crypto: algif_aead - Revert to operating out-of-place
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.
Summary
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Linux | Linux | 4.14 and later | 5.10.254, 5.15.204, 6.1.170, 6.6.137, 6.12.85, 6.18.22, 6.19.12, 7.0 | Patch available | CNA |
- Linux VendorLinux Affected 4.14 and later Fixed in 5.10.254, 5.15.204, 6.1.170, 6.6.137, 6.12.85, 6.18.22, 6.19.12, 7.0 Patch available CNA
CPE configurations NVD · 204
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.14 to before 5.10.254; 5.11 to before 5.15.204; 5.16 to before 6.1.170; 6.2 to before 6.6.137; 6.7 to before 6.12.85; 6.13 to before 6.18.22; 6.19 to before 6.19.12 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* | 7.0 rc1 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* | 7.0 rc2 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* | 7.0 rc3 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* | 7.0 rc4 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* | 7.0 rc5 | Vulnerable | Linux |
| cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* | 7.0 rc6 | Vulnerable | Linux |
| cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:* | 4.12 to before 4.12.89; 4.13 to before 4.13.66; 4.14 to before 4.14.65; 4.15 to before 4.15.64; 4.16 to before 4.16.61; 4.17 to before 4.17.53; 4.18 to before 4.18.40; 4.19 to before 4.19.30; 4.20 to before 4.20.21; 4.21 to before 4.21.14 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 4.14 to before 5.10.254; 5.11 to before 5.15.204; 5.16 to before 6.1.170; 6.2 to before 6.6.137; 6.7 to before 6.12.85; 6.13 to before 6.18.22; 6.19 to before 6.19.12 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* Versions 7.0 rc1 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* Versions 7.0 rc2 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* Versions 7.0 rc3 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* Versions 7.0 rc4 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* Versions 7.0 rc5 Vulnerable ·Linux
- cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* Versions 7.0 rc6 Vulnerable ·Linux
- cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:* Versions 4.12 to before 4.12.89; 4.13 to before 4.13.66; 4.14 to before 4.14.65; 4.15 to before 4.15.64; 4.16 to before 4.16.61; 4.17 to before 4.17.53; 4.18 to before 4.18.40; 4.19 to before 4.19.30; 4.20 to before 4.20.21; 4.21 to before 4.21.14 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
Show 194 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:* | 8.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* | 8.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* | 9.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* | 9.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_tus:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:* | 8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* | 8.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:amazon:amazon_linux:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AWS |
| cpe:2.3:o:canonical:ubuntu_linux:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Canonical |
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | 11.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* | 12.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:13.0:*:*:*:*:*:*:* | 13.0 | Vulnerable | Debian |
| cpe:2.3:o:opensuse:leap:15.3:*:*:*:*:*:*:* | 15.3 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:leap:15.4:*:*:*:*:*:*:* | 15.4 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:leap:15.5:*:*:*:*:*:*:* | 15.5 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:leap:15.6:*:*:*:*:*:*:* | 15.6 | Vulnerable | openSUSE |
| cpe:2.3:a:suse:caas_platform:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | SUSE |
| cpe:2.3:a:suse:enterprise_storage:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | SUSE |
| cpe:2.3:a:suse:enterprise_storage:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | SUSE |
| cpe:2.3:a:suse:enterprise_storage:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_proxy:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_proxy:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_proxy:4.2:*:*:*:*:*:*:* | 4.2 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_proxy:4.3:*:*:*:*:*:*:* | 4.3 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_retail_branch_server:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_retail_branch_server:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_retail_branch_server:4.2:*:*:*:*:*:*:* | 4.2 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_retail_branch_server:4.3:*:*:*:*:*:*:* | 4.3 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_server:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_server:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_server:4.2:*:*:*:*:*:*:* | 4.2 | Vulnerable | SUSE |
| cpe:2.3:a:suse:manager_server:4.3:*:*:*:*:*:*:* | 4.3 | Vulnerable | SUSE |
| cpe:2.3:a:suse:openstack_cloud:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | SUSE |
| cpe:2.3:a:suse:openstack_cloud_crowbar:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:basesystem_module:15:sp1:*:*:*:suse_linux_enterprise:*:* | 15 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:basesystem_module:15:sp2:*:*:*:suse_linux_enterprise:*:* | 15 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:basesystem_module:15:sp3:*:*:*:suse_linux_enterprise:*:* | 15 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:basesystem_module:15:sp4:*:*:*:suse_linux_enterprise:*:* | 15 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:basesystem_module:15:sp5:*:*:*:suse_linux_enterprise:*:* | 15 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:basesystem_module:15:sp6:*:*:*:suse_linux_enterprise:*:* | 15 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:basesystem_module:15:sp7:*:*:*:suse_linux_enterprise:*:* | 15 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:development_tools_module:15:sp1:*:*:*:suse_linux_enterprise:*:* | 15 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:development_tools_module:15:sp2:*:*:*:suse_linux_enterprise:*:* | 15 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:development_tools_module:15:sp3:*:*:*:suse_linux_enterprise:*:* | 15 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:development_tools_module:15:sp4:*:*:*:suse_linux_enterprise:*:* | 15 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:development_tools_module:15:sp5:*:*:*:suse_linux_enterprise:*:* | 15 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:development_tools_module:15:sp6:*:*:*:suse_linux_enterprise:*:* | 15 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:development_tools_module:15:sp7:*:*:*:suse_linux_enterprise:*:* | 15 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:legacy_module:15:sp7:*:*:*:suse_linux_enterprise:*:* | 15 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:*:*:*:*:*:* | 11 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:12:sp4:*:*:*:*:*:* | 12 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:15:sp1:*:*:*:*:*:* | 15 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:15:sp2:*:*:*:*:*:* | 15 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:15:sp3:*:*:*:*:*:* | 15 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:15:sp4:*:*:*:*:*:* | 15 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:15:sp5:*:*:*:*:*:* | 15 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:15:sp6:*:*:*:*:*:* | 15 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_desktop:15:sp7:*:*:*:*:*:* | 15 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_availability_extension:15:sp4:*:*:*:*:*:* | 15 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_availability_extension:15:sp6:*:*:*:*:*:* | 15 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_availability_extension:15:sp7:*:*:*:*:*:* | 15 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_availability_extension:16.0:-:*:*:*:*:*:* | 16.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp1:*:*:-:*:*:* | 15.0 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp1:*:*:espos:*:*:* | 15.0 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp1:*:*:ltss:*:*:* | 15.0 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp2:*:*:-:*:*:* | 15.0 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp2:*:*:espos:*:*:* | 15.0 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp2:*:*:ltss:*:*:* | 15.0 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp3:*:*:-:*:*:* | 15.0 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp3:*:*:espos:*:*:* | 15.0 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp3:*:*:ltss:*:*:* | 15.0 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp4:*:*:-:*:*:* | 15.0 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp4:*:*:espos:*:*:* | 15.0 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp4:*:*:ltss:*:*:* | 15.0 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp5:*:*:-:*:*:* | 15.0 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp5:*:*:espos:*:*:* | 15.0 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp5:*:*:ltss:*:*:* | 15.0 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp6:*:*:-:*:*:* | 15.0 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp7:*:*:-:*:*:* | 15.0 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_live_patching:12:sp5:*:*:*:*:*:* | 12 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp4:*:*:*:*:*:* | 15 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp5:*:*:*:*:*:* | 15 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp6:*:*:*:*:*:* | 15 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp7:*:*:*:*:*:* | 15 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_micro:5.0:*:*:*:*:-:*:* | 5.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_micro:5.1:*:*:*:*:-:*:* | 5.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_micro:5.2:*:*:*:*:-:*:* | 5.2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_micro:5.2:*:*:*:*:rancher:*:* | 5.2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_micro:5.3:*:*:*:*:-:*:* | 5.3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_micro:5.3:*:*:*:*:rancher:*:* | 5.3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_micro:5.4:*:*:*:*:-:*:* | 5.4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_micro:5.4:*:*:*:*:rancher:*:* | 5.4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_micro:5.5:*:*:*:*:-:*:* | 5.5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp2:*:*:*:*:*:* | 15.0 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp3:*:*:*:*:*:* | 15.0 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp4:*:*:*:*:*:* | 15.0 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp5:*:*:*:*:*:* | 15.0 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp6:*:*:*:*:*:* | 15.0 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp7:*:*:*:*:*:* | 15.0 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:-:-:*:* | 11 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:ltss:-:*:* | 11 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:ltss_extreme_core:-:*:* | 11 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:-:-:*:* | 12 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:-:sap:*:* | 12 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:espos:-:*:* | 12 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:ltss:-:*:* | 12 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:-:-:*:* | 12 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:ltss:-:*:* | 12 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:ltss_extended_security:-:*:* | 12 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:-:-:*:* | 15 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:-:sap:*:* | 15 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:business_critical_linux:-:*:* | 15 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:ltss:-:*:* | 15 sp1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:-:-:*:* | 15 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:-:sap:*:* | 15 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:business_critical_linux:-:*:* | 15 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:ltss:-:*:* | 15 sp2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp3:*:*:-:-:*:* | 15 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp3:*:*:-:sap:*:* | 15 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp3:*:*:business_critical_linux:-:*:* | 15 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp3:*:*:ltss:-:*:* | 15 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp4:*:*:-:-:*:* | 15 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp4:*:*:-:sap:*:* | 15 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp4:*:*:ltss:-:*:* | 15 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:-:-:*:* | 15 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:-:sap:*:* | 15 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:ltss:-:*:* | 15 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp6:*:*:-:-:*:* | 15 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp6:*:*:-:sap:*:* | 15 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp6:*:*:ltss:-:*:* | 15 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp7:*:*:-:-:*:* | 15 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:15:sp7:*:*:-:sap:*:* | 15 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:16.0:-:*:*:-:-:*:* | 16.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:16.0:-:*:*:-:sap:*:* | 16.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:16.1:-:*:*:-:-:*:* | 16.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_server:16.1:-:*:*:-:sap:*:* | 16.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_enterprise_workstation_extension:15:sp7:*:*:*:*:*:* | 15 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_micro:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_micro:6.1:*:*:*:*:*:*:* | 6.1 | Vulnerable | SUSE |
| cpe:2.3:o:suse:linux_micro:6.2:*:*:*:*:*:*:* | 6.2 | Vulnerable | SUSE |
| cpe:2.3:o:suse:public_cloud_module:15:sp6:*:*:*:suse_linux_enterprise:*:* | 15 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:public_cloud_module:15:sp7:*:*:*:suse_linux_enterprise:*:* | 15 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:suse:realtime_module:15:sp3:*:*:*:suse_linux_enterprise:*:* | 15 sp3 | Vulnerable | SUSE |
| cpe:2.3:o:suse:realtime_module:15:sp4:*:*:*:suse_linux_enterprise:*:* | 15 sp4 | Vulnerable | SUSE |
| cpe:2.3:o:suse:realtime_module:15:sp5:*:*:*:suse_linux_enterprise:*:* | 15 sp5 | Vulnerable | SUSE |
| cpe:2.3:o:suse:realtime_module:15:sp6:*:*:*:suse_linux_enterprise:*:* | 15 sp6 | Vulnerable | SUSE |
| cpe:2.3:o:suse:realtime_module:15:sp7:*:*:*:suse_linux_enterprise:*:* | 15 sp7 | Vulnerable | SUSE |
| cpe:2.3:o:nixos:nixos:*:*:*:*:*:*:*:* | before 25.11 | Vulnerable | NixOS |
| cpe:2.3:a:arista:cloudvision_agni:*:*:*:*:*:-:*:* | 2024.4.0 – 2025.2.2 | Vulnerable | Arista |
| cpe:2.3:a:arista:cloudvision_portal:*:*:*:*:*:*:*:* | 2024.2.0 – 2026.1.0 | Vulnerable | Arista |
| cpe:2.3:a:arista:velocloud_edge:*:*:*:*:*:*:*:* | 4.5.0 – 6.4.1 | Vulnerable | Arista |
| cpe:2.3:a:arista:velocloud_gateway:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arista |
| cpe:2.3:a:arista:velocloud_orchestrator:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Arista |
| cpe:2.3:o:arista:netvisor_os:*:*:*:*:*:*:*:* | before 7.1.0 | Vulnerable | Arista |
| cpe:2.3:o:arista:netvisor_os:7.1.0:-:*:*:*:*:*:* | 7.1.0 | Vulnerable | Arista |
| cpe:2.3:o:arista:netvisor_os:7.1.0:hotfix7:*:*:*:*:*:* | 7.1.0 hotfix7 | Vulnerable | Arista |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* | 3.1.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* | 3.1.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* | 3.1.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_s7-1500_cpu_1518-4_pn\/dp_mfp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_tm_mfp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | 16.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* | 18.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* | 20.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:* | 22.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:* | 24.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:25.10:*:*:*:-:*:*:* | 25.10 | Vulnerable | Canonical |
| cpe:2.3:o:siemens:simatic_cn_4100_firmware:*:*:*:*:*:*:*:* | before 6.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cn_4100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:a:siemens:simatic_ax_runtime:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:*:*:*:*:*:*:*:* | before 21.0 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:21.0:-:*:*:*:*:*:* | 21.0 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:21.0:update_1:*:*:*:*:*:* | 21.0 update_1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:21.0:update_2:*:*:*:*:*:* | 21.0 update_2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_mtp1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_mtp1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_mtp1500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_mtp1900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_mtp2200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_mtp700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_iot2050_advanced_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_iot2050_advanced:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc_ied-os:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* Versions 9.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_tus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:amazon:amazon_linux:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AWS
- cpe:2.3:o:canonical:ubuntu_linux:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Canonical
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* Versions 12.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:13.0:*:*:*:*:*:*:* Versions 13.0 Vulnerable ·Debian
- cpe:2.3:o:opensuse:leap:15.3:*:*:*:*:*:*:* Versions 15.3 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:leap:15.4:*:*:*:*:*:*:* Versions 15.4 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:leap:15.5:*:*:*:*:*:*:* Versions 15.5 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:leap:15.6:*:*:*:*:*:*:* Versions 15.6 Vulnerable ·openSUSE
- cpe:2.3:a:suse:caas_platform:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·SUSE
- cpe:2.3:a:suse:enterprise_storage:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·SUSE
- cpe:2.3:a:suse:enterprise_storage:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·SUSE
- cpe:2.3:a:suse:enterprise_storage:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_proxy:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_proxy:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_proxy:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_proxy:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_retail_branch_server:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_retail_branch_server:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_retail_branch_server:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_retail_branch_server:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_server:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_server:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_server:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·SUSE
- cpe:2.3:a:suse:manager_server:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·SUSE
- cpe:2.3:a:suse:openstack_cloud:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·SUSE
- cpe:2.3:a:suse:openstack_cloud_crowbar:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:basesystem_module:15:sp1:*:*:*:suse_linux_enterprise:*:* Versions 15 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:basesystem_module:15:sp2:*:*:*:suse_linux_enterprise:*:* Versions 15 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:basesystem_module:15:sp3:*:*:*:suse_linux_enterprise:*:* Versions 15 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:basesystem_module:15:sp4:*:*:*:suse_linux_enterprise:*:* Versions 15 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:basesystem_module:15:sp5:*:*:*:suse_linux_enterprise:*:* Versions 15 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:basesystem_module:15:sp6:*:*:*:suse_linux_enterprise:*:* Versions 15 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:basesystem_module:15:sp7:*:*:*:suse_linux_enterprise:*:* Versions 15 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:development_tools_module:15:sp1:*:*:*:suse_linux_enterprise:*:* Versions 15 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:development_tools_module:15:sp2:*:*:*:suse_linux_enterprise:*:* Versions 15 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:development_tools_module:15:sp3:*:*:*:suse_linux_enterprise:*:* Versions 15 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:development_tools_module:15:sp4:*:*:*:suse_linux_enterprise:*:* Versions 15 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:development_tools_module:15:sp5:*:*:*:suse_linux_enterprise:*:* Versions 15 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:development_tools_module:15:sp6:*:*:*:suse_linux_enterprise:*:* Versions 15 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:development_tools_module:15:sp7:*:*:*:suse_linux_enterprise:*:* Versions 15 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:legacy_module:15:sp7:*:*:*:suse_linux_enterprise:*:* Versions 15 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:12:sp4:*:*:*:*:*:* Versions 12 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:15:sp1:*:*:*:*:*:* Versions 15 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:15:sp2:*:*:*:*:*:* Versions 15 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:15:sp3:*:*:*:*:*:* Versions 15 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:15:sp4:*:*:*:*:*:* Versions 15 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:15:sp5:*:*:*:*:*:* Versions 15 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:15:sp6:*:*:*:*:*:* Versions 15 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_desktop:15:sp7:*:*:*:*:*:* Versions 15 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_availability_extension:15:sp4:*:*:*:*:*:* Versions 15 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_availability_extension:15:sp6:*:*:*:*:*:* Versions 15 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_availability_extension:15:sp7:*:*:*:*:*:* Versions 15 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_availability_extension:16.0:-:*:*:*:*:*:* Versions 16.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp1:*:*:-:*:*:* Versions 15.0 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp1:*:*:espos:*:*:* Versions 15.0 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp1:*:*:ltss:*:*:* Versions 15.0 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp2:*:*:-:*:*:* Versions 15.0 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp2:*:*:espos:*:*:* Versions 15.0 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp2:*:*:ltss:*:*:* Versions 15.0 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp3:*:*:-:*:*:* Versions 15.0 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp3:*:*:espos:*:*:* Versions 15.0 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp3:*:*:ltss:*:*:* Versions 15.0 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp4:*:*:-:*:*:* Versions 15.0 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp4:*:*:espos:*:*:* Versions 15.0 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp4:*:*:ltss:*:*:* Versions 15.0 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp5:*:*:-:*:*:* Versions 15.0 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp5:*:*:espos:*:*:* Versions 15.0 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp5:*:*:ltss:*:*:* Versions 15.0 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp6:*:*:-:*:*:* Versions 15.0 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp7:*:*:-:*:*:* Versions 15.0 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_live_patching:12:sp5:*:*:*:*:*:* Versions 12 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp4:*:*:*:*:*:* Versions 15 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp5:*:*:*:*:*:* Versions 15 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp6:*:*:*:*:*:* Versions 15 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp7:*:*:*:*:*:* Versions 15 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_micro:5.0:*:*:*:*:-:*:* Versions 5.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_micro:5.1:*:*:*:*:-:*:* Versions 5.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_micro:5.2:*:*:*:*:-:*:* Versions 5.2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_micro:5.2:*:*:*:*:rancher:*:* Versions 5.2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_micro:5.3:*:*:*:*:-:*:* Versions 5.3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_micro:5.3:*:*:*:*:rancher:*:* Versions 5.3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_micro:5.4:*:*:*:*:-:*:* Versions 5.4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_micro:5.4:*:*:*:*:rancher:*:* Versions 5.4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_micro:5.5:*:*:*:*:-:*:* Versions 5.5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp2:*:*:*:*:*:* Versions 15.0 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp3:*:*:*:*:*:* Versions 15.0 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp4:*:*:*:*:*:* Versions 15.0 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp5:*:*:*:*:*:* Versions 15.0 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp6:*:*:*:*:*:* Versions 15.0 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp7:*:*:*:*:*:* Versions 15.0 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:-:-:*:* Versions 11 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:ltss:-:*:* Versions 11 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:ltss_extreme_core:-:*:* Versions 11 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:-:-:*:* Versions 12 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:-:sap:*:* Versions 12 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:espos:-:*:* Versions 12 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:ltss:-:*:* Versions 12 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:-:-:*:* Versions 12 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:ltss:-:*:* Versions 12 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:ltss_extended_security:-:*:* Versions 12 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:-:-:*:* Versions 15 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:-:sap:*:* Versions 15 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:business_critical_linux:-:*:* Versions 15 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:ltss:-:*:* Versions 15 sp1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:-:-:*:* Versions 15 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:-:sap:*:* Versions 15 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:business_critical_linux:-:*:* Versions 15 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:ltss:-:*:* Versions 15 sp2 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp3:*:*:-:-:*:* Versions 15 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp3:*:*:-:sap:*:* Versions 15 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp3:*:*:business_critical_linux:-:*:* Versions 15 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp3:*:*:ltss:-:*:* Versions 15 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp4:*:*:-:-:*:* Versions 15 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp4:*:*:-:sap:*:* Versions 15 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp4:*:*:ltss:-:*:* Versions 15 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:-:-:*:* Versions 15 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:-:sap:*:* Versions 15 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:ltss:-:*:* Versions 15 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp6:*:*:-:-:*:* Versions 15 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp6:*:*:-:sap:*:* Versions 15 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp6:*:*:ltss:-:*:* Versions 15 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp7:*:*:-:-:*:* Versions 15 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:15:sp7:*:*:-:sap:*:* Versions 15 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:16.0:-:*:*:-:-:*:* Versions 16.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:16.0:-:*:*:-:sap:*:* Versions 16.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:16.1:-:*:*:-:-:*:* Versions 16.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_server:16.1:-:*:*:-:sap:*:* Versions 16.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_enterprise_workstation_extension:15:sp7:*:*:*:*:*:* Versions 15 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_micro:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_micro:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·SUSE
- cpe:2.3:o:suse:linux_micro:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·SUSE
- cpe:2.3:o:suse:public_cloud_module:15:sp6:*:*:*:suse_linux_enterprise:*:* Versions 15 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:public_cloud_module:15:sp7:*:*:*:suse_linux_enterprise:*:* Versions 15 sp7 Vulnerable ·SUSE
- cpe:2.3:o:suse:realtime_module:15:sp3:*:*:*:suse_linux_enterprise:*:* Versions 15 sp3 Vulnerable ·SUSE
- cpe:2.3:o:suse:realtime_module:15:sp4:*:*:*:suse_linux_enterprise:*:* Versions 15 sp4 Vulnerable ·SUSE
- cpe:2.3:o:suse:realtime_module:15:sp5:*:*:*:suse_linux_enterprise:*:* Versions 15 sp5 Vulnerable ·SUSE
- cpe:2.3:o:suse:realtime_module:15:sp6:*:*:*:suse_linux_enterprise:*:* Versions 15 sp6 Vulnerable ·SUSE
- cpe:2.3:o:suse:realtime_module:15:sp7:*:*:*:suse_linux_enterprise:*:* Versions 15 sp7 Vulnerable ·SUSE
- cpe:2.3:o:nixos:nixos:*:*:*:*:*:*:*:* Versions before 25.11 Vulnerable ·NixOS
- cpe:2.3:a:arista:cloudvision_agni:*:*:*:*:*:-:*:* Versions 2024.4.0 – 2025.2.2 Vulnerable ·Arista
- cpe:2.3:a:arista:cloudvision_portal:*:*:*:*:*:*:*:* Versions 2024.2.0 – 2026.1.0 Vulnerable ·Arista
- cpe:2.3:a:arista:velocloud_edge:*:*:*:*:*:*:*:* Versions 4.5.0 – 6.4.1 Vulnerable ·Arista
- cpe:2.3:a:arista:velocloud_gateway:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arista
- cpe:2.3:a:arista:velocloud_orchestrator:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Arista
- cpe:2.3:o:arista:netvisor_os:*:*:*:*:*:*:*:* Versions before 7.1.0 Vulnerable ·Arista
- cpe:2.3:o:arista:netvisor_os:7.1.0:-:*:*:*:*:*:* Versions 7.1.0 Vulnerable ·Arista
- cpe:2.3:o:arista:netvisor_os:7.1.0:hotfix7:*:*:*:*:*:* Versions 7.1.0 hotfix7 Vulnerable ·Arista
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* Versions 3.1.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* Versions 3.1.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* Versions 3.1.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_s7-1500_cpu_1518-4_pn\/dp_mfp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_tm_mfp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* Versions 20.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:* Versions 22.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:* Versions 24.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:25.10:*:*:*:-:*:*:* Versions 25.10 Vulnerable ·Canonical
- cpe:2.3:o:siemens:simatic_cn_4100_firmware:*:*:*:*:*:*:*:* Versions before 6.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cn_4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:a:siemens:simatic_ax_runtime:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:*:*:*:*:*:*:*:* Versions before 21.0 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:21.0:-:*:*:*:*:*:* Versions 21.0 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:21.0:update_1:*:*:*:*:*:* Versions 21.0 update_1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:21.0:update_2:*:*:*:*:*:* Versions 21.0 update_2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_mtp1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_mtp1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_mtp1500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_mtp1900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_mtp2200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_mtp700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_iot2050_advanced_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_iot2050_advanced:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc_ied-os:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
Remediation
- Fix · CNA Linux (Linux) Fixed in 5.10.254, 5.15.204, 6.1.170, 6.6.137, 6.12.85, 6.18.22, 6.19.12, 7.0
Red Hat 36 advisories
- RHSA-2026:33486 Released 2026-06-30 · Red Hat rating Criticalkernel security, bug fix, and enhancement update
- NVIDIA for RHEL 10 kernel-6.12.0-231.12.el10nv, kernel-64k-6.12.0-231.12.el10nv, kernel-64k-core-6.12.0-231.12.el10nv +32
- RHSA-2026:19225 Released 2026-05-19 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.5.3.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.5.3.el9_8, kernel-64k-devel-5.14.0-687.5.3.el9_8 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.5.3.el9_8, kernel-64k-5.14.0-687.5.3.el9_8, kernel-64k-core-5.14.0-687.5.3.el9_8 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.5.3.el9_8, libperf-5.14.0-687.5.3.el9_8
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.5.3.el9_8, kernel-rt-64k-5.14.0-687.5.3.el9_8, kernel-rt-64k-core-5.14.0-687.5.3.el9_8 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.5.3.el9_8, kernel-rt-core-5.14.0-687.5.3.el9_8, kernel-rt-debug-5.14.0-687.5.3.el9_8 +9
- RHSA-2026:19074 Released 2026-05-19 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.7.3.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.7.3.el10_2, kernel-64k-devel-6.12.0-211.7.3.el10_2 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.7.3.el10_2, kernel-64k-6.12.0-211.7.3.el10_2, kernel-64k-core-6.12.0-211.7.3.el10_2 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.7.3.el10_2, libperf-6.12.0-211.7.3.el10_2
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.7.3.el10_2, kernel-rt-64k-6.12.0-211.7.3.el10_2, kernel-rt-64k-core-6.12.0-211.7.3.el10_2 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.7.3.el10_2, kernel-rt-core-6.12.0-211.7.3.el10_2, kernel-rt-debug-6.12.0-211.7.3.el10_2 +9
Show 33 more Red Hat advisories
- RHSA-2026:14773 Released 2026-05-13 · Red Hat rating ImportantOpenShift Container Platform 4.15.64 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202605060220-0, rhcos-ppc64le-415.92.202605060220-0, rhcos-s390x-415.92.202605060220-0 +1
- RHSA-2026:15087 Released 2026-05-13 · Red Hat rating ImportantOpenShift Container Platform 4.14.65 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202605060243-0, rhcos-ppc64le-414.92.202605060243-0, rhcos-s390x-414.92.202605060243-0 +1
- RHSA-2026:16210 Released 2026-05-12 · Red Hat rating Importantkpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_124_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) kpatch-patch-4_18_0-477_107_1-1-4.el8_8, kpatch-patch-4_18_0-477_120_1-1-3.el8_8, kpatch-patch-4_18_0-477_130_1-1-1.el8_8 +2
- RHSA-2026:16208 Released 2026-05-12 · Red Hat rating Importantkpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, and kpatch-patch-5_14_0-284_158_1 security update
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) kpatch-patch-5_14_0-284_104_1-1-14.el9_2, kpatch-patch-5_14_0-284_117_1-1-11.el9_2, kpatch-patch-5_14_0-284_134_1-1-5.el9_2 +2
- RHSA-2026:16209 Released 2026-05-12 · Red Hat rating Importantkpatch-patch-5_14_0-70_124_1, kpatch-patch-5_14_0-70_132_1, kpatch-patch-5_14_0-70_144_1, kpatch-patch-5_14_0-70_155_1, and kpatch-patch-5_14_0-70_167_1 security update
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) kpatch-patch-5_14_0-70_124_1-1-12.el9_0, kpatch-patch-5_14_0-70_132_1-1-8.el9_0, kpatch-patch-5_14_0-70_144_1-1-4.el9_0 +2
- RHSA-2026:16111 Released 2026-05-11 · Red Hat rating Importantkpatch-patch-4_18_0-372_137_1, kpatch-patch-4_18_0-372_145_1, kpatch-patch-4_18_0-372_158_1, kpatch-patch-4_18_0-372_170_1, and kpatch-patch-4_18_0-372_181_1 security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) kpatch-patch-4_18_0-372_137_1-1-10.el8_6, kpatch-patch-4_18_0-372_145_1-1-8.el8_6, kpatch-patch-4_18_0-372_158_1-1-4.el8_6 +2
- RHSA-2026:16063 Released 2026-05-11 · Red Hat rating Importantkpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_106_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_55_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) kpatch-patch-5_14_0-427_100_1-1-3.el9_4, kpatch-patch-5_14_0-427_113_1-1-1.el9_4, kpatch-patch-5_14_0-427_55_1-1-13.el9_4 +2
- RHSA-2026:16018 Released 2026-05-11 · Red Hat rating Importantkpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) kpatch-patch-5_14_0-570_17_1-1-13.el9_6, kpatch-patch-5_14_0-570_39_1-1-4.el9_6, kpatch-patch-5_14_0-570_66_1-1-3.el9_6 +1
- RHSA-2026:15978 Released 2026-05-11 · Red Hat rating Importantkpatch-patch-5_14_0-611_36_1 and kpatch-patch-5_14_0-611_9_1 security update
- Red Hat Enterprise Linux BaseOS (v. 9) kpatch-patch-5_14_0-611_36_1-1-1.el9_7, kpatch-patch-5_14_0-611_9_1-1-4.el9_7
- RHSA-2026:15976 Released 2026-05-11 · Red Hat rating Importantkpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update
- Red Hat Enterprise Linux BaseOS (v. 8) kpatch-patch-4_18_0-553_109_1-1-1.el8_10, kpatch-patch-4_18_0-553_40_1-1-10.el8_10, kpatch-patch-4_18_0-553_53_1-1-8.el8_10 +2
- RHSA-2026:14097 Released 2026-05-08 · Red Hat rating ImportantOpenShift Container Platform 4.12.89 bug fix and security update
- Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202605060316-0
- RHSA-2026:14112 Released 2026-05-07 · Red Hat rating ImportantOpenShift Container Platform 4.13.66 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202605051442-0
- RHSA-2026:14926 Released 2026-05-07 · Red Hat rating Importantkernel update
- NVIDIA for RHEL 10 kernel-6.12.0-211.6.el10nv, kernel-64k-6.12.0-211.6.el10nv, kernel-64k-core-6.12.0-211.6.el10nv +32
- RHSA-2026:13885 Released 2026-05-07 · Red Hat rating ImportantOpenShift Container Platform 4.17.53 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 rhcos-aarch64-417.94.202605050021-0, rhcos-ppc64le-417.94.202605050021-0, rhcos-s390x-417.94.202605050021-0 +1
- RHSA-2026:13729 Released 2026-05-07 · Red Hat rating ImportantOpenShift Container Platform 4.16.61 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202605042300-0, rhcos-ppc64le-416.94.202605042300-0, rhcos-s390x-416.94.202605042300-0 +1
- RHSA-2026:14339 Released 2026-05-06 · Red Hat rating Importantkernel security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.112.1.el9_6, libperf-5.14.0-570.112.1.el9_6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.112.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.112.1.el9_6, kernel-64k-devel-5.14.0-570.112.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.112.1.el9_6, kernel-64k-5.14.0-570.112.1.el9_6, kernel-64k-core-5.14.0-570.112.1.el9_6 +28
- Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.112.1.el9_6, kernel-rt-64k-5.14.0-570.112.1.el9_6, kernel-rt-64k-core-5.14.0-570.112.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.112.1.el9_6, kernel-rt-core-5.14.0-570.112.1.el9_6, kernel-rt-debug-5.14.0-570.112.1.el9_6 +11
- RHSA-2026:13727 Released 2026-05-06 · Red Hat rating ImportantOpenShift Container Platform 4.18.40 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202605042017-0, rhcos-ppc64le-418.94.202605042017-0, rhcos-s390x-418.94.202605042017-0 +1
- RHSA-2026:14301 Released 2026-05-06 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux Real Time E4S (v.9.2) kernel-rt-5.14.0-284.169.1.rt14.454.el9_2, kernel-rt-core-5.14.0-284.169.1.rt14.454.el9_2, kernel-rt-debug-5.14.0-284.169.1.rt14.454.el9_2 +9
- Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) kernel-rt-5.14.0-284.169.1.rt14.454.el9_2, kernel-rt-core-5.14.0-284.169.1.rt14.454.el9_2, kernel-rt-debug-5.14.0-284.169.1.rt14.454.el9_2 +11
- RHSA-2026:14230 Released 2026-05-06 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.191.1.el8_6, kernel-4.18.0-372.191.1.el8_6, kernel-abi-stablelists-4.18.0-372.191.1.el8_6 +14
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) bpftool-4.18.0-372.191.1.el8_6, kernel-4.18.0-372.191.1.el8_6, kernel-abi-stablelists-4.18.0-372.191.1.el8_6 +19
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) bpftool-4.18.0-372.191.1.el8_6, kernel-4.18.0-372.191.1.el8_6, kernel-abi-stablelists-4.18.0-372.191.1.el8_6 +14
- RHSA-2026:13690 Released 2026-05-06 · Red Hat rating ImportantOpenShift Container Platform 4.19.30 bug fix and security update
- Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202605042214-0, rhcos-ppc64le-4.19.9.6.202605042214-0, rhcos-s390x-4.19.9.6.202605042214-0 +1
- RHSA-2026:14165 Released 2026-05-06 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.190.1.el8_4, kernel-4.18.0-305.190.1.el8_4, kernel-abi-stablelists-4.18.0-305.190.1.el8_4 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.190.1.el8_4, kernel-4.18.0-305.190.1.el8_4, kernel-abi-stablelists-4.18.0-305.190.1.el8_4 +14
- RHSA-2026:13862 Released 2026-05-06 · Red Hat rating ImportantOpenShift Container Platform 4.20.21 bug fix and security update
- Red Hat OpenShift Container Platform 4.20 rhcos-aarch64-4.20.9.6.202605051409-0, rhcos-ppc64le-4.20.9.6.202605051409-0, rhcos-s390x-4.20.9.6.202605051409-0 +1
- RHSA-2026:14137 Released 2026-05-06 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.178.1.rt21.250.el9_0, kernel-rt-core-5.14.0-70.178.1.rt21.250.el9_0, kernel-rt-debug-5.14.0-70.178.1.rt21.250.el9_0 +9
- Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.178.1.rt21.250.el9_0, kernel-rt-core-5.14.0-70.178.1.rt21.250.el9_0, kernel-rt-debug-5.14.0-70.178.1.rt21.250.el9_0 +7
- RHSA-2026:13811 Released 2026-05-06 · Red Hat rating ImportantOpenShift Container Platform 4.21.14 bug fix and security update
- Red Hat OpenShift Container Platform 4.21 rhcos-aarch64-4.21.9.6.202605051105-0, rhcos-ppc64le-4.21.9.6.202605051105-0, rhcos-s390x-4.21.9.6.202605051105-0 +1
- RHSA-2026:13932 Released 2026-05-06 · Red Hat rating Importantkernel security update
- Red Hat CodeReady Linux Builder EUS (v.9.4) kernel-tools-libs-devel-5.14.0-427.124.1.el9_4, libperf-5.14.0-427.124.1.el9_4
- Red Hat Enterprise Linux AppStream EUS (v.9.4) kernel-64k-debug-devel-5.14.0-427.124.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.124.1.el9_4, kernel-64k-devel-5.14.0-427.124.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool-7.3.0-427.124.1.el9_4, kernel-5.14.0-427.124.1.el9_4, kernel-64k-5.14.0-427.124.1.el9_4 +29
- Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt-5.14.0-427.124.1.el9_4, kernel-rt-core-5.14.0-427.124.1.el9_4, kernel-rt-debug-5.14.0-427.124.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt-5.14.0-427.124.1.el9_4, kernel-rt-core-5.14.0-427.124.1.el9_4, kernel-rt-debug-5.14.0-427.124.1.el9_4 +11
- RHSA-2026:13936 Released 2026-05-06 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) kernel-debug-devel-5.14.0-70.178.1.el9_0, kernel-debug-devel-matched-5.14.0-70.178.1.el9_0, kernel-devel-5.14.0-70.178.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) bpftool-5.14.0-70.178.1.el9_0, kernel-5.14.0-70.178.1.el9_0, kernel-abi-stablelists-5.14.0-70.178.1.el9_0 +14
- RHSA-2026:13887 Released 2026-05-05 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.71.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.71.1.el10_0, kernel-64k-devel-6.12.0-55.71.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.71.1.el10_0, kernel-64k-6.12.0-55.71.1.el10_0, kernel-64k-core-6.12.0-55.71.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.71.1.el10_0, libperf-6.12.0-55.71.1.el10_0
- Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.71.1.el10_0, kernel-rt-64k-6.12.0-55.71.1.el10_0, kernel-rt-64k-core-6.12.0-55.71.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.71.1.el10_0, kernel-rt-core-6.12.0-55.71.1.el10_0, kernel-rt-debug-6.12.0-55.71.1.el10_0 +11
- RHSA-2026:13734 Released 2026-05-05 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.169.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.169.1.el9_2, kernel-64k-devel-5.14.0-284.169.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.169.1.el9_2, kernel-5.14.0-284.169.1.el9_2, kernel-64k-5.14.0-284.169.1.el9_2 +29
- RHSA-2026:13681 Released 2026-05-05 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.139.1.el8_8, kernel-4.18.0-477.139.1.el8_8, kernel-abi-stablelists-4.18.0-477.139.1.el8_8 +14
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.139.1.el8_8, kernel-4.18.0-477.139.1.el8_8, kernel-abi-stablelists-4.18.0-477.139.1.el8_8 +14
- RHSA-2026:13577 Released 2026-05-05 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.123.1.el8_10, kernel-4.18.0-553.123.1.el8_10, kernel-abi-stablelists-4.18.0-553.123.1.el8_10 +19
- Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.123.1.el8_10
- RHSA-2026:13578 Released 2026-05-05 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.123.1.rt7.464.el8_10, kernel-rt-core-4.18.0-553.123.1.rt7.464.el8_10, kernel-rt-debug-4.18.0-553.123.1.rt7.464.el8_10 +9
- Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.123.1.rt7.464.el8_10, kernel-rt-core-4.18.0-553.123.1.rt7.464.el8_10, kernel-rt-debug-4.18.0-553.123.1.rt7.464.el8_10 +7
- RHSA-2026:13566 Released 2026-05-04 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-124.55.1.el10_1, kernel-64k-debug-devel-matched-6.12.0-124.55.1.el10_1, kernel-64k-devel-6.12.0-124.55.1.el10_1 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-124.55.1.el10_1, kernel-64k-6.12.0-124.55.1.el10_1, kernel-64k-core-6.12.0-124.55.1.el10_1 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-124.55.1.el10_1, libperf-6.12.0-124.55.1.el10_1
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-124.55.1.el10_1, kernel-rt-64k-6.12.0-124.55.1.el10_1, kernel-rt-64k-core-6.12.0-124.55.1.el10_1 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-124.55.1.el10_1, kernel-rt-core-6.12.0-124.55.1.el10_1, kernel-rt-debug-6.12.0-124.55.1.el10_1 +9
- RHSA-2026:13565 Released 2026-05-04 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-611.54.1.el9_7, kernel-64k-debug-devel-matched-5.14.0-611.54.1.el9_7, kernel-64k-devel-5.14.0-611.54.1.el9_7 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-611.54.1.el9_7, kernel-64k-5.14.0-611.54.1.el9_7, kernel-64k-core-5.14.0-611.54.1.el9_7 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-611.54.1.el9_7, libperf-5.14.0-611.54.1.el9_7
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-611.54.1.el9_7, kernel-rt-64k-5.14.0-611.54.1.el9_7, kernel-rt-64k-core-5.14.0-611.54.1.el9_7 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-611.54.1.el9_7, kernel-rt-core-5.14.0-611.54.1.el9_7, kernel-rt-debug-5.14.0-611.54.1.el9_7 +9
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| NVIDIA for RHEL 10 | Fixed | RHSA-2026:14926, RHSA-2026:33486 |
| Red Hat CodeReady Linux Builder EUS (v.9.4) | Fixed | RHSA-2026:13932 |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:14339 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:13566, RHSA-2026:19074 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:13565, RHSA-2026:19225 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2026:13936 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:13734 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:13887 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2026:13932 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:14339 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:13566, RHSA-2026:19074 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2026:13577, RHSA-2026:15976 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:13565, RHSA-2026:15978, RHSA-2026:19225 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.4) | Fixed | RHSA-2026:14165 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2026:14230 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.6) | Fixed | RHSA-2026:14230, RHSA-2026:16111 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.8) | Fixed | RHSA-2026:13681, RHSA-2026:16210 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.0) | Fixed | RHSA-2026:13936, RHSA-2026:16209 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.2) | Fixed | RHSA-2026:13734, RHSA-2026:16208 |
| Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | Fixed | RHSA-2026:13887 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.4) | Fixed | RHSA-2026:13932, RHSA-2026:16063 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.6) | Fixed | RHSA-2026:14339, RHSA-2026:16018 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:14165 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.6) | Fixed | RHSA-2026:14230 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.8) | Fixed | RHSA-2026:13681 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2026:13577 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:13566, RHSA-2026:19074 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:13565, RHSA-2026:19225 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:13887 |
| Red Hat Enterprise Linux NFV (v. 8) | Fixed | RHSA-2026:13578 |
| Red Hat Enterprise Linux NFV E4S (v.9.0) | Fixed | RHSA-2026:14137 |
| Red Hat Enterprise Linux RT (v. 8) | Fixed | RHSA-2026:13578 |
| Red Hat Enterprise Linux Real Time (v. 10) | Fixed | RHSA-2026:13566, RHSA-2026:19074 |
| Red Hat Enterprise Linux Real Time (v. 9) | Fixed | RHSA-2026:13565, RHSA-2026:19225 |
| Red Hat Enterprise Linux Real Time E4S (v.9.0) | Fixed | RHSA-2026:14137 |
| Red Hat Enterprise Linux Real Time E4S (v.9.2) | Fixed | RHSA-2026:14301 |
| Red Hat Enterprise Linux Real Time EUS (v. 10.0) | Fixed | RHSA-2026:13887 |
| Red Hat Enterprise Linux Real Time EUS (v.9.4) | Fixed | RHSA-2026:13932 |
| Red Hat Enterprise Linux Real Time EUS (v.9.6) | Fixed | RHSA-2026:14339 |
| Red Hat Enterprise Linux Real Time for NFV (v. 10) | Fixed | RHSA-2026:13566, RHSA-2026:19074 |
| Red Hat Enterprise Linux Real Time for NFV (v. 9) | Fixed | RHSA-2026:13565, RHSA-2026:19225 |
| Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) | Fixed | RHSA-2026:14301 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) | Fixed | RHSA-2026:13887 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) | Fixed | RHSA-2026:13932 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) | Fixed | RHSA-2026:14339 |
| Red Hat OpenShift Container Platform 4.12 | Fixed | RHSA-2026:14097 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2026:14112 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2026:15087 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2026:14773 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2026:13729 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2026:13885 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2026:13727 |
| Red Hat OpenShift Container Platform 4.19 | Fixed | RHSA-2026:13690 |
| Red Hat OpenShift Container Platform 4.20 | Fixed | RHSA-2026:13862 |
| Red Hat OpenShift Container Platform 4.21 | Fixed | RHSA-2026:13811 |
Not affected: 2 products
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
Timeline
- 2026-05-01 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2026-31431
- 2026-10-03 Alias added: GHSA-2274-3hgr-wxv6
- 2026-10-09 Affected versions changed · Red Hat
- 2026-10-25 EPSS moved to the 99th percentile and above
References
Exploit 8
- http://www.openwall.com/lists/oss-security/2026/04/29/23
- http://www.openwall.com/lists/oss-security/2026/04/29/26
- http://www.openwall.com/lists/oss-security/2026/04/30/18
- http://www.openwall.com/lists/oss-security/2026/04/30/5
- https://copy.fail
- https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170
- https://github.com/theori-io/copy-fail-CVE-2026-31431
- https://xint.io/blog/copy-fail-linux-distributions#the-fix-6
Patch 15
- https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667
- https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c
- https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b
- https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc
- https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82
- https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8
- https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237
- https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5
- http://www.openwall.com/lists/oss-security/2026/04/29/25
- http://www.openwall.com/lists/oss-security/2026/04/30/10
- http://www.openwall.com/lists/oss-security/2026/04/30/11
- http://www.openwall.com/lists/oss-security/2026/04/30/12
- http://www.openwall.com/lists/oss-security/2026/04/30/14
- http://www.openwall.com/lists/oss-security/2026/04/30/15
- http://www.openwall.com/lists/oss-security/2026/04/30/16
Advisory 46
- https://www.kb.cert.org/vuls/id/260001
- https://access.redhat.com/errata/RHSA-2026:13565
- https://access.redhat.com/errata/RHSA-2026:13566
- https://access.redhat.com/errata/RHSA-2026:13577
- https://access.redhat.com/errata/RHSA-2026:13578
- https://access.redhat.com/errata/RHSA-2026:13681
- https://access.redhat.com/errata/RHSA-2026:13690
- https://access.redhat.com/errata/RHSA-2026:13727
- https://access.redhat.com/errata/RHSA-2026:13729
- https://access.redhat.com/errata/RHSA-2026:13734
- https://access.redhat.com/errata/RHSA-2026:13811
- https://access.redhat.com/errata/RHSA-2026:13862
- https://access.redhat.com/errata/RHSA-2026:13885
- https://access.redhat.com/errata/RHSA-2026:13887
- https://access.redhat.com/errata/RHSA-2026:13932
- https://access.redhat.com/errata/RHSA-2026:13936
- https://access.redhat.com/errata/RHSA-2026:14097
- https://access.redhat.com/errata/RHSA-2026:14112
- https://access.redhat.com/errata/RHSA-2026:14137
- https://access.redhat.com/errata/RHSA-2026:14165
- https://access.redhat.com/errata/RHSA-2026:14230
- https://access.redhat.com/errata/RHSA-2026:14301
- https://access.redhat.com/errata/RHSA-2026:14339
- https://access.redhat.com/errata/RHSA-2026:14773
- https://access.redhat.com/errata/RHSA-2026:14926
- https://access.redhat.com/errata/RHSA-2026:15087
- https://access.redhat.com/errata/RHSA-2026:15976
- https://access.redhat.com/errata/RHSA-2026:15978
- https://access.redhat.com/errata/RHSA-2026:16018
- https://access.redhat.com/errata/RHSA-2026:16063
- https://access.redhat.com/errata/RHSA-2026:16111
- https://access.redhat.com/errata/RHSA-2026:16208
- https://access.redhat.com/errata/RHSA-2026:16209
- https://access.redhat.com/errata/RHSA-2026:16210
- https://access.redhat.com/errata/RHSA-2026:19074
- https://access.redhat.com/errata/RHSA-2026:19225
- https://access.redhat.com/errata/RHSA-2026:33486
- https://access.redhat.com/security/cve/CVE-2026-31431
- https://access.redhat.com/security/cve/cve-2026-31431#cve-details-mitigation
- https://bugzilla.redhat.com/show_bug.cgi?id=2460538
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-328642.html
- https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31431.json
More Linux Kernel vulnerabilities
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
- TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
- TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
- TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
- TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
Sources
- CVE-2026-31431 · CVE Program
- CVE-2026-31431 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-2274-3hgr-wxv6 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-31431 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences