In the Linux kernel, the following vulnerability has been resolved:
ext4: ignore xattrs past end
Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry.
This fixes the following KASAN reported issue:
================================================================== BUG: KASAN: slab-use-after-free in ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 Read of size 4 at addr ffff888012c120c4 by task repro/2065
CPU: 1 UID: 0 PID: 2065 Comm: repro Not tainted 6.13.0-rc2+ #11 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x1fd/0x300 ? tcp_gro_dev_warn+0x260/0x260 ? _printk+0xc0/0x100 ? read_lock_is_recursive+0x10/0x10 ? irq_work_queue+0x72/0xf0 ? __virt_addr_valid+0x17b/0x4b0 print_address_description+0x78/0x390 print_report+0x107/0x1f0 ? __virt_addr_valid+0x17b/0x4b0 ? __virt_addr_valid+0x3ff/0x4b0 ? __phys_addr+0xb5/0x160 ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 kasan_report+0xcc/0x100 ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 ? ext4_xattr_delete_inode+0xd30/0xd30 ? __ext4_journal_ensure_credits+0x5f0/0x5f0 ? __ext4_journal_ensure_credits+0x2b/0x5f0 ? inode_update_timestamps+0x410/0x410 ext4_xattr_delete_inode+0xb64/0xd30 ? ext4_truncate+0xb70/0xdc0 ? ext4_expand_extra_isize_ea+0x1d20/0x1d20 ? __ext4_mark_inode_dirty+0x670/0x670 ? ext4_journal_check_start+0x16f/0x240 ? ext4_inode_is_fast_symlink+0x2f2/0x3a0 ext4_evict_inode+0xc8c/0xff0 ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 ? do_raw_spin_unlock+0x53/0x8a0 ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 evict+0x4ac/0x950 ? proc_nr_inodes+0x310/0x310 ? trace_ext4_drop_inode+0xa2/0x220 ? _raw_spin_unlock+0x1a/0x30 ? iput+0x4cb/0x7e0 do_unlinkat+0x495/0x7c0 ? try_break_deleg+0x120/0x120 ? 0xffffffff81000000 ? __check_object_size+0x15a/0x210 ? strncpy_from_user+0x13e/0x250 ? getname_flags+0x1dc/0x530 __x64_sys_unlinkat+0xc8/0xf0 do_syscall_64+0x65/0x110 entry_SYSCALL_64_after_hwframe+0x67/0x6f RIP: 0033:0x434ffd Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 8 RSP: 002b:00007ffc50fa7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 RAX: ffffffffffffffda RBX: 00007ffc50fa7e18 RCX: 0000000000434ffd RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 RBP: 00007ffc50fa7be0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc50fa7e08 R14: 00000000004bbf30 R15: 0000000000000001 </TASK>
The buggy address belongs to the object at ffff888012c12000 which belongs to the cache filp of size 360 The buggy address is located 196 bytes inside of freed 360-byte region [ffff888012c12000, ffff888012c12168)
The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c12 head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0x40(head|node=0|zone=0) page_type: f5(slab) raw: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004 raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 head: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004 head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 head: 0000000000000001 ffffea00004b0481 ffffffffffffffff 0000000000000000 head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected
Memory state around the buggy address: ffff888012c11f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff888012c12000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb > ffff888012c12080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888012c12100: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc ffff888012c12180: fc fc fc fc fc fc fc fc fc ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-coreUpgrade kernel-64k-modulesUpgrade kernel-tools-libsUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-develUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-rt-64k-debugUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64kUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-64k-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel | Jul 4, 2025 | May 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.184-125.190Upgrade python-perfUpgrade kernel-livepatch-5.10.237-230.949Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.182-123.190Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo | Jun 23, 2025 | May 1, 2025 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel6.12-debuginfoUpgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-headers | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftool | Aug 13, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 30, 2025 | May 1, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 26, 2025 | May 1, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-coreUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-rt-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-develUpgrade rtlaUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-debug | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade kernel-default-extraUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kb | Dec 5, 2025 | Jul 17, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-realtimeUpgrade linux-image-ibm-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-gcp-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-xilinxUpgrade linux-image-azure-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-azure-fips-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-virtual-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gkeopUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-genericUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-azureUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1046-azure-fips | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub