In the Linux kernel, the following vulnerability has been resolved:
ext4: ignore xattrs past end
Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry.
This fixes the following KASAN reported issue:
================================================================== BUG: KASAN: slab-use-after-free in ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 Read of size 4 at addr ffff888012c120c4 by task repro/2065
CPU: 1 UID: 0 PID: 2065 Comm: repro Not tainted 6.13.0-rc2+ #11 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x1fd/0x300 ? tcp_gro_dev_warn+0x260/0x260 ? _printk+0xc0/0x100 ? read_lock_is_recursive+0x10/0x10 ? irq_work_queue+0x72/0xf0 ? __virt_addr_valid+0x17b/0x4b0 print_address_description+0x78/0x390 print_report+0x107/0x1f0 ? __virt_addr_valid+0x17b/0x4b0 ? __virt_addr_valid+0x3ff/0x4b0 ? __phys_addr+0xb5/0x160 ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 kasan_report+0xcc/0x100 ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 ? ext4_xattr_delete_inode+0xd30/0xd30 ? __ext4_journal_ensure_credits+0x5f0/0x5f0 ? __ext4_journal_ensure_credits+0x2b/0x5f0 ? inode_update_timestamps+0x410/0x410 ext4_xattr_delete_inode+0xb64/0xd30 ? ext4_truncate+0xb70/0xdc0 ? ext4_expand_extra_isize_ea+0x1d20/0x1d20 ? __ext4_mark_inode_dirty+0x670/0x670 ? ext4_journal_check_start+0x16f/0x240 ? ext4_inode_is_fast_symlink+0x2f2/0x3a0 ext4_evict_inode+0xc8c/0xff0 ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 ? do_raw_spin_unlock+0x53/0x8a0 ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 evict+0x4ac/0x950 ? proc_nr_inodes+0x310/0x310 ? trace_ext4_drop_inode+0xa2/0x220 ? _raw_spin_unlock+0x1a/0x30 ? iput+0x4cb/0x7e0 do_unlinkat+0x495/0x7c0 ? try_break_deleg+0x120/0x120 ? 0xffffffff81000000 ? __check_object_size+0x15a/0x210 ? strncpy_from_user+0x13e/0x250 ? getname_flags+0x1dc/0x530 __x64_sys_unlinkat+0xc8/0xf0 do_syscall_64+0x65/0x110 entry_SYSCALL_64_after_hwframe+0x67/0x6f RIP: 0033:0x434ffd Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 8 RSP: 002b:00007ffc50fa7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 RAX: ffffffffffffffda RBX: 00007ffc50fa7e18 RCX: 0000000000434ffd RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 RBP: 00007ffc50fa7be0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc50fa7e08 R14: 00000000004bbf30 R15: 0000000000000001 </TASK>
The buggy address belongs to the object at ffff888012c12000 which belongs to the cache filp of size 360 The buggy address is located 196 bytes inside of freed 360-byte region [ffff888012c12000, ffff888012c12168)
The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c12 head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0x40(head|node=0|zone=0) page_type: f5(slab) raw: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004 raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 head: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004 head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 head: 0000000000000001 ffffea00004b0481 ffffffffffffffff 0000000000000000 head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected
Memory state around the buggy address: ffff888012c11f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff888012c12000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb > ffff888012c12080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888012c12100: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc ffff888012c12180: fc fc fc fc fc fc fc fc fc ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modules-coreUpgrade kernel-64k-coreUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-toolsUpgrade kernel-64k-modules-extraUpgrade rvUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-64k-debugUpgrade kernel-uki-virt-addonsUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-rt-64kUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade libperfUpgrade kernel-rt-64k-modules-extra | Jul 4, 2025 | May 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python-perfUpgrade kernel-livepatch-5.15.182-123.190Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.237-230.949Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfo-common-x86_64 | Jun 23, 2025 | May 1, 2025 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-6.12.25-32.101Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernelUpgrade kernel6.12Upgrade kernel-libbpf-develUpgrade python3-perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade bpftoolUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.140-154.222 | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Aug 13, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 30, 2025 | May 1, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 26, 2025 | May 1, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade perfUpgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade rtlaUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade libperf-debuginfoUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addons | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade dtb-exynosUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rt | Dec 5, 2025 | Jul 17, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gke-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinxUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeopUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-fips-5.15Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-azureUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-azure-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-kvm-5.15Upgrade linux-image-ibmUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-virtual-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-oracleUpgrade linux-image-gke-64kUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04 | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub