The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allows root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates. We recommend upgrading past commit 4caae58406f8ceb741603eee460d79bacca9b1b5
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 12, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 18, 2023 | Aug 12, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 12, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Nov 3, 2022 | Aug 12, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf | Mar 9, 2023 | Aug 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perf | Oct 11, 2022 | Aug 12, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Nov 15, 2022 | Aug 12, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 5, 2022 | Aug 12, 2022 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 18, 2023 | Aug 12, 2022 |
| Suse | — | Upgrade dtb-qcomUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-preempt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-vanilla-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-alUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade cluster-md-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade kernel-debug-baseUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-vanilla-baseUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kernel-default-extraUpgrade dlm-kmp-preemptUpgrade dtb-mediatekUpgrade gfs2-kmp-preemptUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kernel-preemptUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade dtb-zteUpgrade kernel-default-manUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-vanillaUpgrade kernel-preempt-develUpgrade kernel-azure-extraUpgrade kernel-vanilla-develUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-optionalUpgrade ocfs2-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-baseUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-preempt-livepatch-develUpgrade kernel-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-zfcpdump-manUpgrade kernel-64kbUpgrade kernel-source-vanillaUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-renesas | Oct 26, 2022 | Aug 12, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1014-raspiUpgrade linux-image-5.15.0-1019-azureUpgrade linux-image-5.4.0-126-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-47-lowlatencyUpgrade linux-image-5.15.0-1013-ibmUpgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1053-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1155-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1002-gkeopUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1083-oracleUpgrade linux-image-5.15.0-1017-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.4.0-1117-awsUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-239-genericUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1085-awsUpgrade linux-image-5.4.0-1070-raspiUpgrade linux-image-5.4.0-1091-azureUpgrade linux-image-5.15.0-47-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1075-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-239-lowlatencyUpgrade linux-image-5.15.0-47-generic-lpaeUpgrade linux-image-5.15.0-1015-gkeUpgrade linux-image-5.15.0-1015-intel-iotgUpgrade linux-image-5.4.0-1089-gcpUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-126-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1017-gcpUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1017-kvmUpgrade linux-image-ibmUpgrade linux-image-5.4.0-126-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1019-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1033-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1091-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-47-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1046-bluefieldUpgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-47-lowlatency-64kUpgrade linux-image-5.4.0-1083-gkeUpgrade linux-image-5.15.0-1014-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-4.4.0-1118-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi2Upgrade linux-image-gcp-lts-20.04 | Sep 2, 2022 | Aug 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 12, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub