Can kernel-specific information from https://www.cve.org/ be applied to the kernels provided by Manjaro? Can I, for example, conclude from the information on CVE-2026-23111 ` https://www.cve.org/CVERecord/?id=CVE-2026-23111 ... unaffected from 6.12.70 through 6.12.* unaffected from 6.18.10 throug…

As I said - Manjaro kernels are built from upstream sources - if they implement the fixes then the answer is yes otherwise the answer is no. Certain hardware related patches not available upstream are applied. Please see core · GitLab for your specific kernel release

If the fix has been incorporated into upstream sources, they will included when Manjaro releases the next kernel update. You can always check what kernel your system uses uname -r Then draw your conclusion by comparing the versions

[image] [Stable Update] 2026-05-27 - Kernels, NVIDIA, Firefox, Thunderbird, Mesa, Blender Our current supported kernels linux612 6.12.91 linux618 6.18.33 [image] [Stable Update] 2026-05-02 - Kernels, Plasma, GNOME, Mesa, Systemd, VirtualBox, LibreOffice As of Linux 6.19.14, the 6.19 seri…

[image] linux-aarhus: upstream sources I’m not sure if I understand you correctly. My understanding is that “upstream sources” refers to the sources provided by kernel.org to the distributions. The kernel version/release numbers remain unchanged when the distribution—i.e. Manjaro—delivers th…

Although the term “upstream sources” was not fully clarified, I consider my question sufficiently answered.

[image] Acor: Although the term “upstream sources” was not fully clarified let me clarify - upstream sources equals the source as found on kernel.org and already deduced in previous comment.

General question about kernel fixes (CVE)

Support Kernel

nikgnomic 15 June 2026 12:51 3