Skip to main content

Linux CVE-2026-23268

| EUVDEUVD-2026-12910 HIGH
2026-03-18 Linux
7.8
CVSS 3.1 · NVD
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Recon
    Gain local user access
  2. Delivery
    Open apparmorfs policy interface
  3. Exploit
    Identify privileged confused deputy process
  4. Install
    Trigger deputy to write to attacker's fd
  5. C2
    Deputy writes policy commands with elevated privileges
  6. Execute
    Disable AppArmor confinement or load malicious policy
  7. Impact
    Escalate to root via unconfined exploitation

Vulnerability Assessment

Exploitation Conditions

Requires local authenticated access with low-privilege user account (CVSS PR:L). Exploitation depends on presence of a privileged process that can be manipulated to write to attacker-supplied file descriptors - specifically processes running with CAP_MAC_ADMIN or broader root privileges that accept external input influencing write operations. Not exploitable against default configurations lacking such confused deputy candidates. Attack complexity is low (AC:L) once suitable deputy process is identified. No user interaction required (UI:N). Exploitation limited to systems using AppArmor mandatory access control (not applicable to SELinux-only distributions). Does not work against properly confined privileged processes with AppArmor policies that restrict apparmorfs access, only affects unconfined privileged processes. Remote exploitation impossible (AV:L) - requires existing shell or local code execution.

Impact

CVSS 7.8 (High) reflects local attack vector requiring low privileges with high confidentiality, integrity, and availability impact. However, EPSS 0.01% (3rd percentile) indicates very low probability of mass exploitation, suggesting this is primarily a targeted privilege escalation technique rather than widespread threat. Real-world risk depends heavily on deployment context: systems with privileged automation, container orchestration, or multi-tenant environments face higher risk because they provide potential confused deputy targets. The attack requires two conditions: an unprivileged attacker AND a manipulable privileged process willing to write to attacker-supplied file descriptors. This limits practical exploitation compared to direct kernel bugs. Ubuntu rated priority medium, aligning with targeted rather than critical risk. Patches available from upstream and major distributions reduce exposure window. Primary concern is bypassing AppArmor confinement in environments relying on mandatory access control for security boundaries, particularly container/namespace isolation.

Exploit ScenarioDerived

Low-privileged local attacker opens /sys/kernel/security/apparmor/.load or .replace interface, receiving a file descriptor. Attacker identifies privileged systemd service, cron job, or container runtime component that processes external input and performs file writes. Through command injection, path traversal, or similar weakness, attacker tricks privileged process into writing AppArmor policy commands to the attacker-controlled fd using /proc/self/fd/X path. Privileged process writes policy removal or replacement commands, executing with its elevated credentials while bypassing normal policy checks. Attacker achieves full policy management: removes confinement from restricted applications, blocks execution of security tools, or loads permissive policy enabling further exploitation.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv3 – Apr 18, 2026

Local privilege escalation in Linux kernel AppArmor allows low-privilege users to manipulate security policy via confused deputy attack. Attackers pass file descriptors for apparmorfs interfaces to privileged processes, enabling full policy management capabilities including disabling confinement and bypassing user namespace restrictions. Publicly available exploit code exists. EPSS score 0.01% suggests low widespread exploitation probability. Patches released for kernel 6.12.77, 6.18.18, 6.19.8, and 7.0-rc4 with multiple distribution advisories available.

Earlier versions of this analysis (2)
v2 Apr 18, 2026 - 09:42 cvss changed CVSS 7.8

Local privilege escalation in Linux kernel AppArmor allows low-privileged users to manipulate mandatory access control policies through a confused deputy attack. Attackers can pass file descriptors to the apparmorfs policy management interface to privileged processes, enabling unauthorized policy loading, replacement, or removal. This bypasses unprivileged user namespace restrictions and can lead to complete confinement removal or kernel exploitation. Publicly available exploit code exists, though EPSS probability remains low at 0.01%, and no CISA KEV listing is present, suggesting limited widespread exploitation. Patches available across multiple stable kernel branches including 6.12.77, 6.18.18, 6.19.8, and 7.0-rc4.

v1 Mar 18, 2026 - 18:15 CVSS 7.8

This vulnerability in the Linux kernel's AppArmor security module allows an unprivileged local user to perform privileged policy management operations through a confused deputy attack. An attacker can load, replace, and remove AppArmor security profiles by passing an opened file descriptor to a privileged process and manipulating it into writing to the AppArmor policy management interface, bypassing normal access controls. This enables complete circumvention of AppArmor confinement, denial of service attacks, bypass of unprivileged user namespace restrictions, and potential kernel exploitation for local privilege escalation. The vulnerability is not currently listed in the CISA KEV catalog and no CVSS score or EPSS data is available, but the technical severity is high given the policy management implications and the involvement of privilege escalation vectors.

RemediationAI

Update to patched Linux kernel versions 6.12.77 or later for 6.12.x series, 6.18.18 or later for 6.18.x series, 6.19.8 or later for 6.19.x series, or 7.0-rc4 or later for mainline development. Upstream patches available at https://git.kernel.org/stable/c/0fc63dd9170643d15c25681fca792539e23f4640 (and related commits). Distribution-specific updates: Ubuntu USN-8141-1 at https://ubuntu.com/security/notices/USN-8141-1, SUSE updates at https://www.suse.com/support/update/SUSE-SU-2026:1077/ and related advisories. Patches implement privilege verification ensuring the writing task's capabilities are a subset of the opening task's capabilities. Workarounds if patching is delayed: restrict execution of privileged automation that accepts file descriptors from untrusted sources, audit and harden setuid/setcap binaries that perform file operations on externally-provided paths or fds, implement additional namespace isolation to limit policy management scope, and monitor apparmorfs access patterns for anomalous write operations from unexpected process lineages. Note that changing apparmorfs permissions to 0600 breaks legitimate non-root namespace policy loading, so privilege verification is the only complete fix.

Affected VersionsENISA

Linux b7fd2c0340eacbee892425e9007647568b7f2a3c <0fc63dd9170643d15c25681fca792539e23f4640
Linux patch: 6.12.77
Linux patch: 7.0-rc4
Linux patch: 6.18.18
Linux patch: 6.19.8
Linux 4.11
Linux b7fd2c0340eacbee892425e9007647568b7f2a3c <b60b3f7a35c46b2e0ca934f9c988b8fca06d76c6
Linux b7fd2c0340eacbee892425e9007647568b7f2a3c <b6a94eeca9c6c8f7c55ad44c62c98324f51ec596
Linux patch: 0
Linux b7fd2c0340eacbee892425e9007647568b7f2a3c <6601e13e82841879406bf9f369032656f441a425

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

AppArmor is Linux kernel's mandatory access control framework. The vulnerability exists in apparmorfs file system interfaces used for policy management (load, replace, remove profiles). These interfaces historically used 0666 permissions to support non-root processes loading policy into separate namespaces. The flaw allows confused deputy attacks: an unprivileged user opens the apparmorfs interface (receives fd with their limited privileges), then passes that fd to a privileged process and manipulates it into writing policy commands. The kernel failed to verify that the writing task's privileges are a subset of the opening task's privileges, only checking credentials at file open time. Confined processes were protected by AppArmor policy checks, but unconfined privileged processes could be exploited as deputies. Affected products per CPE include all Linux kernel versions from 4.11 onwards through the introduction of commit b7fd2c0340eacbee892425e9007647568b7f2a3c until patched versions.

Know when the next one hits your stack

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Ubuntu MEDIUM
SUSE HIGH

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
Analysis Updated
Apr 18, 2026 - 09:42 vuln.today
v3 - CVSS changed
Analysis Updated
Apr 18, 2026 - 09:42 vuln.today
v2 - CVSS changed
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
CVE Published
Mar 18, 2026 - 17:54 nvd
HIGH 7.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix unprivileged local user can do privileged policy management

An unprivileged local user can load, replace, and remove profiles by opening the apparmorfs interfaces, via a confused deputy attack, by passing the opened fd to a privileged process, and getting the privileged process to write to the interface.

This does require a privileged target that can be manipulated to do the write for the unprivileged process, but once such access is achieved full policy management is possible and all the possible implications that implies: removing confinement, DoS of system or target applications by denying all execution, by-passing the unprivileged user namespace restriction, to exploiting kernel bugs for a local privilege escalation.

The policy management interface can not have its permissions simply changed from 0666 to 0600 because non-root processes need to be able to load policy to different policy namespaces.

Instead ensure the task writing the interface has privileges that are a subset of the task that opened the interface. This is already done via policy for confined processes, but unconfined can delegate access to the opened fd, by-passing the usual policy check.

Executive ViewAI

Why It Matters

CVE-2026-23268 is a local privilege escalation in Linux kernel AppArmor that allows low-privilege users to bypass security policies and disable application confinement through a confused deputy attack. This vulnerability directly undermines AppArmor's core function of restricting application capabilities, potentially allowing attackers to escalate privileges and disable mandatory access controls across affected Linux systems. Organizations running vulnerable kernel versions must prioritize patching to restore AppArmor enforcement integrity.

Business Impact: High
Compensating Controls

Apply vendor patch. If patching cannot be completed within 7 days: disable AppArmor enforcement on affected systems and implement alternative privilege separation mechanisms (SELinux, seccomp, or process capabilities); restrict local system access via PAM/SSH hardening; monitor for suspicious process capability elevation or policy modification attempts via audit logs; isolate affected systems from multi-tenant environments until patched.

Threat Intelligence Overview

EPSS Score
0.0%
Top 97% exploitable
Data Quality
6 sources
Confidence: High

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.0%
Patch available Yes
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Scheduled
Exploitation· derived
None
System Exposure· derived
Small
Automatable· derived
No
Human Impact
High

Priority Score

39
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +39
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.

Related Vulnerabilities in Linux Kernel AppArmor Vulnerabilities

View all 2

Vendor StatusVendor

Ubuntu

Priority: Medium
linux
Release Status Version
trusty needs-triage -
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-hwe
Release Status Version
xenial needs-triage -
bionic ignored replaced by linux-hwe-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-5.8
Release Status Version
focal ignored superseded by linux-hwe-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.11
linux-hwe-5.11
Release Status Version
focal ignored superseded by linux-hwe-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.13
linux-hwe-5.13
Release Status Version
focal ignored superseded by linux-hwe-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.15
linux-hwe-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.2
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.5
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.8
linux-hwe-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-hwe-6.14
questing DNE -
upstream ignored superseded by linux-hwe-6.14
linux-hwe-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-hwe-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-hwe-edge
Release Status Version
xenial ignored superseded by linux-hwe
bionic ignored superseded by linux-hwe-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-lts-xenial
Release Status Version
trusty needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-kvm
Release Status Version
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-aws
Release Status Version
trusty needs-triage -
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-aws-5.0
Release Status Version
bionic ignored superseded by linux-aws-5.3
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.3
linux-aws-5.3
Release Status Version
bionic ignored superseded by linux-aws-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.4
linux-aws-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-5.8
Release Status Version
focal ignored superseded by linux-aws-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.11
linux-aws-5.11
Release Status Version
focal ignored superseded by linux-aws-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.13
linux-aws-5.13
Release Status Version
focal ignored superseded by linux-aws-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.15
linux-aws-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.2
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.5
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.8
linux-aws-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-aws-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-aws-hwe
Release Status Version
xenial needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure
Release Status Version
trusty needs-triage -
xenial needs-triage -
bionic ignored superseded by linux-azure-5.3
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-azure-4.15
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-5.3
Release Status Version
bionic ignored superseded by linux-azure-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.4
linux-azure-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-5.8
Release Status Version
focal ignored superseded by linux-azure-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.11
linux-azure-5.11
Release Status Version
focal ignored superseded by linux-azure-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.13
linux-azure-5.13
Release Status Version
focal ignored superseded by linux-azure-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.15
linux-azure-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.2
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.5
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.8
linux-azure-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-azure-6.14
questing DNE -
upstream ignored superseded by linux-azure-6.14
linux-azure-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-fde
Release Status Version
focal ignored superseded by linux-azure-fde-5.15
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-azure-fde-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-fde-6.2
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
questing DNE -
upstream ignored replaced by linux-azure-6.5
linux-azure-fde-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-fde-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-fde-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-nvidia
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-nvidia-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-bluefield
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-edge
Release Status Version
bionic ignored superseded by linux-azure-5.3
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.3
linux-fips
Release Status Version
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-fips
Release Status Version
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-fips
Release Status Version
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-fips
Release Status Version
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp
Release Status Version
xenial needs-triage -
bionic ignored superseded by linux-gcp-5.3
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-gcp-4.15
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-5.3
Release Status Version
bionic ignored superseded by linux-gcp-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.4
linux-gcp-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-5.8
Release Status Version
focal ignored superseded by linux-gcp-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.11
linux-gcp-5.11
Release Status Version
focal ignored superseded by linux-gcp-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.13
linux-gcp-5.13
Release Status Version
focal ignored superseded by linux-gcp-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.15
linux-gcp-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.2
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.5
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.8
linux-gcp-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-gcp-6.14
questing DNE -
upstream ignored superseded by linux-gcp-6.14
linux-gcp-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gcp-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gke
Release Status Version
focal ignored end of kernel support
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gke-4.15
Release Status Version
bionic ignored superseded by linux-gke-5.0
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gke-5.0
linux-gke-5.4
Release Status Version
bionic ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-gkeop
Release Status Version
focal ignored end of kernel support
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gkeop-5.4
Release Status Version
bionic ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-ibm
Release Status Version
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-ibm-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-ibm-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-ibm-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-intel-iotg
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-intel-iotg-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-iot
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-intel-iot-realtime
Release Status Version
jammy ignored superseded by Ubuntu Pro ppa version
noble DNE -
questing DNE -
upstream needs-triage -
linux-lowlatency
Release Status Version
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-lowlatency-hwe-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
linux-lowlatency-hwe-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
noble ignored replaced by linux-hwe-6.14
questing DNE -
upstream ignored replaced by linux-hwe-6.14
linux-nvidia
Release Status Version
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.5
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.8
linux-nvidia-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-nvidia-6.11
Release Status Version
jammy DNE -
noble ignored end of kernel support
questing DNE -
upstream ignored end of kernel support
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-nvidia-tegra
Release Status Version
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-nvidia-tegra-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-nvidia-tegra-igx
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle
Release Status Version
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-oracle-5.0
Release Status Version
bionic ignored superseded by linux-oracle-5.3
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.3
linux-oracle-5.3
Release Status Version
bionic ignored superseded by linux-oracle-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.4
linux-oracle-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle-5.8
Release Status Version
focal ignored superseded by linux-oracle-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.11
linux-oracle-5.11
Release Status Version
focal ignored superseded by linux-oracle-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.13
linux-oracle-5.13
Release Status Version
focal ignored superseded by linux-oracle-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.15
linux-oracle-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-6.8
linux-oracle-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-oracle-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-oem
Release Status Version
bionic ignored replaced by linux-hwe-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-oem-5.6
Release Status Version
focal ignored superseded by linux-oem-5.10
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.10
linux-oem-5.10
Release Status Version
focal ignored superseded by linux-oem-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.13
linux-oem-5.13
Release Status Version
focal ignored superseded by linux-oem-5.14
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.14
linux-oem-5.14
Release Status Version
focal ignored replaced by linux-hwe-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored replaced by linux-hwe-5.15
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.5
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.8
linux-oem-6.8
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
questing DNE -
upstream ignored superseded by linux-oem-6.14
linux-oem-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
questing DNE -
upstream ignored superseded by linux-oem-6.14
linux-oem-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-oem-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-raspi
Release Status Version
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-raspi2
Release Status Version
focal ignored replaced by linux-raspi
jammy DNE -
noble DNE -
questing DNE -
upstream ignored replaced by linux-raspi
linux-raspi-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-raspi-realtime
Release Status Version
jammy DNE -
noble ignored superseded by Ubuntu Pro ppa version
questing DNE -
upstream needs-triage -
linux-realtime
Release Status Version
jammy ignored superseded by Ubuntu Pro ppa version
noble ignored superseded by Ubuntu Pro ppa version
questing needs-triage -
upstream needs-triage -
linux-realtime-6.8
Release Status Version
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-realtime-6.14
Release Status Version
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-riscv
Release Status Version
focal ignored superseded by linux-riscv-5.8
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
questing needs-triage -
upstream needs-triage -
linux-riscv-5.8
Release Status Version
focal ignored superseded by linux-riscv-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.11
linux-riscv-5.11
Release Status Version
focal ignored superseded by linux-riscv-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.13
linux-riscv-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-riscv-6.8
linux-riscv-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-riscv-6.14
Release Status Version
jammy DNE -
noble ignored superseded by linux-riscv-6.17
questing DNE -
upstream ignored superseded by linux-riscv-6.17
linux-riscv-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-starfive-6.5
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-xilinx
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-xilinx-zynqmp
Release Status Version
focal needs-triage -
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-realtime-6.17
Release Status Version
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -

Debian

linux
Release Status Fixed Version Urgency
bullseye fixed 5.10.251-1 -
bullseye (security) fixed 5.10.251-1 -
bookworm fixed 6.1.164-1 -
bookworm (security) fixed 6.1.164-1 -
trixie fixed 6.12.74-2 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-2 -
sid fixed 6.19.8-1 -
(unstable) fixed 6.19.6-2 -

SUSE

Severity: High
Product Status
Container suse/sle-micro/base-5.5:2.0.4-5.8.254 Affected
Container suse/sle-micro/kvm-5.5:2.0.4-3.5.489 Affected
Container suse/sle-micro/rt-5.5:latest Affected
Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Affected
Image SLES15-SP7-SAP-Azure-LI-BYOS-Production Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production Image SLES15-SP7-SAP-EC2 Affected

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy