In the Linux kernel, the following vulnerability has been resolved:
ext4: ignore xattrs past end
Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry.
This fixes the following KASAN reported issue:
================================================================== BUG: KASAN: slab-use-after-free in ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 Read of size 4 at addr ffff888012c120c4 by task repro/2065
CPU: 1 UID: 0 PID: 2065 Comm: repro Not tainted 6.13.0-rc2+ #11 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x1fd/0x300 ? tcp_gro_dev_warn+0x260/0x260 ? _printk+0xc0/0x100 ? read_lock_is_recursive+0x10/0x10 ? irq_work_queue+0x72/0xf0 ? __virt_addr_valid+0x17b/0x4b0 print_address_description+0x78/0x390 print_report+0x107/0x1f0 ? __virt_addr_valid+0x17b/0x4b0 ? __virt_addr_valid+0x3ff/0x4b0 ? __phys_addr+0xb5/0x160 ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 kasan_report+0xcc/0x100 ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 ext4_xattr_inode_dec_ref_all+0xb8c/0xe90 ? ext4_xattr_delete_inode+0xd30/0xd30 ? __ext4_journal_ensure_credits+0x5f0/0x5f0 ? __ext4_journal_ensure_credits+0x2b/0x5f0 ? inode_update_timestamps+0x410/0x410 ext4_xattr_delete_inode+0xb64/0xd30 ? ext4_truncate+0xb70/0xdc0 ? ext4_expand_extra_isize_ea+0x1d20/0x1d20 ? __ext4_mark_inode_dirty+0x670/0x670 ? ext4_journal_check_start+0x16f/0x240 ? ext4_inode_is_fast_symlink+0x2f2/0x3a0 ext4_evict_inode+0xc8c/0xff0 ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 ? do_raw_spin_unlock+0x53/0x8a0 ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 evict+0x4ac/0x950 ? proc_nr_inodes+0x310/0x310 ? trace_ext4_drop_inode+0xa2/0x220 ? _raw_spin_unlock+0x1a/0x30 ? iput+0x4cb/0x7e0 do_unlinkat+0x495/0x7c0 ? try_break_deleg+0x120/0x120 ? 0xffffffff81000000 ? __check_object_size+0x15a/0x210 ? strncpy_from_user+0x13e/0x250 ? getname_flags+0x1dc/0x530 __x64_sys_unlinkat+0xc8/0xf0 do_syscall_64+0x65/0x110 entry_SYSCALL_64_after_hwframe+0x67/0x6f RIP: 0033:0x434ffd Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 8 RSP: 002b:00007ffc50fa7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 RAX: ffffffffffffffda RBX: 00007ffc50fa7e18 RCX: 0000000000434ffd RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 RBP: 00007ffc50fa7be0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007ffc50fa7e08 R14: 00000000004bbf30 R15: 0000000000000001 </TASK>
The buggy address belongs to the object at ffff888012c12000 which belongs to the cache filp of size 360 The buggy address is located 196 bytes inside of freed 360-byte region [ffff888012c12000, ffff888012c12168)
The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c12 head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0x40(head|node=0|zone=0) page_type: f5(slab) raw: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004 raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 head: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004 head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 head: 0000000000000001 ffffea00004b0481 ffffffffffffffff 0000000000000000 head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected
Memory state around the buggy address: ffff888012c11f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff888012c12000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb > ffff888012c12080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff888012c12100: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc ffff888012c12180: fc fc fc fc fc fc fc fc fc ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64kUpgrade rtlaUpgrade bpftoolUpgrade kernel-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade python3-perfUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-coreUpgrade kernel-debug-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-debugUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-modulesUpgrade rvUpgrade kernel-64k-debug-develUpgrade kernel-coreUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-core | Jul 4, 2025 | May 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.182-123.190Upgrade kernel-livepatch-5.10.237-230.949Upgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perf | Jun 23, 2025 | May 1, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.25-32.101Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade perf-debuginfoUpgrade kernelUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel6.12-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-debuginfo | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Aug 13, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 30, 2025 | May 1, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 26, 2025 | May 1, 2025 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-zfcpdumpUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-debug | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade dtb-alteraUpgrade dtb-marvellUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-azure-develUpgrade kernel-syms-rt | Dec 5, 2025 | Jul 17, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-kvmUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-5.15Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-xilinxUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-aws-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibmUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1087-gcp-fips | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub