| almalinux-10-6.12 |
6.12.0-124.56.5.el10_1.x86_64 |
- |
no-entries |
no crawler entries match the series (EOL or unpublished) |
| almalinux-9-5.14 |
5.14.0-687.5.3.el9_8.x86_64 |
5.14.0-687.38.1.el9_8.x86_64 |
stale |
distro ships a newer kernel than the last validated image |
| almalinux-9-5.14-k5.14.0-687.26.1.el9_8 |
5.14.0-687.26.1.el9_8.x86_64 |
- |
uncovered |
no kernel-crawler mapping |
| almalinux-9-5.14-k5.14.0-687.29.1.el9_8 |
5.14.0-687.29.1.el9_8.x86_64 |
- |
uncovered |
no kernel-crawler mapping |
| almalinux-9-5.14-k5.14.0-687.36.1.el9_8 |
5.14.0-687.36.1.el9_8.x86_64 |
- |
uncovered |
no kernel-crawler mapping |
| amazon-linux-2-5.10 |
5.10.260-259.1054.amzn2.x86_64 |
5.10.260-259.1061.amzn2.x86_64 |
stale |
distro ships a newer kernel than the last validated image |
| amazon-linux-2023-6.1 |
6.1.176-223.369.amzn2023.x86_64 |
6.1.177-224.371.amzn2023.x86_64 |
stale |
distro ships a newer kernel than the last validated image |
| centos-stream-10-6.12 |
6.12.0-226.el10.x86_64 |
- |
no-entries |
no crawler entries match the series (EOL or unpublished) |
| centos-stream-9-5.14 |
5.14.0-722.el9.x86_64 |
- |
no-entries |
no crawler entries match the series (EOL or unpublished) |
| centos-stream-9-5.14-k5.14.0-725.el9 |
5.14.0-725.el9.x86_64 |
- |
uncovered |
no kernel-crawler mapping |
| centos-stream-9-5.14-k5.14.0-729.el9 |
5.14.0-729.el9.x86_64 |
- |
uncovered |
no kernel-crawler mapping |
| centos-stream-9-5.14-k5.14.0-731.el9 |
5.14.0-731.el9.x86_64 |
- |
uncovered |
no kernel-crawler mapping |
| debian-11-5.10 |
5.10.0-42-cloud-amd64 |
- |
uncovered |
kernel-crawler does not publish debian entries |
| debian-12-6.1 |
6.1.0-47-cloud-amd64 |
- |
uncovered |
kernel-crawler does not publish debian entries |
| debian-13-6.12 |
6.12.86+deb13-cloud-amd64 |
- |
uncovered |
kernel-crawler does not publish debian entries |
| opensuse-leap-15.6-6.4 |
6.4.0-150600.23.100-default |
6.4.0-150600.21.3.x86_64 |
fresh |
- |
| oracle-linux-10-uek8-6.12 |
6.12.0-107.59.3.3.el10uek.x86_64 |
- |
no-entries |
no crawler entries match the series (EOL or unpublished) |
| oracle-linux-9-uek7-5.15 |
6.12.0-107.59.3.3.el9uek.x86_64 |
6.12.0-205.92.4.2.el9uek.x86_64 |
stale |
distro ships a newer kernel than the last validated image |
| oracle-linux-9-uek7-5.15-k6.12.0-204.92.4.4.el9uek |
6.12.0-204.92.4.4.el9uek.x86_64 |
- |
uncovered |
no kernel-crawler mapping |
| rhel-8-4.18 |
- |
- |
uncovered |
BYO subscription-walled RHEL image; the previous Oracle UEK observation was not valid RHEL freshness evidence |
| rocky-10-6.12 |
6.12.0-124.8.1.el10_1.x86_64 |
- |
no-entries |
no crawler entries match the series (EOL or unpublished) |
| rocky-9-5.14 |
5.14.0-687.10.1.el9_8.0.1.x86_64 |
5.14.0-687.39.1.el9_8.x86_64 |
stale |
distro ships a newer kernel than the last validated image |
| rocky-9-5.14-k5.14.0-687.26.1.el9_8 |
5.14.0-687.26.1.el9_8.x86_64 |
- |
uncovered |
no kernel-crawler mapping |
| rocky-9-5.14-k5.14.0-687.30.1.el9_8 |
5.14.0-687.30.1.el9_8.x86_64 |
- |
uncovered |
no kernel-crawler mapping |
| rocky-9-5.14-k5.14.0-687.36.1.el9_8 |
5.14.0-687.36.1.el9_8.x86_64 |
- |
uncovered |
no kernel-crawler mapping |
| sles-15.6-6.4 |
6.4.0-150600.23.100-default |
6.4.0-150600.21.3.x86_64 |
fresh |
- |
| ubuntu-16.04-4.4 |
4.4.0-210-generic |
4.4.0-210-generic |
fresh |
- |
| ubuntu-18.04-4.15 |
4.15.0-212-generic |
4.15.0-213-generic |
covered |
image lags, but ubuntu-18.04-4.15-k4.15.0-213 validated the newest kernel |
| ubuntu-18.04-4.15-k4.15.0-213 |
4.15.0-213-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-20.04-5.4 |
5.4.0-216-generic |
5.4.0-218-generic |
covered |
image lags, but ubuntu-20.04-5.4-k5.4.0-218 validated the newest kernel |
| ubuntu-20.04-5.4-k5.4.0-218 |
5.4.0-218-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-20.04-minimal-5.4 |
5.4.0-1133-kvm |
5.4.0-1133-kvm |
fresh |
- |
| ubuntu-20.10-5.8 |
5.8.0-63-generic |
- |
no-entries |
no crawler entries match the series (EOL or unpublished) |
| ubuntu-22.04-5.15 |
5.15.0-185-generic |
5.15.0-191-generic |
stale |
distro ships a newer kernel than the last validated image |
| ubuntu-22.04-5.15-k5.15.0-181 |
5.15.0-181-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-22.04-5.15-k5.15.0-186 |
5.15.0-186-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-22.04-5.15-k5.15.0-187 |
5.15.0-187-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-22.04-5.15-k5.15.0-189 |
5.15.0-189-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-22.04-5.15-lockdown |
5.15.0-185-generic |
5.15.0-191-generic |
stale |
distro ships a newer kernel than the last validated image |
| ubuntu-22.04-5.15-lockdown-k5.15.0-186 |
5.15.0-186-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-22.04-5.15-lockdown-k5.15.0-189 |
5.15.0-189-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-22.04-minimal-5.15 |
5.15.0-1104-kvm |
5.15.0-1107-kvm |
stale |
distro ships a newer kernel than the last validated image |
| ubuntu-22.04-minimal-5.15-k5.15.0-1105 |
5.15.0-1105-kvm |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-23.10-6.5 |
6.5.0-44-generic |
- |
no-entries |
no crawler entries match the series (EOL or unpublished) |
| ubuntu-24.04-6.8 |
6.8.0-136-generic |
6.8.0-139-generic |
covered |
image lags, but ubuntu-24.04-6.8-k6.8.0-139 validated the newest kernel |
| ubuntu-24.04-6.8-k6.8.0-136 |
6.8.0-136-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-24.04-6.8-k6.8.0-139 |
6.8.0-139-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-24.04-minimal-6.8 |
6.8.0-136-generic |
6.8.0-139-generic |
covered |
image lags, but ubuntu-24.04-minimal-6.8-k6.8.0-139 validated the newest kernel |
| ubuntu-24.04-minimal-6.8-k6.8.0-139 |
6.8.0-139-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-24.10-6.11 |
6.11.0-29-generic |
- |
no-entries |
no crawler entries match the series (EOL or unpublished) |
| ubuntu-25.04-6.14 |
6.14.0-37-generic |
6.14.0-37-generic |
fresh |
- |
| ubuntu-25.10-6.17 |
6.17.0-22-generic |
6.17.0-41-generic |
covered |
image lags, but ubuntu-25.10-6.17-k6.17.0-41 validated the newest kernel |
| ubuntu-25.10-6.17-k6.17.0-41 |
6.17.0-41-generic |
- |
uncovered |
no kernel-crawler mapping |
| ubuntu-25.10-minimal-6.17 |
6.17.0-40-generic |
6.17.0-41-generic |
covered |
image lags, but ubuntu-25.10-minimal-6.17-k6.17.0-41 validated the newest kernel |
| ubuntu-25.10-minimal-6.17-k6.17.0-41 |
6.17.0-41-generic |
- |
uncovered |
no kernel-crawler mapping |
The weekly freshness oracle found 8 profile(s) whose last-validated kernel is behind the newest shipping kernel in its series. Latest run: https://github.com/Kernel-Guard/bpfcompat/actions/runs/32040313379
Kernel freshness vs kernel-crawler
8 profile(s) are behind what their distro currently ships. Refresh the cached image and re-run the matrix to update evidence.
6 profile(s) are marked
covered: the stock image lags the newest package, but akernel-sweepprofile in the same family already installed and validated that kernel, so there is nothing to refresh.Inventory: falcosecurity/kernel-crawler (header-package index used as a freshness oracle; images stay vendor cloud images).
To refresh a profile: re-fetch its image, re-run the matrix, then update the baselines with
bpfcompat kernel-freshness --update-from-report <report.json>(see docs/image-pipeline.md).Filed and refreshed automatically by the kernel-freshness workflow; closes itself when all baselines are fresh.