{ "cveId": "CVE-2025-40274", "url": "https://patchblox.com/security/cve/CVE-2025-40274", "summary": "CVE-2025-40274 is fixed in 75 products on 1 platform, first by DEBIAN-CVE-2025-40274, released December 6, 2025. It is not reported as exploited. Patch Radar priority: High.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Remove bindings on memslot del...", "description": "In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying When unbinding a memslot from a guest_memfd instance, remove the bindings even if the guest_memfd file is dying, i.e. even if its file refcount has gone to zero. If the memslot is freed before the file is fully released, nullifying the memslot side of the binding in kvm_gmem_release() will write to freed memory, as detected by syzbot\u002BKASAN: ================================================================== BUG: KASAN: slab-use-after-free in kvm_gmem_release\u002B0x176/0x440 virt/kvm/guest_memfd.c:353 Write of size 8 at addr ffff88807befa508 by task syz.0.17/6022 CPU: 0 UID: 0 PID: 6022 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Call Trace: \u003CTASK\u003E dump_stack_lvl\u002B0x189/0x250 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report\u002B0xca/0x240 mm/kasan/report.c:482 kasan_report\u002B0x118/0x150 mm/kasan/report.c:595 kvm_gmem_release\u002B0x176/0x440 virt/kvm/guest_memfd.c:353 __fput\u002B0x44c/0xa70 fs/file_table.c:468 task_work_run\u002B0x1d4/0x260 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop\u002B0xe9/0x130 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64\u002B0x2bd/0xfa0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe\u002B0x77/0x7f RIP: 0033:0x7fbeeff8efc9 \u003C/TASK\u003E Allocated by task 6023: kasan_save_stack mm/kasan/common.c:56 [inline] kasan_save_track\u002B0x3e/0x80 mm/kasan/common.c:77 poison_kmalloc_redzone mm/kasan/common.c:397 [inline] __kasan_kmalloc\u002B0x93/0xb0 mm/kasan/common.c:414 kasan_kmalloc include/linux/kasan.h:262 [inline] __kmalloc_cache_noprof\u002B0x3e2/0x700 mm/slub.c:5758 kmalloc_noprof include/linux/slab.h:957 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] kvm_set_memory_region\u002B0x747/0xb90 virt/kvm/kvm_main.c:2104 kvm_vm_ioctl_set_memory_region\u002B0x6f/0xd0 virt/kvm/kvm_main.c:2154 kvm_vm_ioctl\u002B0x957/0xc60 virt/kvm/kvm_main.c:5201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl\u002B0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64\u002B0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe\u002B0x77/0x7f Freed by task 6023: kasan_save_stack mm/kasan/common.c:56 [inline] kasan_save_track\u002B0x3e/0x80 mm/kasan/common.c:77 kasan_save_free_info\u002B0x46/0x50 mm/kasan/generic.c:584 poison_slab_object mm/kasan/common.c:252 [inline] __kasan_slab_free\u002B0x5c/0x80 mm/kasan/common.c:284 kasan_slab_free include/linux/kasan.h:234 [inline] slab_free_hook mm/slub.c:2533 [inline] slab_free mm/slub.c:6622 [inline] kfree\u002B0x19a/0x6d0 mm/slub.c:6829 kvm_set_memory_region\u002B0x9c4/0xb90 virt/kvm/kvm_main.c:2130 kvm_vm_ioctl_set_memory_region\u002B0x6f/0xd0 virt/kvm/kvm_main.c:2154 kvm_vm_ioctl\u002B0x957/0xc60 virt/kvm/kvm_main.c:5201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl\u002B0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64\u002B0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe\u002B0x77/0x7f Deliberately don\u0027t acquire filemap invalid lock when the file is dying as the lifecycle of f_mapping is outside the purview of KVM. Dereferencing the mapping is *probably* fine, but there\u0027s no need to invalidate anything as memslot deletion is responsible for zapping SPTEs, and the only code that can access the dying file is kvm_gmem_release(), whose core code is mutual ---truncated---", "published": "2025-12-06T22:15:55Z", "severity": "high", "cvss": 7.8, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.00148, "epssPercentile": 0.04017, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "bpftool6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "dtb-aarch64", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "SUSE-SU-2026:20220-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20220-1", "released": "2026-02-02T10:12:16Z" }, { "platform": "linux", "product": "kernel-azure", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.20.24.1", "fix": "SUSE-SU-2026:0281-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0281-1", "released": "2026-01-23T16:03:47Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "SUSE-SU-2026:20220-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20220-1", "released": "2026-02-02T10:12:16Z" }, { "platform": "linux", "product": "kernel-default", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "SUSE-SU-2026:20220-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20220-1", "released": "2026-02-02T10:12:16Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1.160000.2.6", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1.150700.17.19.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.9.1.160000.2.6", "fix": "SUSE-SU-2026:20220-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20220-1", "released": "2026-02-02T10:12:16Z" }, { "platform": "linux", "product": "kernel-docs", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "SUSE-SU-2026:20220-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20220-1", "released": "2026-02-02T10:12:16Z" }, { "platform": "linux", "product": "kernel-kvmsmall", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-kvmsmall", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "SUSE-SU-2026:20220-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20220-1", "released": "2026-02-02T10:12:16Z" }, { "platform": "linux", "product": "kernel-livepatch-6.12.63-84.121", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP7-RT_Update_8", "release": "sles 15.7", "fixedVersion": "1-150700.1.3.1", "fix": "SUSE-SU-2026:0278-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0278-1", "released": "2026-01-23T15:08:32Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP7_Update_8", "release": "sles 15.7", "fixedVersion": "1-150700.15.3.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-obs-qa", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-obs-qa", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "SUSE-SU-2026:20220-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20220-1", "released": "2026-02-02T10:12:16Z" }, { "platform": "linux", "product": "kernel-rt", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-source", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "SUSE-SU-2026:20220-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20220-1", "released": "2026-02-02T10:12:16Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.20.24.1", "fix": "SUSE-SU-2026:0281-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0281-1", "released": "2026-01-23T16:03:47Z" }, { "platform": "linux", "product": "kernel-syms", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "SUSE-SU-2026:20220-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20220-1", "released": "2026-02-02T10:12:16Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.20.24.1", "fix": "SUSE-SU-2026:0281-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0281-1", "released": "2026-01-23T16:03:47Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-107.59.3.2.el9uek", "fix": "ELSA-2026-50006", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50006", "released": "2026-01-13T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "OPENSUSE-SU-2026:20145-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20145-1", "released": "2026-02-02T11:54:26Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.28.1", "fix": "SUSE-SU-2026:0315-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0315-1", "released": "2026-01-28T14:34:30Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.9.1", "fix": "SUSE-SU-2026:20220-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20220-1", "released": "2026-02-02T10:12:16Z" }, { "platform": "linux", "product": "kernel6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-headers", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-libbpf", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-libbpf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-libbpf-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-libbpf-static", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-tools", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.12.63-1", "fix": "DEBIAN-CVE-2025-40274", "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40274", "released": "2025-12-06T22:15:55Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "6.17.9-1", "fix": "DEBIAN-CVE-2025-40274", "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40274", "released": "2025-12-06T22:15:55Z" }, { "platform": "linux", "product": "perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.63-84.121.amzn2023", "fix": "ALAS2023-2026-1430", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1430", "released": "2026-02-16T09:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T06:59:42Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }