Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allows root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates. We recommend upgrading past commit 4caae58406f8ceb741603eee460d79bacca9b1b5
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 12, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 18, 2023 | Aug 12, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 12, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Nov 3, 2022 | Aug 12, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade python-perf | Mar 9, 2023 | Aug 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade perf | Oct 11, 2022 | Aug 12, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Nov 15, 2022 | Aug 12, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 5, 2022 | Aug 12, 2022 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 18, 2023 | Aug 12, 2022 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-symsUpgrade dtb-marvellUpgrade reiserfs-kmp-preemptUpgrade kernel-azureUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade kernel-default-manUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade kernel-64kbUpgrade kernel-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-baseUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-preempt-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-azure-baseUpgrade kernel-default-baseUpgrade kernel-zfcpdump-manUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-vanilla-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade dtb-caviumUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-preemptUpgrade kernel-debug-baseUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade kernel-develUpgrade gfs2-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade dtb-zteUpgrade kernel-rtUpgrade dlm-kmp-preemptUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-preempt-extraUpgrade kernel-macrosUpgrade kernel-vanilla-baseUpgrade kernel-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-devel-azureUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-preempt | Oct 26, 2022 | Aug 12, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1118-kvmUpgrade linux-image-5.4.0-1046-bluefieldUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-5.4.0-1033-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-47-genericUpgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1017-kvmUpgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1014-raspi-nolpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1083-gkeUpgrade linux-image-5.15.0-1019-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-126-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-47-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1091-azure-fdeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-47-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.4.0-1085-awsUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.4.0-239-genericUpgrade linux-image-4.4.0-1155-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1019-azureUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-5.15.0-1017-oracleUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-4.4.0-1117-awsUpgrade linux-image-5.15.0-47-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1091-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-126-generic-lpaeUpgrade linux-image-5.4.0-1083-oracleUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1013-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1014-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-47-lowlatencyUpgrade linux-image-5.15.0-1015-intel-iotgUpgrade linux-image-5.4.0-1070-raspiUpgrade linux-image-azureUpgrade linux-image-5.15.0-1002-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1089-gcpUpgrade linux-image-5.4.0-1053-gkeopUpgrade linux-image-5.15.0-1017-gcpUpgrade linux-image-5.4.0-1075-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1015-gkeUpgrade linux-image-4.4.0-239-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-oemUpgrade linux-image-5.4.0-126-lowlatency | Sep 2, 2022 | Aug 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 12, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub