In the Linux kernel, the following vulnerability has been resolved:
ext4: ignore xattrs past end
Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry.
This fixes the following KASAN reported issue:
================================================================== BUG: KASAN: slab-use-after-free in ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 Read of size 4 at addr ffff888012c120c4 by task repro/2065
CPU: 1 UID: 0 PID: 2065 Comm: repro Not tainted 6.13.0-rc2+ #11 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x1fd/0x300 ? tcp_gro_dev_warn+0x260/0x260 ? _printk+0xc0/0x100 ? read_lock_is_recursive+0x10/0x10 ? irq_work_queue+0x72/0xf0 ? __virt_addr_valid+0x17b/0x4b0 print_address_description+0x78/0x390 print_report+0x107/0x1f0 ? __virt_addr_valid+0x17b/0x4b0 ? __virt_addr_valid+0x3ff/0x4b0 ? __phys_addr+0xb5/0x160 ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 kasan_report+0xcc/0x100 ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 ? ext4_xattr_delete_inode+0xd30/0xd30 ? __ext4_journal_ensure_credits+0x5f0/0x5f0 ? __ext4_journal_ensure_credits+0x2b/0x5f0 ? inode_update_timestamps+0x410/0x410 ext4_xattr_delete_inode+0xb64/0xd30 ? ext4_truncate+0xb70/0xdc0 ? ext4_expand_extra_isize_ea+0x1d20/0x1d20 ? __ext4_mark_inode_dirty+0x670/0x670 ? ext4_journal_check_start+0x16f/0x240 ? ext4_inode_is_fast_symlink+0x2f2/0x3a0 ext4_evict_inode+0xc8c/0xff0 ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 ? do_raw_spin_unlock+0x53/0x8a0 ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 evict+0x4ac/0x950 ? proc_nr_inodes+0x310/0x310 ? trace_ext4_drop_inode+0xa2/0x220 ? _raw_spin_unlock+0x1a/0x30 ? iput+0x4cb/0x7e0 do_unlinkat+0x495/0x7c0 ? try_break_deleg+0x120/0x120 ? 0xffffffff81000000 ? __check_object_size+0x15a/0x210 ? strncpy_from_user+0x13e/0x250 ? getname_flags+0x1dc/0x530 __x64_sys_unlinkat+0xc8/0xf0 do_syscall_64+0x65/0x110 entry_SYSCALL_64_after_hwframe+0x67/0x6f RIP: 0033:0x434ffd Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 8 RSP: 002b:00007ffc50fa7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 RAX: ffffffffffffffda RBX: 00007ffc50fa7e18 RCX: 0000000000434ffd RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 RBP: 00007ffc50fa7be0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc50fa7e08 R14: 00000000004bbf30 R15: 0000000000000001 </TASK>
The buggy address belongs to the object at ffff888012c12000 which belongs to the cache filp of size 360 The buggy address is located 196 bytes inside of freed 360-byte region [ffff888012c12000, ffff888012c12168)
The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c12 head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0x40(head|node=0|zone=0) page_type: f5(slab) raw: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004 raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 head: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004 head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 head: 0000000000000001 ffffea00004b0481 ffffffffffffffff 0000000000000000 head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected
Memory state around the buggy address: ffff888012c11f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff888012c12000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb > ffff888012c12080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888012c12100: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc ffff888012c12180: fc fc fc fc fc fc fc fc fc ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-develUpgrade kernel-64k-debugUpgrade kernel-zfcpdumpUpgrade rvUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-64kUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debugUpgrade kernel-64k-coreUpgrade kernel-64k-modulesUpgrade bpftoolUpgrade kernel-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernelUpgrade kernel-64kUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perfUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-rt-64k-develUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-modules-extra | Jul 4, 2025 | May 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.237-230.949Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-livepatch-5.15.182-123.190 | Jun 23, 2025 | May 1, 2025 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernelUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Aug 13, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 30, 2025 | May 1, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jun 26, 2025 | May 1, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade rtlaUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-uki-virtUpgrade kernel-rt-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-coreUpgrade rvUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-amdUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade dtb-mediatek | Dec 5, 2025 | Jul 17, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-generic-5.15Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-6.8Upgrade linux-image-aws-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-intelUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-generic-6.8 | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub