Distributions

Jump directly to maintainer-maintained trackers. Always reconcile package versions with security announcements—never infer patch levels from kernel marketing names alone.

Additional derivatives (AlmaLinux, Rocky, Amazon Linux, etc.) inherit guidance from their upstream rebuild policies—monitor those vendors' CVE portals similarly.