Every CVE Search/ Get API key

CVE-2024-57849

s390/cpum_sf: Handle CPU hotplug remove during sampling

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

s390/cpum_sf: Handle CPU hotplug remove during sampling

CPU hotplug remove handling triggers the following function call sequence:

CPUHP_AP_PERF_S390_SF_ONLINE --> s390_pmu_sf_offline_cpu() ... CPUHP_AP_PERF_ONLINE --> perf_event_exit_cpu()

The s390 CPUMF sampling CPU hotplug handler invokes:

s390_pmu_sf_offline_cpu() +--> cpusf_pmu_setup() +--> setup_pmc_cpu() +--> deallocate_buffers()

This function de-allocates all sampling data buffers (SDBs) allocated for that CPU at event initialization. It also clears the PMU_F_RESERVED bit. The CPU is gone and can not be sampled.

With the event still being active on the removed CPU, the CPU event hotplug support in kernel performance subsystem triggers the following function calls on the removed CPU:

perf_event_exit_cpu() +--> perf_event_exit_cpu_context() +--> __perf_event_exit_context() +--> __perf_remove_from_context() +--> event_sched_out() +--> cpumsf_pmu_del() +--> cpumsf_pmu_stop() +--> hw_perf_event_update()

to stop and remove the event. During removal of the event, the sampling device driver tries to read out the remaining samples from the sample data buffers (SDBs). But they have already been freed (and may have been re-assigned). This may lead to a use after free situation in which case the samples are most likely invalid. In the best case the memory has not been reassigned and still contains valid data.

Remedy this situation and check if the CPU is still in reserved state (bit PMU_F_RESERVED set). In this case the SDBs have not been released an contain valid data. This is always the case when the event is removed (and no CPU hotplug off occured). If the PMU_F_RESERVED bit is not set, the SDB buffers are gone.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.21%Up 0.2 points since Jan 12, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

s390/cpum_sf: Handle CPU hotplug remove during sampling

In the Linux kernel, the following vulnerability has been resolved:

s390/cpum_sf: Handle CPU hotplug remove during sampling

CPU hotplug remove handling triggers the following function call sequence:

CPUHP_AP_PERF_S390_SF_ONLINE --> s390_pmu_sf_offline_cpu() ... CPUHP_AP_PERF_ONLINE --> perf_event_exit_cpu()

The s390 CPUMF sampling CPU hotplug handler invokes:

s390_pmu_sf_offline_cpu() +--> cpusf_pmu_setup() +--> setup_pmc_cpu() +--> deallocate_buffers()

This function de-allocates all sampling data buffers (SDBs) allocated for that CPU at event initialization. It also clears the PMU_F_RESERVED bit. The CPU is gone and can not be sampled.

With the event still being active on the removed CPU, the CPU event hotplug support in kernel performance subsystem triggers the following function calls on the removed CPU:

perf_event_exit_cpu() +--> perf_event_exit_cpu_context() +--> __perf_event_exit_context() +--> __perf_remove_from_context() +--> event_sched_out() +--> cpumsf_pmu_del() +--> cpumsf_pmu_stop() +--> hw_perf_event_update()

to stop and remove the event. During removal of the event, the sampling device driver tries to read out the remaining samples from the sample data buffers (SDBs). But they have already been freed (and may have been re-assigned). This may lead to a use after free situation in which case the samples are most likely invalid. In the best case the memory has not been reassigned and still contains valid data.

Remedy this situation and check if the CPU is still in reserved state (bit PMU_F_RESERVED set). In this case the SDBs have not been released an contain valid data. This is always the case when the event is removed (and no CPU hotplug off occured). If the PMU_F_RESERVED bit is not set, the SDB buffers are gone.

Record
CVE-2024-57849
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2024-53773 7.8

In the Linux kernel, the following vulnerability has been resolved:

s390/cpum_sf: Handle CPU hotplug remove during sampling

CPU hotplug remove handling triggers the following function call sequence:

CPUHP_AP_PERF_S390_SF_ONLINE --> s390_pmu_sf_offline_cpu() ... CPUHP_AP_PERF_ONLINE --> perf_event_exit_cpu()

The s390 CPUMF sampling CPU hotplug handler invokes:

s390_pmu_sf_offline_cpu() +--> cpusf_pmu_setup() +--> setup_pmc_cpu() +--> deallocate_buffers()

This function de-allocates all sampling data buffers (SDBs) allocated for that CPU at event initialization. It also clears the PMU_F_RESERVED bit. The CPU is gone and can not be sampled.

With the event still being active on the removed CPU, the CPU event hotplug support in kernel performance subsystem triggers the following function calls on the removed CPU:

perf_event_exit_cpu() +--> perf_event_exit_cpu_context() +--> __perf_event_exit_context() +--> __perf_remove_from_context() +--> event_sched_out() +--> cpumsf_pmu_del() +--> cpumsf_pmu_stop() +--> hw_perf_event_update()

to stop and remove the event. During removal of the event, the sampling device driver tries to read out the remaining samples from the sample data buffers (SDBs). But they have already been freed (and may have been re-assigned). This may lead to a use after free situation in which case the samples are most likely invalid. In the best case the memory has not been reassigned and still contains valid data.

Remedy this situation and check if the CPU is still in reserved state (bit PMU_F_RESERVED set). In this case the SDBs have not been released an contain valid data. This is always the case when the event is removed (and no CPU hotplug off occured). If the PMU_F_RESERVED bit is not set, the SDB buffers are gone.

Record
EUVD-2024-53773
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-q4cg-m7j8-ggr6 7.8

In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU...

In the Linux kernel, the following vulnerability has been resolved:

s390/cpum_sf: Handle CPU hotplug remove during sampling

CPU hotplug remove handling triggers the following function call sequence:

CPUHP_AP_PERF_S390_SF_ONLINE --> s390_pmu_sf_offline_cpu() ... CPUHP_AP_PERF_ONLINE --> perf_event_exit_cpu()

The s390 CPUMF sampling CPU hotplug handler invokes:

s390_pmu_sf_offline_cpu() +--> cpusf_pmu_setup() +--> setup_pmc_cpu() +--> deallocate_buffers()

This function de-allocates all sampling data buffers (SDBs) allocated for that CPU at event initialization. It also clears the PMU_F_RESERVED bit. The CPU is gone and can not be sampled.

With the event still being active on the removed CPU, the CPU event hotplug support in kernel performance subsystem triggers the following function calls on the removed CPU:

perf_event_exit_cpu() +--> perf_event_exit_cpu_context() +--> __perf_event_exit_context() +--> __perf_remove_from_context() +--> event_sched_out() +--> cpumsf_pmu_del() +--> cpumsf_pmu_stop() +--> hw_perf_event_update()

to stop and remove the event. During removal of the event, the sampling device driver tries to read out the remaining samples from the sample data buffers (SDBs). But they have already been freed (and may have been re-assigned). This may lead to a use after free situation in which case the samples are most likely invalid. In the best case the memory has not been reassigned and still contains valid data.

Remedy this situation and check if the CPU is still in reserved state (bit PMU_F_RESERVED set). In this case the SDBs have not been released an contain valid data. This is always the case when the event is removed (and no CPU hotplug off occured). If the PMU_F_RESERVED bit is not set, the SDB buffers are gone.

Record
GHSA-q4cg-m7j8-ggr6
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

s390/cpum_sf: Handle CPU hotplug remove during sampling

CPU hotplug remove handling triggers the following function call sequence:

CPUHP_AP_PERF_S390_SF_ONLINE --> s390_pmu_sf_offline_cpu() ... CPUHP_AP_PERF_ONLINE --> perf_event_exit_cpu()

The s390 CPUMF sampling CPU hotplug handler invokes:

s390_pmu_sf_offline_cpu() +--> cpusf_pmu_setup() +--> setup_pmc_cpu() +--> deallocate_buffers()

This function de-allocates all sampling data buffers (SDBs) allocated for that CPU at event initialization. It also clears the PMU_F_RESERVED bit. The CPU is gone and can not be sampled.

With the event still being active on the removed CPU, the CPU event hotplug support in kernel performance subsystem triggers the following function calls on the removed CPU:

perf_event_exit_cpu() +--> perf_event_exit_cpu_context() +--> __perf_event_exit_context() +--> __perf_remove_from_context() +--> event_sched_out() +--> cpumsf_pmu_del() +--> cpumsf_pmu_stop() +--> hw_perf_event_update()

to stop and remove the event. During removal of the event, the sampling device driver tries to read out the remaining samples from the sample data buffers (SDBs). But they have already been freed (and may have been re-assigned). This may lead to a use after free situation in which case the samples are most likely invalid. In the best case the memory has not been reassigned and still contains valid data.

Remedy this situation and check if the CPU is still in reserved state (bit PMU_F_RESERVED set). In this case the SDBs have not been released an contain valid data. This is always the case when the event is removed (and no CPU hotplug off occured). If the PMU_F_RESERVED bit is not set, the SDB buffers are gone.

Record
CVE-2024-57849
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2024-57849 7.8
Record
BELL-CVE-2024-57849
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

s390/cpum_sf: Handle CPU hotplug remove during sampling

In the Linux kernel, the following vulnerability has been resolved:

s390/cpum_sf: Handle CPU hotplug remove during sampling

CPU hotplug remove handling triggers the following function call sequence:

CPUHP_AP_PERF_S390_SF_ONLINE --> s390_pmu_sf_offline_cpu() ... CPUHP_AP_PERF_ONLINE --> perf_event_exit_cpu()

The s390 CPUMF sampling CPU hotplug handler invokes:

s390_pmu_sf_offline_cpu() +--> cpusf_pmu_setup() +--> setup_pmc_cpu() +--> deallocate_buffers()

This function de-allocates all sampling data buffers (SDBs) allocated for that CPU at event initialization. It also clears the PMU_F_RESERVED bit. The CPU is gone and can not be sampled.

With the event still being active on the removed CPU, the CPU event hotplug support in kernel performance subsystem triggers the following function calls on the removed CPU:

perf_event_exit_cpu() +--> perf_event_exit_cpu_context() +--> __perf_event_exit_context() +--> __perf_remove_from_context() +--> event_sched_out() +--> cpumsf_pmu_del() +--> cpumsf_pmu_stop() +--> hw_perf_event_update()

to stop and remove the event. During removal of the event, the sampling device driver tries to read out the remaining samples from the sample data buffers (SDBs). But they have already been freed (and may have been re-assigned). This may lead to a use after free situation in which case the samples are most likely invalid. In the best case the memory has not been reassigned and still contains valid data.

Remedy this situation and check if the CPU is still in reserved state (bit PMU_F_RESERVED set). In this case the SDBs have not been released an contain valid data. This is always the case when the event is removed (and no CPU hotplug off occured). If the PMU_F_RESERVED bit is not set, the SDB buffers are gone.

Record
CVE-2024-57849
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 47 moreShow less
OSVDEBIAN-CVE-2024-57849 7.8

In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHP_AP_PERF_S390_SF_ONLINE --> s390_pmu_sf_offline_cpu() ... CPUHP_AP_PERF_ONLINE --> perf_event_exit_cpu() The s390 CPUMF sampling CPU hotplug handler invokes: s390_pmu_sf_offline_cpu() +--> cpusf_pmu_setup() +--> setup_pmc_cpu() +--> deallocate_buffers() This function de-allocates all sampling data buffers (SDBs) allocated for that CPU at event initialization. It also clears the PMU_F_RESERVED bit. The CPU is gone and can not be sampled. With the event still being active on the removed CPU, the CPU event hotplug support in kernel performance subsystem triggers the following function calls on the removed CPU: perf_event_exit_cpu() +--> perf_event_exit_cpu_context() +--> __perf_event_exit_context() +--> __perf_remove_from_context() +--> event_sched_out() +--> cpumsf_pmu_del() +--> cpumsf_pmu_stop() +--> hw_perf_event_update() to stop and remove the event. During removal of the event, the sampling device driver tries to read out the remaining samples from the sample data buffers (SDBs). But they have already been freed (and may have been re-assigned). This may lead to a use after free situation in which case the samples are most likely invalid. In the best case the memory has not been reassigned and still contains valid data. Remedy this situation and check if the CPU is still in reserved state (bit PMU_F_RESERVED set). In this case the SDBs have not been released an contain valid data. This is always the case when the event is removed (and no CPU hotplug off occured). If the PMU_F_RESERVED bit is not set, the SDB buffers are gone.

Record
DEBIAN-CVE-2024-57849
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1158 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ila: call nf_unregister_net_hooks() sooner

syzbot found an use-after-free Read in ila_nf_input [1]

Issue here is that ila_xlat_exit_net() frees the rhashtable, then call nf_unregister_net_hooks().

It should be done in the reverse way, with a synchronize_rcu().

This is a good match for a pre_exit() method.

[1] BUG: KASAN: use-after-free in rht_key_hashfn include/linux/rhashtable.h:159 [inline] BUG: KASAN: use-after-free in __rhashtable_lookup include/linux/rhashtable.h:604 [inline] BUG: KASAN: use-after-free in rhashtable_lookup include/linux/rhashtable.h:646 [inline] BUG: KASAN: use-after-free in rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672 Read of size 4 at addr ffff888064620008 by task ksoftirqd/0/16

CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-rc4-syzkaller-00238-g2ad6d23f465a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 rht_key_hashfn include/linux/rhashtable.h:159 [inline] __rhashtable_lookup include/linux/rhashtable.h:604 [inline] rhashtable_lookup include/linux/rhashtable.h:646 [inline] rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672 ila_lookup_wildcards net/ipv6/ila/ila_xlat.c:132 [inline] ila_xlat_addr net/ipv6/ila/ila_xlat.c:652 [inline] ila_nf_input+0x1fe/0x3c0 net/ipv6/ila/ila_xlat.c:190 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5775 process_backlog+0x662/0x15b0 net/core/dev.c:6108 __napi_poll+0xcb/0x490 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6963 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 run_ksoftirqd+0xca/0x130 kernel/softirq.c:928 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK>

The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x64620 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: 0xbfffffff(buddy) raw: 00fff00000000000 ffffea0000959608 ffffea00019d9408 0000000000000000 raw: 0000000000000000 0000000000000003 00000000bfffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as freed page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52dc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_ZERO), pid 5242, tgid 5242 (syz-executor), ts 73611328570, free_ts 618981657187 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1493 prep_new_page mm/page_alloc.c:1501 [inline] get_page_from_freelist+0x2e4c/0x2f10 mm/page_alloc.c:3439 __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4695 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] ___kmalloc_large_node+0x8b/0x1d0 mm/slub.c:4103 __kmalloc_large_node_noprof+0x1a/0x80 mm/slub.c:4130 __do_kmalloc_node mm/slub.c:4146 [inline] __kmalloc_node_noprof+0x2d2/0x440 mm/slub.c:4164 __kvmalloc_node_noprof+0x72/0x190 mm/util.c:650 bucket_table_alloc lib/rhashtable.c:186 [inline] rhashtable_init_noprof+0x534/0xa60 lib/rhashtable.c:1071…

Record
OESA-2025-1158
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1159 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: wwan: t7xx: Fix FSM command timeout issue

When driver processes the internal state change command, it use an asynchronous thread to process the command operation. If the main thread detects that the task has timed out, the asynchronous thread will panic when executing the completion notification because the main thread completion object has been released.

BUG: unable to handle page fault for address: fffffffffffffff8 PGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:complete_all+0x3e/0xa0 [...] Call Trace: <TASK> ? __die_body+0x68/0xb0 ? page_fault_oops+0x379/0x3e0 ? exc_page_fault+0x69/0xa0 ? asm_exc_page_fault+0x22/0x30 ? complete_all+0x3e/0xa0 fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)] ? __pfx_autoremove_wake_function+0x10/0x10 kthread+0xd8/0x110 ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)] ? __pfx_kthread+0x10/0x10 ret_from_fork+0x38/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK> [...] CR2: fffffffffffffff8 ---[ end trace 0000000000000000 ]---

Use the reference counter to ensure safe release as Sergey suggests: https://lore.kernel.org/all/[email protected]/(CVE-2024-39282)

In the Linux kernel, the following vulnerability has been resolved:

i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request

Bus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when the ring is being stopped. Depending on timing between ring stop request completion, interrupt handler removal and code execution this may lead to a NULL pointer dereference in hci_dma_irq_handler() if it gets to run after the io_data pointer is set to NULL in hci_dma_cleanup().

Prevent this my masking the ring interrupts before ring stop request.(CVE-2024-45828)

In the Linux kernel, the following vulnerability has been resolved:

ethtool: fail closed if we can't get max channel used in indirection tables

Commit 0d1b7d6c9274 ("bnxt: fix crashes when reducing ring count with active RSS contexts") proves that allowing indirection table to contain channels with out of bounds IDs may lead to crashes. Currently the max channel check in the core gets skipped if driver can't fetch the indirection table or when we can't allocate memory.

Both of those conditions should be extremely rare but if they do happen we should try to be safe and fail the channel change.(CVE-2024-46834)

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change

When disabling wifi mt7921_ipv6_addr_change() is called as a notifier. At this point mvif->phy is already NULL so we cannot use it here.(CVE-2024-46860)

In the Linux kernel, the following vulnerability has been resolved:

usbnet: ipheth: do not stop RX on failing RX callback

RX callbacks can fail for multiple reasons:

  • Payload too short
  • Payload formatted incorrecly (e.g. bad NCM framing)
  • Lack of memory

None of these should cause the driver to seize up.

Make such failures non-critical and continue processing further incoming URBs.(CVE-2024-46861)

In the Linux kernel, the following vulnerability has been resolved:

nvme-rdma: unquiesce admin_q before destroy it

Kernel will hang on destroy admin_q while we create ctrl failed, such as following calltrace:

PID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: "nvme" #0 [ff61d23de260fb78] __schedule at ffffffff8323bc15 #1 [ff61d23de260fc08] schedule at ffffffff8323c014 #2 [ff61d23de260fc28] blk_mq_freeze_queue_wait at ffffffff82a3dba1 #3 [ff61d23de260fc78] blk_freeze_queue at ffffffff82a4113a #4 [ff61d23de260fc90] blk_cleanup_queue at ffffffff82a33006 #5 [ff61d23de260fcb0] nvme_rdma_destroy_admin_queue at ffffffffc12686ce #6 [ff61d23de260fcc8]…

Record
OESA-2025-1159
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1160 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: wwan: t7xx: Fix FSM command timeout issue

When driver processes the internal state change command, it use an asynchronous thread to process the command operation. If the main thread detects that the task has timed out, the asynchronous thread will panic when executing the completion notification because the main thread completion object has been released.

BUG: unable to handle page fault for address: fffffffffffffff8 PGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:complete_all+0x3e/0xa0 [...] Call Trace: <TASK> ? __die_body+0x68/0xb0 ? page_fault_oops+0x379/0x3e0 ? exc_page_fault+0x69/0xa0 ? asm_exc_page_fault+0x22/0x30 ? complete_all+0x3e/0xa0 fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)] ? __pfx_autoremove_wake_function+0x10/0x10 kthread+0xd8/0x110 ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)] ? __pfx_kthread+0x10/0x10 ret_from_fork+0x38/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK> [...] CR2: fffffffffffffff8 ---[ end trace 0000000000000000 ]---

Use the reference counter to ensure safe release as Sergey suggests: https://lore.kernel.org/all/[email protected]/(CVE-2024-39282)

In the Linux kernel, the following vulnerability has been resolved:

i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request

Bus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when the ring is being stopped. Depending on timing between ring stop request completion, interrupt handler removal and code execution this may lead to a NULL pointer dereference in hci_dma_irq_handler() if it gets to run after the io_data pointer is set to NULL in hci_dma_cleanup().

Prevent this my masking the ring interrupts before ring stop request.(CVE-2024-45828)

In the Linux kernel, the following vulnerability has been resolved:

ethtool: fail closed if we can't get max channel used in indirection tables

Commit 0d1b7d6c9274 ("bnxt: fix crashes when reducing ring count with active RSS contexts") proves that allowing indirection table to contain channels with out of bounds IDs may lead to crashes. Currently the max channel check in the core gets skipped if driver can't fetch the indirection table or when we can't allocate memory.

Both of those conditions should be extremely rare but if they do happen we should try to be safe and fail the channel change.(CVE-2024-46834)

In the Linux kernel, the following vulnerability has been resolved:

nvme-rdma: unquiesce admin_q before destroy it

Kernel will hang on destroy admin_q while we create ctrl failed, such as following calltrace:

PID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: "nvme" #0 [ff61d23de260fb78] __schedule at ffffffff8323bc15 #1 [ff61d23de260fc08] schedule at ffffffff8323c014 #2 [ff61d23de260fc28] blk_mq_freeze_queue_wait at ffffffff82a3dba1 #3 [ff61d23de260fc78] blk_freeze_queue at ffffffff82a4113a #4 [ff61d23de260fc90] blk_cleanup_queue at ffffffff82a33006 #5 [ff61d23de260fcb0] nvme_rdma_destroy_admin_queue at ffffffffc12686ce #6 [ff61d23de260fcc8] nvme_rdma_setup_ctrl at ffffffffc1268ced #7 [ff61d23de260fd28] nvme_rdma_create_ctrl at ffffffffc126919b #8 [ff61d23de260fd68] nvmf_dev_write at ffffffffc024f362 #9 [ff61d23de260fe38] vfs_write at ffffffff827d5f25 RIP: 00007fda7891d574 RSP: 00007ffe2ef06958 RFLAGS: 00000202 RAX: ffffffffffffffda RBX: 000055e8122a4d90 RCX: 00007fda7891d574 RDX: 000000000000012b RSI: 000055e8122a4d90 RDI: 0000000000000004 RBP: 00007ffe2ef079c0 R8: 000000000000012b R9: 000055e8122a4d90 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 R13: 000055e8122923c0 R14: 000000000000012b R15: 00007fda78a54500 ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b

This due to we have…

Record
OESA-2025-1160
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1162 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ila: call nf_unregister_net_hooks() sooner

syzbot found an use-after-free Read in ila_nf_input [1]

Issue here is that ila_xlat_exit_net() frees the rhashtable, then call nf_unregister_net_hooks().

It should be done in the reverse way, with a synchronize_rcu().

This is a good match for a pre_exit() method.

[1] BUG: KASAN: use-after-free in rht_key_hashfn include/linux/rhashtable.h:159 [inline] BUG: KASAN: use-after-free in __rhashtable_lookup include/linux/rhashtable.h:604 [inline] BUG: KASAN: use-after-free in rhashtable_lookup include/linux/rhashtable.h:646 [inline] BUG: KASAN: use-after-free in rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672 Read of size 4 at addr ffff888064620008 by task ksoftirqd/0/16

CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-rc4-syzkaller-00238-g2ad6d23f465a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 rht_key_hashfn include/linux/rhashtable.h:159 [inline] __rhashtable_lookup include/linux/rhashtable.h:604 [inline] rhashtable_lookup include/linux/rhashtable.h:646 [inline] rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672 ila_lookup_wildcards net/ipv6/ila/ila_xlat.c:132 [inline] ila_xlat_addr net/ipv6/ila/ila_xlat.c:652 [inline] ila_nf_input+0x1fe/0x3c0 net/ipv6/ila/ila_xlat.c:190 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5775 process_backlog+0x662/0x15b0 net/core/dev.c:6108 __napi_poll+0xcb/0x490 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6963 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 run_ksoftirqd+0xca/0x130 kernel/softirq.c:928 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK>

The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x64620 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: 0xbfffffff(buddy) raw: 00fff00000000000 ffffea0000959608 ffffea00019d9408 0000000000000000 raw: 0000000000000000 0000000000000003 00000000bfffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as freed page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52dc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_ZERO), pid 5242, tgid 5242 (syz-executor), ts 73611328570, free_ts 618981657187 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1493 prep_new_page mm/page_alloc.c:1501 [inline] get_page_from_freelist+0x2e4c/0x2f10 mm/page_alloc.c:3439 __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4695 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] ___kmalloc_large_node+0x8b/0x1d0 mm/slub.c:4103 __kmalloc_large_node_noprof+0x1a/0x80 mm/slub.c:4130 __do_kmalloc_node mm/slub.c:4146 [inline] __kmalloc_node_noprof+0x2d2/0x440 mm/slub.c:4164 __kvmalloc_node_noprof+0x72/0x190 mm/util.c:650 bucket_table_alloc lib/rhashtable.c:186 [inline] rhashtable_init_noprof+0x534/0xa60 lib/rhashtable.c:1071…

Record
OESA-2025-1162
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:63013 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:63013
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:63014 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:63014
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:63013 8.8

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849)

  • kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132)

  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)

  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)

  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)

  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)

  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)

  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)

  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)

  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)

  • kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)

  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)

  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)

  • kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

Bug Fix(es) and Enhancement(s):

  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [rhel-8.10.z] (JIRA:Rocky Linux-193045)

  • powerpc/pseries: lparcfg - fix kbuf[] underflow (JIRA:Rocky Linux-240144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:63013
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:63014 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849)

  • kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132)

  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)

  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)

  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)

  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)

  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)

  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)

  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)

  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)

  • kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)

  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)

  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)

  • kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

Bug Fix(es) and Enhancement(s):

  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [rhel-8.10.z] (JIRA:Rocky Linux-193045)

  • powerpc/pseries: lparcfg - fix kbuf[] underflow (JIRA:Rocky Linux-240144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:63014
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2024-57849 7.8

CVE-2024-57849 in linux - Patched by Root

Root has patched CVE-2024-57849 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2024-57849
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-57849 7.8

In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHP_AP_PERF_S390_SF_ONLINE --> s390_pmu_sf_offline_cpu() ... CPUHP_AP_PERF_ONLINE --> perf_event_exit_cpu() The s390 CPUMF sampling CPU hotplug handler invokes: s390_pmu_sf_offline_cpu() +--> cpusf_pmu_setup() +--> setup_pmc_cpu() +--> deallocate_buffers() This function de-allocates all sampling data buffers (SDBs) allocated for that CPU at event initialization. It also clears the PMU_F_RESERVED bit. The CPU is gone and can not be sampled. With the event still being active on the removed CPU, the CPU event hotplug support in kernel performance subsystem triggers the following function calls on the removed CPU: perf_event_exit_cpu() +--> perf_event_exit_cpu_context() +--> __perf_event_exit_context() +--> __perf_remove_from_context() +--> event_sched_out() +--> cpumsf_pmu_del() +--> cpumsf_pmu_stop() +--> hw_perf_event_update() to stop and remove the event. During removal of the event, the sampling device driver tries to read out the remaining samples from the sample data buffers (SDBs). But they have already been freed (and may have been re-assigned). This may lead to a use after free situation in which case the samples are most likely invalid. In the best case the memory has not been reassigned and still contains valid data. Remedy this situation and check if the CPU is still in reserved state (bit PMU_F_RESERVED set). In this case the SDBs have not been released an contain valid data. This is always the case when the event is removed (and no CPU hotplug off occured). If the PMU_F_RESERVED bit is not set, the SDB buffers are gone.

Record
UBUNTU-CVE-2024-57849
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:63013 No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849)
  • kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132)
  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)
  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)
  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)
  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)
  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)
  • kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)
  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)
  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
  • kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

Bug Fix(es) and Enhancement(s):

  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-8.10.z] (JIRA:AlmaLinux-193045)
  • powerpc/pseries: lparcfg - fix kbuf[] underflow (JIRA:AlmaLinux-240144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:63013
Updated
2026-11-02
OSVALSA-2026:63014 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling (CVE-2024-57849)
  • kernel: smc91x: fix broken irq-context in PREEMPT_RT (CVE-2025-71132)
  • kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CVE-2026-45970)
  • kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)
  • kernel: pNFS: Fix use-after-free in pnfs_update_layout() (CVE-2026-63800)
  • kernel: nfsd: fix posix_acl leak on SETACL decode failure (CVE-2026-53397)
  • kernel: nfsd: release layout stid on setlease failure (CVE-2026-53399)
  • kernel: NFSv4/flexfiles: reject zero filehandle version count (CVE-2026-53392)
  • kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CVE-2026-53391)
  • kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access (CVE-2026-64018)
  • kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)
  • kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CVE-2026-64298)
  • kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
  • kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

Bug Fix(es) and Enhancement(s):

  • qede: build_skb failure causes off-by-one BD ring corruption and kernel panic [almalinux-8.10.z] (JIRA:AlmaLinux-193045)
  • powerpc/pseries: lparcfg - fix kbuf[] underflow (JIRA:AlmaLinux-240144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:63014
Updated
2026-11-02
OSVCLSA-2025-1746479711 No score

kernel-uek: Fix of 225 CVEs

  • sctp: sysctl: auth_enable: avoid using current->nsproxy
  • sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640}
  • bpf: Use preempt_count() directly in bpf_send_signal_common()
  • Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy"
  • jfs: fix slab-out-of-bounds read in ea_get()
  • serial: 8250_dma: terminate correct DMA in tx_dma_flush()
  • Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy"
  • net: usb: usbnet: restore usb%d name exception for local mac addresses
  • vlan: fix memory leak in vlan_newlink() {CVE-2022-49636}
  • rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity
  • LTS tag: v5.4.291
  • eeprom: digsy_mtc: Make GPIO lookup table match the device
  • slimbus: messaging: Free transaction ID in delayed interrupt scenario {CVE-2025-21914}
  • intel_th: pci: Add Panther Lake-P/U support
  • intel_th: pci: Add Panther Lake-H support
  • intel_th: pci: Add Arrow Lake support
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • xhci: pci: Fix indentation in the PCI device ID definitions
  • usb: gadget: Check bmAttributes only if configuration is valid
  • usb: gadget: Fix setting self-powered state on suspend
  • usb: gadget: Set self-powered based on MaxPower and bmAttributes
  • usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
  • usb: typec: ucsi: increase timeout for PPM reset operations
  • usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
  • usb: renesas_usbhs: Flush the notify_hotplug_work {CVE-2025-21917}
  • usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
  • usb: renesas_usbhs: Use devm_usb_get_phy()
  • usb: renesas_usbhs: Call clk_put()
  • Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
  • gpio: rcar: Fix missing of_node_put() call
  • net: ipv6: fix missing dst ref drop in ila lwtunnel
  • net: ipv6: fix dst ref loop in ila lwtunnel
  • net-timestamp: support TCP GSO case for a few missing flags
  • vlan: enforce underlying device type {CVE-2025-21920}
  • ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
  • be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
  • drm/sched: Fix preprocessor guard
  • hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
  • llc: do not use skb_get() before dev_queue_xmit() {CVE-2025-21925}
  • hwmon: (ad7314) Validate leading zero bits and return error
  • hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
  • hwmon: (pmbus) Initialise page count in pmbus_identify()
  • caif_virtio: fix wrong pointer check in cfv_probe() {CVE-2025-21904}
  • net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926}
  • HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
  • HID: google: fix unused variable warning under !CONFIG_ACPI
  • wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905}
  • mm/page_alloc: fix uninitialized variable
  • rapidio: fix an API misues when rio_add_net() fails {CVE-2025-21934}
  • rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  • wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
  • wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
  • x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
  • x86/cpu: Validate CPUID leaf 0x2 EDX output
  • x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
  • platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
  • drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
  • ALSA: hda/realtek: update ALC222 depop optimize
  • ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
  • HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
  • Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  • drm/amdgpu: disable BAR resize on Dell G5 SE
  • drm/amdgpu: Check extended configuration space register when system uses large bar
  • drm/amdgpu: skip BAR resizing if the bios already…
Record
CLSA-2025-1746479711
Updated
2026-11-02
OSVCLSA-2026-1792244181 No score

Fix of 78 CVEs

  • CVE-2026-99999
    • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • CVE-2026-64015
    • security/keys: fix missed RCU read section on lookup {CVE-2026-64015}
  • CVE-2023-53282
    • scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write {CVE-2023-53282}
  • CVE-2026-43250
    • usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() {CVE-2026-43250}
  • CVE-2026-43281
    • mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() {CVE-2026-43281}
  • CVE-2026-97612
    • net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
  • CVE-2026-68093
    • KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug {CVE-2026-68093}
  • CVE-2026-89637
    • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • CVE-2026-89633
    • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • CVE-2026-80681
    • vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
  • CVE-2025-68188
    • tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188}
  • CVE-2026-68329
    • iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() {CVE-2026-68329}
  • CVE-2026-72157
    • net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
  • CVE-2026-64305
    • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • CVE-2026-64304
    • crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
  • CVE-2026-64449
    • staging: vme_user: bound slave read/write to the kern_buf size {CVE-2026-64449}
  • CVE-2026-90223
    • nfc: llcp: bound SNL TLV parsing to the skb and add length checks {CVE-2026-90223}
  • CVE-2026-90435
    • RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
  • CVE-2026-92498
    • wifi: ath6kl: avoid buffer overreads in WMI event handlers {CVE-2026-92498}
  • CVE-2026-90414
    • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • CVE-2026-93175
    • drm/amd/display: Fix dangling pointer in CRTC reset function {CVE-2026-93175}
  • CVE-2026-90204
    • ocfs2: validate DIO orphan slot during inode read {CVE-2026-90204}
  • CVE-2026-90205
    • ocfs2: validate orphan slot during inode read {CVE-2026-90205}
  • CVE-2026-90057
    • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • CVE-2026-93189
    • HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189}
  • CVE-2026-93163
    • hwrng: core - fix rng list on registration error {CVE-2026-93163}
  • CVE-2026-93104
    • RDMA/rvt: Return NULL after port allocation failure {CVE-2026-93104}
  • CVE-2026-90116
    • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
  • CVE-2026-90334
    • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • CVE-2026-90203
    • Squashfs: check block offset is not negative {CVE-2026-90203}
  • CVE-2026-90103
    • NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
  • CVE-2026-90395
    • power: supply: isp1704_charger: cancel work on remove {CVE-2026-90395}
  • CVE-2026-93049
    • mtd: mtdswap: Avoid freeing registered blktrans device twice {CVE-2026-93049}
  • CVE-2026-93141
    • usb: gadget: r8a66597: avoid double free of ep0_req in probe error path {CVE-2026-93141}
  • CVE-2026-52923
    • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • CVE-2026-64007
    • netfilter: synproxy: refresh tcphdr after skb_ensure_writable {CVE-2026-64007}
  • CVE-2026-98375
    • xen/netfront: drop RX packets with a short Ethernet…
Record
CLSA-2026-1792244181
Updated
2026-11-02
OSVCLSA-2026-1792400260 No score

Fix of 74 CVEs

  • CVE-2026-99999
    • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • CVE-2026-64015
    • security/keys: fix missed RCU read section on lookup {CVE-2026-64015}
  • CVE-2023-53282
    • scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write {CVE-2023-53282}
  • CVE-2026-43250
    • usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() {CVE-2026-43250}
  • CVE-2026-43281
    • mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() {CVE-2026-43281}
  • CVE-2026-97612
    • net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
  • CVE-2026-68093
    • KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug {CVE-2026-68093}
  • CVE-2026-89637
    • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • CVE-2026-89633
    • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • CVE-2026-80681
    • vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}
  • CVE-2025-68188
    • tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188}
  • CVE-2026-68329
    • iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() {CVE-2026-68329}
  • CVE-2026-72157
    • net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
  • CVE-2026-64305
    • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • CVE-2026-64304
    • crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
  • CVE-2026-64449
    • staging: vme_user: bound slave read/write to the kern_buf size {CVE-2026-64449}
  • CVE-2026-90223
    • nfc: llcp: bound SNL TLV parsing to the skb and add length checks {CVE-2026-90223}
  • CVE-2026-90435
    • RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
  • CVE-2026-92498
    • wifi: ath6kl: avoid buffer overreads in WMI event handlers {CVE-2026-92498}
  • CVE-2026-90414
    • IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
  • CVE-2026-93175
    • drm/amd/display: Fix dangling pointer in CRTC reset function {CVE-2026-93175}
  • CVE-2026-90204
    • ocfs2: validate DIO orphan slot during inode read {CVE-2026-90204}
  • CVE-2026-90205
    • ocfs2: validate orphan slot during inode read {CVE-2026-90205}
  • CVE-2026-90057
    • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • CVE-2026-93189
    • HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189}
  • CVE-2026-93163
    • hwrng: core - fix rng list on registration error {CVE-2026-93163}
  • CVE-2026-93104
    • RDMA/rvt: Return NULL after port allocation failure {CVE-2026-93104}
  • CVE-2026-90116
    • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
  • CVE-2026-90334
    • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • CVE-2026-90203
    • Squashfs: check block offset is not negative {CVE-2026-90203}
  • CVE-2026-90103
    • NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
  • CVE-2026-90395
    • power: supply: isp1704_charger: cancel work on remove {CVE-2026-90395}
  • CVE-2026-93049
    • mtd: mtdswap: Avoid freeing registered blktrans device twice {CVE-2026-93049}
  • CVE-2026-93141
    • usb: gadget: r8a66597: avoid double free of ep0_req in probe error path {CVE-2026-93141}
  • CVE-2026-52923
    • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • CVE-2026-64007
    • netfilter: synproxy: refresh tcphdr after skb_ensure_writable {CVE-2026-64007}
  • CVE-2026-98375
    • xen/netfront: drop RX packets with a short Ethernet…
Record
CLSA-2026-1792400260
Updated
2026-11-02
OSVMGASA-2025-0030 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & dwarves packages fix security vulnerabilities

Upstream kernel version 6.6.74 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record
MGASA-2025-0030
Updated
2026-11-02
OSVMGASA-2025-0032 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.74 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2025-0032
Updated
2026-11-02
OSVSUSE-SU-2025:0236-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-48742: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (bsc#1226694).
  • CVE-2022-49033: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (bsc#1232045).
  • CVE-2022-49035: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (bsc#1215304).
  • CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
  • CVE-2023-52922: can: bcm: Fix UAF in bcm_proc_show() (bsc#1233977).
  • CVE-2024-26976: KVM: Always flush async #PF workqueue when vCPU is being destroyed (bsc#1223635).
  • CVE-2024-35847: irqchip/gic-v3-its: Prevent double free on error (bsc#1224697).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
  • CVE-2024-47141: pinmux: Use sequential access to access desc->pinmux data (bsc#1235708).
  • CVE-2024-47666: scsi: pm80xx: Set phy->enable_completion only when we wait for it (bsc#1231453).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50211: udf: refactor inode_bmap() to handle error (bsc#1233096).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50287: media: v4l2-tpg: prevent the risk of a division by zero (bsc#1233476).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53101: fs: Fix uninitialized value issue in from_kuid and from_kgid (bsc#1233769).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234853).
  • CVE-2024-53150: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (bsc#1234834).
  • CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234846).
  • CVE-2024-53157: firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (bsc#1234827).
  • CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
  • CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234891).
  • CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
  • CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
  • CVE-2024-53210: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (bsc#1234971).
  • CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
  • CVE-2024-53224: RDMA/mlx5: Cancel pkey work before destroying device resources (bsc#1235009).
  • CVE-2024-53239: ALSA: 6fire: Release resources at card release (bsc#1235054).
  • CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
  • CVE-2024-56531: ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (bsc#1235057).
  • CVE-2024-56548: hfsplus: do not query the device logical block size multiple times (bsc#1235073). -…
Record
SUSE-SU-2025:0236-1
Updated
2026-11-02
OSVSUSE-SU-2025:0289-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
  • CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
  • CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
  • CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
  • CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
  • CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag…
Record
SUSE-SU-2025:0289-1
Updated
2026-11-02
OSVSUSE-SU-2025:0428-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
  • CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
  • CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
  • CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
  • CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
  • CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
  • CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
  • CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
  • CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
  • CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
  • CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
  • CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
  • CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
  • CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
  • CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
  • CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
  • CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
  • CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
  • CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
  • CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
  • CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
  • CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
  • CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061).
  • CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'…
Record
SUSE-SU-2025:0428-1
Updated
2026-11-02
OSVSUSE-SU-2025:0499-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
  • CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
  • CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
  • CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
  • CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
  • CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
  • CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
  • CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
  • CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
  • CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
  • CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
  • CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
  • CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
  • CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
  • CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
  • CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
  • CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
  • CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
  • CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
  • CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
  • CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
  • CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
  • CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
  • CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
  • CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
  • CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
  • CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
  • CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
  • CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
  • CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
  • CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
  • CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
  • CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
  • CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
  • CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
  • CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
  • CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
  • CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
  • CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
  • CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
  • CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
  • CVE-2024-56763: tracing: Prevent bad count for…
Record
SUSE-SU-2025:0499-1
Updated
2026-11-02
OSVSUSE-SU-2025:0555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
  • CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
  • CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
  • CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
  • CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
  • CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
  • CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
  • CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
  • CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
  • CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
  • CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
  • CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
  • CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
  • CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
  • CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
  • CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

  • NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
  • NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
  • NFS: Improve heuristic for readdirplus (bsc#1231847).
  • NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
  • tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
  • x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).
Record
SUSE-SU-2025:0555-1
Updated
2026-11-02
OSVSUSE-SU-2025:0556-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).
  • CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
  • CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
  • CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
  • CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
  • CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
  • CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
  • CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
  • CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
  • CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
  • CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
  • CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
  • CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
  • CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
  • CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
  • CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
  • CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
  • CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).

The following non-security bugs were fixed:

  • NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
  • NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
  • NFS: Improve heuristic for readdirplus (bsc#1231847).
  • NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
  • VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
  • ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
  • ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
  • netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).
  • powerpc/pseries/vas: Add close() callback in vas_vm_ops struct…
Record
SUSE-SU-2025:0556-1
Updated
2026-11-02
OSVSUSE-SU-2025:0557-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
  • CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
  • CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
  • CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
  • CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
  • CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
  • CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
  • CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
  • CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
  • CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
  • CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
  • CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
  • CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
  • CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
  • CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
  • CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
  • CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
  • CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
  • CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
  • CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
  • CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
  • CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
  • CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
  • CVE-2024-56610: kcsan: Turn…
Record
SUSE-SU-2025:0557-1
Updated
2026-11-02
OSVSUSE-SU-2025:0576-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
  • CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
  • CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
  • CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
  • CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
  • CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
  • CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
  • CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
  • CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
  • CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
  • CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
  • CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
  • CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
  • CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
  • CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
  • CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

  • NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
  • NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
  • NFS: Improve heuristic for readdirplus (bsc#1231847).
  • NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
  • tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
  • x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).
Record
SUSE-SU-2025:0576-1
Updated
2026-11-02
OSVSUSE-SU-2025:0577-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
  • CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
  • CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
  • CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
  • CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
  • CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
  • CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
  • CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
  • CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
  • CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
  • CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
  • CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
  • CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
  • CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
  • CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
  • CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
  • CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
  • CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
  • CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
  • CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

  • NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
  • NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
  • NFS: Improve heuristic for readdirplus (bsc#1231847).
  • NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
  • VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
  • ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
  • ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
  • netfilter: nf_tables: validate family when identifying table via handle…
Record
SUSE-SU-2025:0577-1
Updated
2026-11-02
OSVSUSE-SU-2025:0577-2 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234884).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53209: bnxt_en: Fix receive ring space parameters when XDP is active (bsc#1235002).
  • CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
  • CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
  • CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
  • CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
  • CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
  • CVE-2024-56645: can: j1939: j1939_session_new(): fix skb reference counting (bsc#1235134).
  • CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
  • CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
  • CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
  • CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
  • CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
  • CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
  • CVE-2024-57792: power: supply: gpio-charger: Fix set charge current limits (bsc#1235764).
  • CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
  • CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
  • CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
  • CVE-2024-57876: drm/dp_mst: Fix resetting msg rx state after topology removal (bsc#1235806).
  • CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
  • CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969).

The following non-security bugs were fixed:

  • NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
  • NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
  • NFS: Improve heuristic for readdirplus (bsc#1231847).
  • NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
  • VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
  • ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
  • ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
  • netfilter: nf_tables: validate family when identifying table via handle…
Record
SUSE-SU-2025:0577-2
Updated
2026-11-02
OSVSUSE-SU-2025:0771-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
  • CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
  • CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
  • CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
  • CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
  • CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
  • CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).

The following non-security bugs were fixed:

  • NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
  • NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
  • NFS: Improve heuristic for readdirplus (bsc#1231847, bsc#1231847, bsc#1237389).
  • NFS: Reduce readdir stack usage (bsc#1231847).
  • NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
  • NFS: Use kmemdup_nul() in nfs_readdir_make_qstr() (bsc#1231847).
Record
SUSE-SU-2025:0771-1
Updated
2026-11-02
OSVSUSE-SU-2025:0867-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1237768).
  • CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
  • CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
  • CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
  • CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
  • CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
  • CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
  • CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
  • CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
  • CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
  • CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (bsc#1237139).

The following non-security bugs were fixed:

  • net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
  • net: netvsc: Update default VMBus channels (bsc#1236757).
  • NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
  • NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
  • NFS: Improve heuristic for readdirplus -revert (bsc#1237160).
  • NFS: Improve heuristic for readdirplus (bsc#1231847).
  • NFS: Reduce readdir stack usage (bsc#1231847).
  • NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
  • NFS: Use kmemdup_nul() in nfs_readdir_make_qstr() (bsc#1231847).
  • scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
Record
SUSE-SU-2025:0867-1
Updated
2026-11-02
OSVSUSE-SU-2025:20165-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161:…
Record
SUSE-SU-2025:20165-1
Updated
2026-11-02
OSVSUSE-SU-2025:20166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161:…
Record
SUSE-SU-2025:20166-1
Updated
2026-11-02
OSVSUSE-SU-2025:20248-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161:…
Record
SUSE-SU-2025:20248-1
Updated
2026-11-02
OSVSUSE-SU-2025:20249-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161:…
Record
SUSE-SU-2025:20249-1
Updated
2026-11-02
OSVSUSE-SU-2026:0154-1 No score

Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise kernel 4.12.14-122.237 fixes various security issues

The following security issues were fixed:

  • CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242).
  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451).
  • CVE-2022-50367: fs: fix UAF/GPF bug in nilfs_mdt_destroy (bsc#1250280).
  • CVE-2022-50409: net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (bsc#1250665).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787).
  • CVE-2023-53717: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (bsc#1252563).
  • CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815).
  • CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
Record
SUSE-SU-2026:0154-1
Updated
2026-11-02
OSVSUSE-SU-2026:0166-1 No score

Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.147 fixes various security issues

The following security issues were fixed:

  • CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242).
  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451).
  • CVE-2022-50409: net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (bsc#1250665).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251165).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787).
  • CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815).
  • CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1248615).
  • CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203).
  • CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400).
  • CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
Record
SUSE-SU-2026:0166-1
Updated
2026-11-02
OSVSUSE-SU-2026:0173-1 No score

Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.88 fixes various security issues

The following security issues were fixed:

  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451).
  • CVE-2022-50409: net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (bsc#1250665).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251165).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787).
  • CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815).
  • CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1248615).
  • CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203).
  • CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400).
  • CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
Record
SUSE-SU-2026:0173-1
Updated
2026-11-02
OSVSUSE-SU-2026:0174-1 No score

Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.144 fixes various security issues

The following security issues were fixed:

  • CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242).
  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451).
  • CVE-2022-50409: net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (bsc#1250665).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251165).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787).
  • CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815).
  • CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1248615).
  • CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203).
  • CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400).
  • CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
Record
SUSE-SU-2026:0174-1
Updated
2026-11-02
OSVSUSE-SU-2026:0246-1 No score

Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.91 fixes various security issues

The following security issues were fixed:

  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451).
  • CVE-2022-50409: net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (bsc#1250665).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251165).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787).
  • CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815).
  • CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1248615).
  • CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203).
  • CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400).
  • CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
Record
SUSE-SU-2026:0246-1
Updated
2026-11-02
OSVSUSE-SU-2026:0269-1 No score

Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.30 fixes various security issues

The following security issues were fixed:

  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787).
  • CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815).
  • CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203).
  • CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400).
  • CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1249241).
  • CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670).
  • CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1250192).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).

The following non security issue was fixed:

  • fix addr_bit_set() issue on big-endian machines (bsc#1256928).
Record
SUSE-SU-2026:0269-1
Updated
2026-11-02
OSVSUSE-SU-2026:20255-1 No score

Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise kernel 6.4.0-24.1 fixes various security issues

The following security issues were fixed:

  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787).
  • CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815).
  • CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203).
  • CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400).
  • CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1249241).
  • CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670).
  • CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1250192).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
Record
SUSE-SU-2026:20255-1
Updated
2026-11-02
OSVSUSE-SU-2026:20376-1 No score

Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise kernel 6.4.0-24.1 fixes various security issues

The following security issues were fixed:

  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787).
  • CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815).
  • CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203).
  • CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400).
  • CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1249241).
  • CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670).
  • CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1250192).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
Record
SUSE-SU-2026:20376-1
Updated
2026-11-02
OSVUSN-7379-1 No score

linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Ublk userspace block driver;
  • Virtio block driver;
  • Bluetooth drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Microchip PCI driver;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • Power supply drivers;
  • Voltage and Current Regulator drivers;
  • SCSI subsystem;
  • i.MX SoC drivers;
  • SPI subsystem;
  • UFS subsystem;
  • USB Gadget drivers;
  • TDX Guest driver;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • Overlay file system;
  • Diskquota system;
  • SMB network file system;
  • DRM display driver;
  • BPF subsystem;
  • VLANs driver;
  • KASAN memory debugging framework;
  • Memory management;
  • StackDepot library;
  • Bluetooth subsystem;
  • LAPB network protocol;
  • Netfilter;
  • io_uring subsystem;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Scheduler infrastructure;
  • Seccomp subsystem;
  • Tracing infrastructure;
  • Workqueue subsystem;
  • KUnit library;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • NET/ROM layer;
  • Packet sockets;
  • RDS protocol;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • TIPC protocol;
  • Wireless networking;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • Intel ASoC drivers;
  • SOF drivers; (CVE-2024-57921, CVE-2024-56614, CVE-2024-56558, CVE-2024-56589, CVE-2024-56662, CVE-2024-56610, CVE-2024-56717, CVE-2024-57890, CVE-2024-55639, CVE-2024-56562, CVE-2025-21633, CVE-2024-56598, CVE-2024-47794, CVE-2024-41935, CVE-2024-57901, CVE-2024-56587, CVE-2024-56581, CVE-2024-56783, CVE-2024-57888, CVE-2024-57809, CVE-2024-57926, CVE-2025-21650, CVE-2024-56634, CVE-2025-21639, CVE-2025-21656, CVE-2024-56578, CVE-2025-21632, CVE-2024-56784, CVE-2025-21644, CVE-2024-56776, CVE-2024-56764, CVE-2024-56652, CVE-2024-56550, CVE-2024-56569, CVE-2024-57904, CVE-2024-49569, CVE-2024-56770, CVE-2024-56606, CVE-2024-57806, CVE-2024-56646, CVE-2024-57895, CVE-2024-57880, CVE-2024-56650, CVE-2024-56591, CVE-2024-56590, CVE-2024-56642, CVE-2024-56713, CVE-2025-21663, CVE-2024-57938, CVE-2024-56760, CVE-2024-56583, CVE-2025-21662, CVE-2024-56629, CVE-2024-47408, CVE-2024-57850, CVE-2024-56777, CVE-2024-56626, CVE-2024-56773, CVE-2024-56647, CVE-2025-21664, CVE-2024-56564, CVE-2024-56597, CVE-2024-56623, CVE-2024-57897, CVE-2024-56670, CVE-2024-56567, CVE-2024-57931, CVE-2024-56761, CVE-2024-57935, CVE-2024-53690, CVE-2025-21640, CVE-2024-56608, CVE-2024-57878, CVE-2025-21648, CVE-2024-57898, CVE-2024-57889, CVE-2024-56644, CVE-2024-56763, CVE-2024-57900,…
Record
USN-7379-1
Updated
2026-11-02
OSVUSN-7381-1 No score

linux-lowlatency-hwe-6.11 vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Ublk userspace block driver;
  • Virtio block driver;
  • Bluetooth drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Microchip PCI driver;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • Power supply drivers;
  • Voltage and Current Regulator drivers;
  • SCSI subsystem;
  • i.MX SoC drivers;
  • SPI subsystem;
  • UFS subsystem;
  • USB Gadget drivers;
  • TDX Guest driver;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • Overlay file system;
  • Diskquota system;
  • SMB network file system;
  • DRM display driver;
  • BPF subsystem;
  • VLANs driver;
  • KASAN memory debugging framework;
  • Memory management;
  • StackDepot library;
  • Bluetooth subsystem;
  • LAPB network protocol;
  • Network namespace;
  • Netfilter;
  • io_uring subsystem;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Scheduler infrastructure;
  • Seccomp subsystem;
  • Tracing infrastructure;
  • Workqueue subsystem;
  • KUnit library;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • NET/ROM layer;
  • Packet sockets;
  • RDS protocol;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • TIPC protocol;
  • Wireless networking;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • Intel ASoC drivers;
  • SOF drivers; (CVE-2024-56712, CVE-2024-56761, CVE-2025-21661, CVE-2024-56565, CVE-2024-57804, CVE-2024-57887, CVE-2025-21642, CVE-2024-56779, CVE-2025-21656, CVE-2024-57890, CVE-2024-36476, CVE-2024-57843, CVE-2024-56594, CVE-2024-41932, CVE-2025-21653, CVE-2024-56567, CVE-2024-56665, CVE-2024-54191, CVE-2024-57893, CVE-2024-57932, CVE-2024-56656, CVE-2024-57945, CVE-2024-57931, CVE-2024-56599, CVE-2024-57897, CVE-2024-57903, CVE-2024-57918, CVE-2024-57795, CVE-2024-56662, CVE-2025-21639, CVE-2024-55881, CVE-2024-57889, CVE-2024-57884, CVE-2024-57934, CVE-2024-39282, CVE-2024-56718, CVE-2024-56644, CVE-2024-56760, CVE-2024-43098, CVE-2024-47143, CVE-2024-55642, CVE-2024-56634, CVE-2024-56564, CVE-2024-56768, CVE-2024-56649, CVE-2024-57919, CVE-2024-56620, CVE-2024-56625, CVE-2024-56655, CVE-2024-56772, CVE-2025-21637, CVE-2024-56617, CVE-2024-57879, CVE-2024-56715, CVE-2024-56550, CVE-2024-50051, CVE-2024-56673, CVE-2024-51729, CVE-2025-21664,…
Record
USN-7381-1
Updated
2026-11-02
OSVUSN-7382-1 No score

linux-oem-6.11 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Ublk userspace block driver;
  • Virtio block driver;
  • Bluetooth drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Microchip PCI driver;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • Power supply drivers;
  • Voltage and Current Regulator drivers;
  • SCSI subsystem;
  • i.MX SoC drivers;
  • SPI subsystem;
  • UFS subsystem;
  • USB Gadget drivers;
  • TDX Guest driver;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • Overlay file system;
  • Diskquota system;
  • SMB network file system;
  • DRM display driver;
  • BPF subsystem;
  • VLANs driver;
  • KASAN memory debugging framework;
  • Memory management;
  • StackDepot library;
  • Bluetooth subsystem;
  • LAPB network protocol;
  • Netfilter;
  • io_uring subsystem;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Scheduler infrastructure;
  • Seccomp subsystem;
  • Tracing infrastructure;
  • Workqueue subsystem;
  • KUnit library;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • NET/ROM layer;
  • Packet sockets;
  • RDS protocol;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • TIPC protocol;
  • Wireless networking;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • Intel ASoC drivers;
  • SOF drivers; (CVE-2024-47794, CVE-2025-21653, CVE-2024-55642, CVE-2024-56580, CVE-2024-36476, CVE-2024-56623, CVE-2024-56773, CVE-2024-48873, CVE-2024-47141, CVE-2024-57910, CVE-2024-56759, CVE-2024-54460, CVE-2024-57839, CVE-2024-56625, CVE-2024-55916, CVE-2025-21664, CVE-2025-21652, CVE-2024-56624, CVE-2024-56574, CVE-2024-50051, CVE-2025-21655, CVE-2024-56578, CVE-2024-56782, CVE-2024-57939, CVE-2024-57935, CVE-2024-56647, CVE-2024-57905, CVE-2024-57921, CVE-2024-56660, CVE-2025-21650, CVE-2025-21631, CVE-2024-56642, CVE-2024-56552, CVE-2024-57934, CVE-2024-56621, CVE-2024-57881, CVE-2024-41932, CVE-2024-56770, CVE-2024-57897, CVE-2024-56785, CVE-2024-56664, CVE-2024-57945, CVE-2024-57938, CVE-2024-56636, CVE-2024-56572, CVE-2024-43098, CVE-2024-56760, CVE-2024-57916, CVE-2024-56714, CVE-2025-21660, CVE-2024-57906, CVE-2025-21638, CVE-2024-53687, CVE-2024-56652, CVE-2024-51729, CVE-2024-49571, CVE-2024-57883, CVE-2024-54191, CVE-2024-56712, CVE-2024-49568, CVE-2024-57932, CVE-2024-57893, CVE-2024-56645, CVE-2024-56719, CVE-2024-56641, CVE-2024-57802, CVE-2024-56775, CVE-2024-56627, CVE-2024-56638, CVE-2024-57929, CVE-2024-56615, CVE-2024-56566, CVE-2024-56620, CVE-2024-56577, CVE-2025-21656, CVE-2024-57887, CVE-2024-52319, CVE-2024-56657, CVE-2024-57872,…
Record
USN-7382-1
Updated
2026-11-02
OSVUSN-7387-1 No score

linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iotg, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • RAM backed block device driver;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • i.MX SoC drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • Distributed Switch Architecture;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…
Record
USN-7387-1
Updated
2026-11-02
OSVUSN-7387-2 No score

linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • RAM backed block device driver;
  • Virtio block driver;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • EDAC drivers;
  • ARM SCPI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • NVME drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • SuperH / SH-Mobile drivers;
  • i.MX SoC drivers;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • USB Type-C Port Controller Manager driver;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • VLANs driver;
  • LAPB network protocol;
  • Kernel init infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Tracing infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • Distributed Switch Architecture;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Netlink;
  • NET/ROM layer;
  • Packet sockets;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…
Record
USN-7387-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-rt
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.rt7.500.el8_10
4.18.0-553.159.1.rt7.500.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
perf
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 14 CVEs
 before 4.18.0-553.159.1.el8_10
4.18.0-553.159.1.el8_10
linux-lts
Alpaquita:23
 6.1.119-r0 up to 6.1.120-r0
6.1.120-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-container
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-container-debug
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-debug
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-devel
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-headers
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-tools
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
perf
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
python-perf
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
linux-buildinfo-4.15.0-267-generic
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-buildinfo-4.15.0-267-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-cloud-tools-4.15.0-267
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-cloud-tools-4.15.0-267-generic
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-cloud-tools-4.15.0-267-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-headers-4.15.0-267
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-headers-4.15.0-267-generic
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-headers-4.15.0-267-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-image-unsigned-4.15.0-267-generic
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-image-unsigned-4.15.0-267-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-modules-4.15.0-267-generic
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-modules-4.15.0-267-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-modules-extra-4.15.0-267-generic
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-tools-4.15.0-267
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-tools-4.15.0-267-generic
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-tools-4.15.0-267-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-tools-host
TuxCare:Ubuntu:18.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278+tuxcare.els1
4.15.0-267.278+tuxcare.els1
linux-buildinfo-4.15.0-267-generic
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-buildinfo-4.15.0-267-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-cloud-tools-4.15.0-267-generic
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-cloud-tools-4.15.0-267-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-headers-4.15.0-267
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-headers-4.15.0-267-generic
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-headers-4.15.0-267-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-hwe-cloud-tools-4.15.0-267
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-hwe-tools-4.15.0-267
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-image-unsigned-4.15.0-267-generic
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-image-unsigned-4.15.0-267-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-modules-4.15.0-267-generic
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-modules-4.15.0-267-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-modules-extra-4.15.0-267-generic
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-source-4.15.0
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-tools-4.15.0-267-generic
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
linux-tools-4.15.0-267-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 78 CVEs
 before 4.15.0-267.278~16.04.1+tuxcare.els1
4.15.0-267.278~16.04.1+tuxcare.els1
Kernel
Linux
 4.8.0 up to 5.4.287, 5.5.0 up to 5.10.231, 5.11.0 up to 5.15.174, 5.16.0 up to 6.1.120, 6.2.0 up to 6.6.66, 6.7.0 up to 6.12.5
5.4.2875.10.2315.15.1746.1.1206.6.666.12.5
linux
Debian:12
 before 6.1.123-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 27 moreShow less
6.1.119-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.123-1
linux
Debian:13
 before 6.12.5-1
6.12.5-1
linux
Debian:14
 before 6.12.5-1
6.12.5-1
linux-6.1
Debian:11
From an advisory covering 333 CVEs
 before 6.1.128-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
6.1.128-1~deb11u1
kernel
Mageia:9
From an advisory covering 202 CVEs
 before 6.6.74-1.mga9
6.6.74-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 202 CVEs
 before 7.0.24-64.mga9
7.0.24-64.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 202 CVEs
 before 3.24-70.mga9
3.24-70.mga9
dwarves
Mageia:9
From an advisory covering 202 CVEs
 before 1.29-1.mga9
1.29-1.mga9
kernel-linus
Mageia:9
From an advisory covering 202 CVEs
 before 6.6.74-1.mga9
6.6.74-1.mga9
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 18 CVEs
 before 5.10.0-250.0.0.154.oe2203sp4
5.10.0-250.0.0.154.oe2203sp4
kernel
openEuler:24.03-LTS
From an advisory covering 27 CVEs
 before 6.6.0-78.0.0.71.oe2403
6.6.0-78.0.0.71.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 25 CVEs
 before 6.6.0-78.0.0.83.oe2403sp1
6.6.0-78.0.0.83.oe2403sp1
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 18 CVEs
 before 5.10.0-250.0.0.153.oe2203sp3
5.10.0-250.0.0.153.oe2203sp3
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.rt7.500.el8_10
0:4.18.0-553.159.1.rt7.500.el8_10
kernel
Rocky Linux:8
From an advisory covering 14 CVEs
 before 0:4.18.0-553.159.1.el8_10
0:4.18.0-553.159.1.el8_10
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 77 CVEs
 before 4.12.14-122.244.1
4.12.14-122.244.1
kgraft-patch-SLE12-SP5_Update_64
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 77 CVEs
 before 1-8.5.1
1-8.5.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 77 CVEs
 before 4.12.14-122.244.1
4.12.14-122.244.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 77 CVEs
 before 4.12.14-122.244.1
4.12.14-122.244.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 77 CVEs
 before 4.12.14-122.244.1
4.12.14-122.244.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 77 CVEs
 before 4.12.14-122.244.1
4.12.14-122.244.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 77 CVEs
 before 4.12.14-122.244.1
4.12.14-122.244.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 77 CVEs
 before 4.12.14-122.244.1
4.12.14-122.244.1
kernel-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 343 CVEs
 before 6.4.0-15061.12.coco15sp6.1
6.4.0-15061.12.coco15sp6.1
kernel-coco_debug
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 343 CVEs
 before 6.4.0-15061.12.coco15sp6.1
6.4.0-15061.12.coco15sp6.1
kernel-source-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 343 CVEs
 before 6.4.0-15061.12.coco15sp6.1
6.4.0-15061.12.coco15sp6.1
kernel-syms-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 343 CVEs
 before 6.4.0-15061.12.coco15sp6.1
6.4.0-15061.12.coco15sp6.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 248 CVEs
 before 6.4.0-150600.8.26.1
6.4.0-150600.8.26.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 248 CVEs
 before 6.4.0-150600.8.26.1
6.4.0-150600.8.26.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 248 CVEs
 before 6.4.0-150600.8.26.1
6.4.0-150600.8.26.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 248 CVEs
 before 6.4.0-150600.8.26.1
6.4.0-150600.8.26.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 248 CVEs
 before 6.4.0-150600.8.26.1
6.4.0-150600.8.26.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 248 CVEs
 before 6.4.0-150600.8.26.1
6.4.0-150600.8.26.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1.150600.12.16.2
6.4.0-150600.23.38.1.150600.12.16.2
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-livepatch-SLE15-SP6_Update_8
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 257 CVEs
 before 1-150600.13.3.2
1-150600.13.3.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1.150600.12.16.2
6.4.0-150600.23.38.1.150600.12.16.2
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 257 CVEs
 before 6.4.0-150600.23.38.1
6.4.0-150600.23.38.1
kernel-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 28 CVEs
 before 5.14.21-150400.15.109.1
5.14.21-150400.15.109.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 28 CVEs
 before 5.14.21-150400.15.109.1
5.14.21-150400.15.109.1
kernel-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 28 CVEs
 before 5.14.21-150400.15.109.1
5.14.21-150400.15.109.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 28 CVEs
 before 5.14.21-150400.15.109.1
5.14.21-150400.15.109.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 94 CVEs
 before 5.14.21-150500.13.85.1
5.14.21-150500.13.85.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 94 CVEs
 before 5.14.21-150500.13.85.1
5.14.21-150500.13.85.1
kernel-livepatch-SLE15-SP6-RT_Update_8
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 256 CVEs
 before 1-150600.1.3.1
1-150600.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 256 CVEs
 before 6.4.0-150600.10.26.1
6.4.0-150600.10.26.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 256 CVEs
 before 6.4.0-150600.10.26.1
6.4.0-150600.10.26.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 256 CVEs
 before 6.4.0-150600.10.26.1
6.4.0-150600.10.26.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 256 CVEs
 before 6.4.0-150600.10.26.1
6.4.0-150600.10.26.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 256 CVEs
 before 6.4.0-150600.10.26.1
6.4.0-150600.10.26.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 256 CVEs
 before 6.4.0-150600.10.26.1
6.4.0-150600.10.26.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 256 CVEs
 before 6.4.0-150600.10.26.1
6.4.0-150600.10.26.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 256 CVEs
 before 6.4.0-150600.10.26.1
6.4.0-150600.10.26.1
kernel-default
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1.150400.24.74.1
5.14.21-150400.24.150.1.150400.24.74.1
kernel-default
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1.150400.24.74.1
5.14.21-150400.24.150.1.150400.24.74.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-livepatch-SLE15-SP4_Update_36
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 28 CVEs
 before 1-150400.9.3.1
1-150400.9.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1.150400.24.74.1
5.14.21-150400.24.150.1.150400.24.74.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1.150400.24.74.1
5.14.21-150400.24.150.1.150400.24.74.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.150.1
5.14.21-150400.24.150.1
linux-azure
Ubuntu:Pro:14.04:LTS
 before 4.15.0-1208.223~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
4.15.0-1208.223~14.04.1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1198.211~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1198.211~16.04.1
linux-azure
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1208.223~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1208.223~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1191.208~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1191.208~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-261.273~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-261.273~16.04.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1160.171~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
4.15.0-1160.171~16.04.1
linux
Ubuntu:Pro:18.04:LTS
 before 4.15.0-261.273, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-261.273
linux-aws
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1198.211, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1198.211
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1142.152~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
5.4.0-1142.152~18.04.1
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1208.223, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1208.223
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1147.154~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
5.4.0-1147.154~18.04.1
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1191.208, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1191.208
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1145.154~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
5.4.0-1145.154~18.04.1
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-211.231~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-211.231~18.04.1
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1090.95~18.04.1, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
5.4.0-1090.95~18.04.1
linux-kvm
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1180.185, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
4.15.0-1180.185
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1160.171, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1160.171
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1140.149~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
5.4.0-1140.149~18.04.1
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1129.142~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
5.4.0-1129.142~18.04.1
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2136.142, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
4.15.0-2136.142
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2116.122, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
4.15.0-2116.122
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-1153.165, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
4.15.0-1153.165
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2099.105, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
4.15.0-2099.105
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:20.04:LTS
 before 5.4.0-211.231, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-211.231
linux-aws
Ubuntu:20.04:LTS
 before 5.4.0-1142.152, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1142.152
linux-aws-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1080.87~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1080.87~20.04.1
linux-azure
Ubuntu:20.04:LTS
 before 5.4.0-1147.154, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
5.4.0-1147.154
linux-azure-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1086.95~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1086.95~20.04.1
linux-bluefield
Ubuntu:20.04:LTS
 before 5.4.0-1101.108, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
5.4.0-1101.108
linux-gcp
Ubuntu:20.04:LTS
 before 5.4.0-1145.154, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
5.4.0-1145.154
linux-gcp-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1081.90~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1081.90~20.04.1
linux-hwe-5.15
Ubuntu:20.04:LTS
 before 5.15.0-136.147~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-136.147~20.04.1
linux-ibm
Ubuntu:20.04:LTS
 before 5.4.0-1088.93, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
5.4.0-1088.93
linux-ibm-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1074.77~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 28 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.1
5.15.0-1074.77~20.04.1
linux-intel-iotg-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1077.83~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 38 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.1
5.15.0-1077.83~20.04.1
linux-iot
Ubuntu:20.04:LTS
 before 5.4.0-1048.51, plus listed versions
5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11
Show 32 moreShow less
5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1042.435.4.0-1043.445.4.0-1044.455.4.0-1045.46
5.4.0-1048.51
linux-kvm
Ubuntu:20.04:LTS
 before 5.4.0-1129.138, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78
5.4.0-1129.138
linux-lowlatency-hwe-5.15
Ubuntu:20.04:LTS
 before 5.15.0-135.146~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-135.146~20.04.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-57849 is a high vulnerability (CVSS 7.8) in Linux, published January 11, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. Fixed in linux-lts 6.1.120-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 373 package rows, 1,677 versions, 2,974 references and the rest of 24 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 32 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open