24537-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_0 | 21-160000.4.3 | SUSE-SU-2026:24630-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_1 | 19-160000.1.1 | SUSE-SU-2026:24636-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_12 +4 | 8-160000.1.1 | SUSE-SU-2026:24637-1, SUSE-SU-2026:24621-1, SUSE-SU-2026:24526-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_13 | 8-160000.1.2 | SUSE-SU-2026:24626-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_15 +1 | 6-160000.1.1 | SUSE-SU-2026:24639-1, SUSE-SU-2026:24523-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_16 +1 | 5-160000.1.1 | SUSE-SU-2026:24623-1, SUSE-SU-2026:24522-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_2 | 17-160000.1.1 | SUSE-SU-2026:24629-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_3 +1 | 16-160000.1.1 | SUSE-SU-2026:24635-1, SUSE-SU-2026:24536-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_4 +2 | 15-160000.1.1 | SUSE-SU-2026:24628-1, SUSE-SU-2026:24535-1, SUSE-SU-2026:24533-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_5 +1 | 14-160000.1.1 | SUSE-SU-2026:24634-1, SUSE-SU-2026:24534-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_6 +1 | 13-160000.1.1 | SUSE-SU-2026:24624-1, SUSE-SU-2026:24532-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_7 +1 | 12-160000.1.1 | SUSE-SU-2026:24638-1, SUSE-SU-2026:24531-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_8 +1 | 11-160000.1.1 | SUSE-SU-2026:24633-1, SUSE-SU-2026:24530-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_9 +5 | 10-160000.1.1 | SUSE-SU-2026:24632-1, SUSE-SU-2026:24627-1, SUSE-SU-2026:24620-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.38.1 | SUSE-SU-2026:23887-1, SUSE-SU-2026:23881-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-52.1.21.34 | SUSE-SU-2026:23529-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_13 +1 | 15-1.1 | SUSE-SU-2026:24589-1, SUSE-SU-2026:24588-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_22 | 9-1.2 | SUSE-SU-2026:24590-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_12 | 19-1.1 | SUSE-SU-2026:24564-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_13 | 17-1.1 | SUSE-SU-2026:24576-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_14 | 15-1.2 | SUSE-SU-2026:24577-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_16 +1 | 14-1.1 | SUSE-SU-2026:24587-1, SUSE-SU-2026:24575-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_17 +1 | 13-1.1 | SUSE-SU-2026:24586-1, SUSE-SU-2026:24578-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_18 +1 | 12-1.1 | SUSE-SU-2026:24593-1, SUSE-SU-2026:24568-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_19 +1 | 10-1.1 | SUSE-SU-2026:24592-1, SUSE-SU-2026:24565-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_20 +5 | 9-1.1 | SUSE-SU-2026:24591-1, SUSE-SU-2026:24585-1, SUSE-SU-2026:24574-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_24 +1 | 8-1.1 | SUSE-SU-2026:24595-1, SUSE-SU-2026:24572-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_25 +1 | 7-1.1 | SUSE-SU-2026:24584-1, SUSE-SU-2026:24562-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_26 +3 | 6-1.1 | SUSE-SU-2026:24594-1, SUSE-SU-2026:24583-1, SUSE-SU-2026:24563-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_28 +1 | 5-1.1 | SUSE-SU-2026:24582-1, SUSE-SU-2026:24566-1 |
| SLE Micro 6.1 | kernel-rt +4 | 6.4.0-52.1 | SUSE-SU-2026:23529-1, SUSE-SU-2026:23528-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-52.1.21.36 | SUSE-SU-2026:23481-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_13 +1 | 15-1.1 | SUSE-SU-2026:24500-1, SUSE-SU-2026:24499-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_22 | 9-1.2 | SUSE-SU-2026:24503-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_12 | 19-1.1 | SUSE-SU-2026:24488-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_13 | 17-1.1 | SUSE-SU-2026:24509-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_14 | 15-1.2 | SUSE-SU-2026:24508-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_16 +1 | 14-1.1 | SUSE-SU-2026:24507-1, SUSE-SU-2026:24498-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_17 +1 | 13-1.1 | SUSE-SU-2026:24512-1, SUSE-SU-2026:24497-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_18 +1 | 12-1.1 | SUSE-SU-2026:24506-1, SUSE-SU-2026:24490-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_19 +1 | 10-1.1 | SUSE-SU-2026:24505-1, SUSE-SU-2026:24489-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_20 +5 | 9-1.1 | SUSE-SU-2026:24504-1, SUSE-SU-2026:24502-1, SUSE-SU-2026:24496-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_24 +1 | 8-1.1 | SUSE-SU-2026:24511-1, SUSE-SU-2026:24495-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_25 +1 | 7-1.1 | SUSE-SU-2026:24486-1, SUSE-SU-2026:24483-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_26 +3 | 6-1.1 | SUSE-SU-2026:24510-1, SUSE-SU-2026:24487-1, SUSE-SU-2026:24485-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_28 +1 | 5-1.1 | SUSE-SU-2026:24491-1, SUSE-SU-2026:24481-1 |
| SLE Micro 6.0 | kernel-rt +4 | 6.4.0-52.1 | SUSE-SU-2026:23481-1, SUSE-SU-2026:23477-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.189.1.150500.6.87.4 | SUSE-SU-2026:4595-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.161.1 | SUSE-SU-2026:4347-1 |
| SLE Micro 5.5 | kernel-source +1 | 5.14.21-150500.55.189.1 | SUSE-SU-2026:4595-1 |
| SLE Micro 5.4 | kernel-default | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.240.2.150400.24.120.2 | SUSE-SU-2026:4284-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.186.1 | SUSE-SU-2026:4279-1 |
| SLE Micro 5.4 | kernel-source | 5.14.21-150400.24.240.1 | SUSE-SU-2026:4284-1 |
| SLE Micro 5.3 | kernel-default | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.240.2.150400.24.120.2 | SUSE-SU-2026:4284-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.186.1 | SUSE-SU-2026:4279-1 |
| SLE Micro 5.3 | kernel-source | 5.14.21-150400.24.240.1 | SUSE-SU-2026:4284-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.81.1 | SUSE-SU-2026:4254-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_12 | 11-150700.2.1 | SUSE-SU-2026:4984-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_20 | 1-150700.1.3.1 | SUSE-SU-2026:4120-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_6 | 16-150700.2.1 | SUSE-SU-2026:4969-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_19 | 6-150700.2.1 | SUSE-SU-2026:5059-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_20 +1 | 5-150700.2.1 | SUSE-SU-2026:5058-1, SUSE-SU-2026:5020-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_21 | 1-150700.15.3.1 | SUSE-SU-2026:4254-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.135.1 | SUSE-SU-2026:4369-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_27 | 8-150600.2.1 | SUSE-SU-2026:5016-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_29 | 6-150600.2.1 | SUSE-SU-2026:5053-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_30 | 5-150600.2.1 | SUSE-SU-2026:5055-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_31 | 1-150600.13.3.4 | SUSE-SU-2026:4369-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.189.1 | SUSE-SU-2026:4595-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_31 | 19-150500.2.1 | SUSE-SU-2026:4977-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_32 +1 | 16-150500.2.1 | SUSE-SU-2026:5012-1, SUSE-SU-2026:4983-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_35 | 15-150500.2.1 | SUSE-SU-2026:4978-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_45 | 1-150500.11.5.3 | SUSE-SU-2026:4595-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_59 | 1-150400.9.5.1 | SUSE-SU-2026:4284-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.328.1 | SUSE-SU-2026:4282-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_73 | 18-2.1 | SUSE-SU-2026:4979-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_75 | 16-2.1 | SUSE-SU-2026:4972-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_82 +1 | 9-2.1 | SUSE-SU-2026:5052-1, SUSE-SU-2026:5019-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_84 | 7-2.1 | SUSE-SU-2026:5048-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_85 | 6-2.1 | SUSE-SU-2026:5034-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_86 | 5-2.1 | SUSE-SU-2026:5086-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_87 | 1-8.5.1 | SUSE-SU-2026:4282-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.189.1 | SUSE-SU-2026:4595-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.189.1.150500.6.87.4 | SUSE-SU-2026:4595-1 |
| SLE HPC 15 SP4 | kernel-64kb +1 | 5.14.21-150400.24.240.2 | SUSE-SU-2026:4284-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.240.2.150400.24.120.2 | SUSE-SU-2026:4284-1 |
| SLE HPC 15 SP4 | kernel-docs +3 | 5.14.21-150400.24.240.1 | SUSE-SU-2026:4284-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.75.1 | SUSE-SU-2026:4120-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.38.1.160000.2.22 | openSUSE-SU-2026:21910-1 |
| openSUSE Leap 16.0 | kernel-rt +11 | 6.12.0-160000.38.1 | openSUSE-SU-2026:21910-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.18.44-99.149 +1 | 1:1.0-0.amzn2023 | ALAS2023-2026-3402, ALAS2023-2026-2106 |
| Amazon Linux 2023 | perf6.12 +11 | 1:6.12.114-139.210.amzn2023 | ALAS2023-2026-3402 |
| Amazon Linux 2023 | perf6.18 +12 | 1:6.18.44-99.149.amzn2023 | ALAS2023-2026-2106 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.161.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | rv +28 | 5.14.0-687.49.1.el9_8 | ELSA-2026-68570 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.164.1.el8_10 | ELSA-2026-68531 |
Advisories 50
- USN-9021-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- WID-SEC-2026-2730 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-9043-1 linux-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8887-1 linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-oracle, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- SUSE-SU-2026:24681-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24679-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24680-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24678-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24676-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24669-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24677-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24667-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24675-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24674-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24671-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24672-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24670-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24668-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24666-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24664-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24663-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24639-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24636-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24633-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24635-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24634-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24632-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24630-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24638-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24629-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24637-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24627-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24626-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24624-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24621-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24623-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24620-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24628-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- USN-9003-1 linux-nvidia-7.0, linux-nvidia-bos vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8887-3 linux-gcp-7.0, linux-hwe-7.0, linux-oracle-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8888-2 linux-azure-7.0, linux-azure-fde-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8888-1 linux-azure, linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8887-2 linux-aws-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8889-1 linux-oem-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- ALAS2023-2026-3402 Important: kernel6.12 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 11, 2026
- USN-8781-1 linux-nvidia-tegra vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- SUSE-SU-2026:24562-1 Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Nov 7, 2026
- SUSE-SU-2026:24564-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Nov 7, 2026
- SUSE-SU-2026:24595-1 Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Nov 7, 2026
- SUSE-SU-2026:24594-1 Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) SUSE / openSUSE Security Updates · Nov 7, 2026
References
- https://git.kernel.org/stable/c/4e695742396be18d5291c310a3d7c450959d647a
- https://git.kernel.org/stable/c/4927ab8a8acc8db4fad33e803d1d35e0b16cef83
- https://git.kernel.org/stable/c/b58731e0570bfd3989999fc2baf9ee4fecd5bec6
- https://git.kernel.org/stable/c/33e1b0d25ca0d2818c635ff80e6aa0d295e08a98
- https://git.kernel.org/stable/c/bbca7cc3b2b4b10afbfee99b81d9ee78f5423046
- https://git.kernel.org/stable/c/3f4c3919baf0944ad96580467c302bc6c7758b00