CVE-2024-26951

wireguard: netlink: check for dangling peer via is_dead instead of empty list

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

wireguard: netlink: check for dangling peer via is_dead instead of empty list

If all peers are removed via wg_peer_remove_all(), rather than setting peer_list to empty, the peer is added to a temporary list with a head on the stack of wg_peer_remove_all(). If a netlink dump is resumed and the cursored peer is one that has been removed via wg_peer_remove_all(), it will iterate from that peer and then attempt to dump freed peers.

Fix this by instead checking peer->is_dead, which was explictly created for this purpose. Also move up the device_update_lock lockdep assertion, since reading is_dead relies on that.

It can be reproduced by a small script like:

echo "Setting config..."
ip link add dev wg0 type wireguard
wg setconf wg0 /big-config
(
        while true; do
                echo "Showing config..."
                wg showconf wg0 > /dev/null
        done
) &
sleep 4
wg setconf wg0 <(printf "[Peer]\nPublicKey=$(wg genkey)\n")

Resulting in:

BUG: KASAN: slab-use-after-free in __lock_acquire+0x182a/0x1b20
Read of size 8 at addr ffff88811956ec70 by task wg/59
CPU: 2 PID: 59 Comm: wg Not tainted 6.8.0-rc2-debug+ #5
Call Trace:
 <TASK>
 dump_stack_lvl+0x47/0x70
 print_address_description.constprop.0+0x2c/0x380
 print_report+0xab/0x250
 kasan_report+0xba/0xf0
 __lock_acquire+0x182a/0x1b20
 lock_acquire+0x191/0x4b0
 down_read+0x80/0x440
 get_peer+0x140/0xcb0
 wg_get_device_dump+0x471/0x1130

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.23%Up 0.2 points since May 1, 2024

What each source reports

CVE List Score used 7.8

wireguard: netlink: check for dangling peer via is_dead instead of empty list

In the Linux kernel, the following vulnerability has been resolved:

wireguard: netlink: check for dangling peer via is_dead instead of empty list

Fix this by instead checking peer->is_dead, which was explictly created for this purpose. Also move up the device_update_lock lockdep assertion, since reading is_dead relies on that.

It can be reproduced by a small script like:

echo "Setting config..."
ip link add dev wg0 type wireguard
wg setconf wg0 /big-config
(
        while true; do
                echo "Showing config..."
                wg showconf wg0 > /dev/null
        done
) &
sleep 4
wg setconf wg0 <(printf "[Peer]\nPublicKey=$(wg genkey)\n")

Resulting in:

BUG: KASAN: slab-use-after-free in __lock_acquire+0x182a/0x1b20
Read of size 8 at addr ffff88811956ec70 by task wg/59
CPU: 2 PID: 59 Comm: wg Not tainted 6.8.0-rc2-debug+ #5
Call Trace:
 <TASK>
 dump_stack_lvl+0x47/0x70
 print_address_description.constprop.0+0x2c/0x380
 print_report+0xab/0x250
 kasan_report+0xba/0xf0
 __lock_acquire+0x182a/0x1b20
 lock_acquire+0x191/0x4b0
 down_read+0x80/0x440
 get_peer+0x140/0xcb0
 wg_get_device_dump+0x471/0x1130

Record: CVE-2024-26951
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2024-24213 7.8

In the Linux kernel, the following vulnerability has been resolved:

wireguard: netlink: check for dangling peer via is_dead instead of empty list

Fix this by instead checking peer->is_dead, which was explictly created for this purpose. Also move up the device_update_lock lockdep assertion, since reading is_dead relies on that.

It can be reproduced by a small script like:

echo "Setting config..."
ip link add dev wg0 type wireguard
wg setconf wg0 /big-config
(
        while true; do
                echo "Showing config..."
                wg showconf wg0 > /dev/null
        done
) &
sleep 4
wg setconf wg0 <(printf "[Peer]\nPublicKey=$(wg genkey)\n")

Resulting in:

BUG: KASAN: slab-use-after-free in __lock_acquire+0x182a/0x1b20
Read of size 8 at addr ffff88811956ec70 by task wg/59
CPU: 2 PID: 59 Comm: wg Not tainted 6.8.0-rc2-debug+ #5
Call Trace:
 <TASK>
 dump_stack_lvl+0x47/0x70
 print_address_description.constprop.0+0x2c/0x380
 print_report+0xab/0x250
 kasan_report+0xba/0xf0
 __lock_acquire+0x182a/0x1b20
 lock_acquire+0x191/0x4b0
 down_read+0x80/0x440
 get_peer+0x140/0xcb0
 wg_get_device_dump+0x471/0x1130

Record: EUVD-2024-24213
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-m923-55g6-m66q 7.8

In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check...

In the Linux kernel, the following vulnerability has been resolved:

wireguard: netlink: check for dangling peer via is_dead instead of empty list

Fix this by instead checking peer->is_dead, which was explictly created for this purpose. Also move up the device_update_lock lockdep assertion, since reading is_dead relies on that.

It can be reproduced by a small script like:

echo "Setting config..."
ip link add dev wg0 type wireguard
wg setconf wg0 /big-config
(
        while true; do
                echo "Showing config..."
                wg showconf wg0 > /dev/null
        done
) &
sleep 4
wg setconf wg0 <(printf "[Peer]\nPublicKey=$(wg genkey)\n")

Resulting in:

BUG: KASAN: slab-use-after-free in __lock_acquire+0x182a/0x1b20
Read of size 8 at addr ffff88811956ec70 by task wg/59
CPU: 2 PID: 59 Comm: wg Not tainted 6.8.0-rc2-debug+ #5
Call Trace:
 <TASK>
 dump_stack_lvl+0x47/0x70
 print_address_description.constprop.0+0x2c/0x380
 print_report+0xab/0x250
 kasan_report+0xba/0xf0
 __lock_acquire+0x182a/0x1b20
 lock_acquire+0x191/0x4b0
 down_read+0x80/0x440
 get_peer+0x140/0xcb0
 wg_get_device_dump+0x471/0x1130

Record: GHSA-m923-55g6-m66q
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

wireguard: netlink: check for dangling peer via is_dead instead of empty list

Fix this by instead checking peer->is_dead, which was explictly created for this purpose. Also move up the device_update_lock lockdep assertion, since reading is_dead relies on that.

It can be reproduced by a small script like:

echo "Setting config..."
ip link add dev wg0 type wireguard
wg setconf wg0 /big-config
(
        while true; do
                echo "Showing config..."
                wg showconf wg0 > /dev/null
        done
) &
sleep 4
wg setconf wg0 <(printf "[Peer]\nPublicKey=$(wg genkey)\n")

Resulting in:

BUG: KASAN: slab-use-after-free in __lock_acquire+0x182a/0x1b20
Read of size 8 at addr ffff88811956ec70 by task wg/59
CPU: 2 PID: 59 Comm: wg Not tainted 6.8.0-rc2-debug+ #5
Call Trace:
 <TASK>
 dump_stack_lvl+0x47/0x70
 print_address_description.constprop.0+0x2c/0x380
 print_report+0xab/0x250
 kasan_report+0xba/0xf0
 __lock_acquire+0x182a/0x1b20
 lock_acquire+0x191/0x4b0
 down_read+0x80/0x440
 get_peer+0x140/0xcb0
 wg_get_device_dump+0x471/0x1130

Record: CVE-2024-26951
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVBELL-CVE-2024-26951 7.8

Record: BELL-CVE-2024-26951
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

wireguard: netlink: check for dangling peer via is_dead instead of empty list

In the Linux kernel, the following vulnerability has been resolved:

wireguard: netlink: check for dangling peer via is_dead instead of empty list

Fix this by instead checking peer->is_dead, which was explictly created for this purpose. Also move up the device_update_lock lockdep assertion, since reading is_dead relies on that.

It can be reproduced by a small script like:

echo "Setting config..."
ip link add dev wg0 type wireguard
wg setconf wg0 /big-config
(
        while true; do
                echo "Showing config..."
                wg showconf wg0 > /dev/null
        done
) &
sleep 4
wg setconf wg0 <(printf "[Peer]\nPublicKey=$(wg genkey)\n")

Resulting in:

BUG: KASAN: slab-use-after-free in __lock_acquire+0x182a/0x1b20
Read of size 8 at addr ffff88811956ec70 by task wg/59
CPU: 2 PID: 59 Comm: wg Not tainted 6.8.0-rc2-debug+ #5
Call Trace:
 <TASK>
 dump_stack_lvl+0x47/0x70
 print_address_description.constprop.0+0x2c/0x380
 print_report+0xab/0x250
 kasan_report+0xba/0xf0
 __lock_acquire+0x182a/0x1b20
 lock_acquire+0x191/0x4b0
 down_read+0x80/0x440
 get_peer+0x140/0xcb0
 wg_get_device_dump+0x471/0x1130

Record: CVE-2024-26951
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 28 moreShow less

OSVDEBIAN-CVE-2024-26951 7.8

In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check for dangling peer via is_dead instead of empty list If all peers are removed via wg_peer_remove_all(), rather than setting peer_list to empty, the peer is added to a temporary list with a head on the stack of wg_peer_remove_all(). If a netlink dump is resumed and the cursored peer is one that has been removed via wg_peer_remove_all(), it will iterate from that peer and then attempt to dump freed peers. Fix this by instead checking peer->is_dead, which was explictly created for this purpose. Also move up the device_update_lock lockdep assertion, since reading is_dead relies on that. It can be reproduced by a small script like: echo "Setting config..." ip link add dev wg0 type wireguard wg setconf wg0 /big-config ( while true; do echo "Showing config..." wg showconf wg0 > /dev/null done ) & sleep 4 wg setconf wg0 <(printf "[Peer]\nPublicKey=$(wg genkey)\n") Resulting in: BUG: KASAN: slab-use-after-free in __lock_acquire+0x182a/0x1b20 Read of size 8 at addr ffff88811956ec70 by task wg/59 CPU: 2 PID: 59 Comm: wg Not tainted 6.8.0-rc2-debug+ #5 Call Trace: <TASK> dump_stack_lvl+0x47/0x70 print_address_description.constprop.0+0x2c/0x380 print_report+0xab/0x250 kasan_report+0xba/0xf0 __lock_acquire+0x182a/0x1b20 lock_acquire+0x191/0x4b0 down_read+0x80/0x440 get_peer+0x140/0xcb0 wg_get_device_dump+0x471/0x1130

Record: DEBIAN-CVE-2024-26951
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-26951 7.3

Record: UBUNTU-CVE-2024-26951
CVSS 4.0: 7.3 HighCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVAZL-40497 No score

CVE-2024-26951 affecting package hyperv-daemons for versions less than 5.15.158.1-1

In the Linux kernel, the following vulnerability has been resolved:

wireguard: netlink: check for dangling peer via is_dead instead of empty list

Fix this by instead checking peer->is_dead, which was explictly created for this purpose. Also move up the device_update_lock lockdep assertion, since reading is_dead relies on that.

It can be reproduced by a small script like:

echo "Setting config..."
ip link add dev wg0 type wireguard
wg setconf wg0 /big-config
(
        while true; do
                echo "Showing config..."
                wg showconf wg0 > /dev/null
        done
) &
sleep 4
wg setconf wg0 <(printf "[Peer]\nPublicKey=$(wg genkey)\n")

Resulting in:

BUG: KASAN: slab-use-after-free in __lock_acquire+0x182a/0x1b20
Read of size 8 at addr ffff88811956ec70 by task wg/59
CPU: 2 PID: 59 Comm: wg Not tainted 6.8.0-rc2-debug+ #5
Call Trace:
 <TASK>
 dump_stack_lvl+0x47/0x70
 print_address_description.constprop.0+0x2c/0x380
 print_report+0xab/0x250
 kasan_report+0xba/0xf0
 __lock_acquire+0x182a/0x1b20
 lock_acquire+0x191/0x4b0
 down_read+0x80/0x440
 get_peer+0x140/0xcb0
 wg_get_device_dump+0x471/0x1130

Record: AZL-40497
Updated: 2026-11-02

OSVCLSA-2026-1768663754 No score

kernel: Fix of 38 CVEs

ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249}
drm/i915/gt: Fix timeline left held on VMA alloc error {CVE-2025-38389}
md/raid1: Fix stack memory use after return in raid1_reshape {CVE-2025-38445}
atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
bpf: Avoid __bpf_prog_ret0_warn when jit fails {CVE-2025-38280}
ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886}
netfilter: nf_tables: do not compare internal table flags on updates {CVE-2024-27065}
init/main.c: Fix potential static_command_line memory overflow {CVE-2024-26988}
wireguard: netlink: check for dangling peer via is_dead instead of empty list {CVE-2024-26951}
platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() {CVE-2025-38077}
exfat: fix double free in delayed_free {CVE-2025-38206}
net: openvswitch: Fix the dead loop of MPLS parse {CVE-2025-38146}
wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write {CVE-2023-54286}
vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618}
fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198}
crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
software node: Correct a OOB check in {CVE-2025-38342}
nbd: fix uaf in nbd_genl_connect() error path {CVE-2025-38443}
USB: usbtmc: Fix direction for 0-length ioctl control messages {CVE-2023-53761}
cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname {CVE-2023-53751}
cifs: Fix warning and UAF when destroy the MR list {CVE-2023-53427}
PCI/ASPM: Fix link state exit during switch upstream function removal {CVE-2024-58093}
PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free {CVE-2023-53446}
sctp: fix a potential overflow in sctp_ifwdtsn_skip {CVE-2023-53372}
md/raid10: fix wrong setting of max_corr_read_errors {CVE-2023-53313}
md/raid10: fix overflow of md/safe_mode_delay
md/raid10: check slab-out-of-bounds in md_bitmap_get_counter {CVE-2023-53357}
lwt: Fix return values of BPF xmit ops {CVE-2023-53338}
net: fec: Better handle pm_runtime_get() failing in .remove() {CVE-2023-53308}
rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails {CVE-2023-53307}
ice: set tx_tstamps when creating new Tx rings via ethtool {CVE-2022-50710}
RDMA/mlx5: Return the firmware result upon destroying QP/RQ {CVE-2023-53286}
RDMA/mlx5: Handle DCT QP logic separately from low level QP interface
net/mlx5e: Use correct encap attribute during invalidation {CVE-2023-54074}
net/mlx5: Nullify qp->dbg pointer post destruction
scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write {CVE-2023-53282}
net: ena: fix shift-out-of-bounds in exponential backoff {CVE-2023-53272}
ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265}
sched/fair: Don't balance task to its current running CPU {CVE-2023-53215}
netfilter: allow exp not to be removed in nf_ct_find_expectation {CVE-2023-52927}
wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() {CVE-2022-50881}

Record: CLSA-2026-1768663754
Updated: 2026-11-02

OSVSUSE-SU-2024:1644-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-27042: Fixed drm/amdgpu for potential out-of-bounds access in amdgpu_discovery_reg_base_init() (bsc#1223823).
CVE-2024-27041: Fixed drm/amd/display NULL checks for adev->dm.dc in amdgpu_dm_fini() (bsc#1223714).
CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-26939: Fixed drm/i915/vma UAF on destroy against retire race (bsc#1223679).
CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
CVE-2024-26915: Fixed drm/amdgpu reset IH OVERFLOW_CLEAR bit (bsc#1223207).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26898: Fixed aoe potential use-after-free problem in aoecmd_cfg_pkts (bsc#1223016).
CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26876: Fixed drm/bridge/adv7511 crash on irq during probe (bsc#1223119).
CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
CVE-2024-26857: Fixed geneve to make sure to pull inner header in…

Record: SUSE-SU-2024:1644-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1659-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26760: Fixed scsi/target/pscsi bio_put() for error case (bsc#1222596).
CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-27041: Fixed drm/amd/display NULL checks for adev->dm.dc in amdgpu_dm_fini() (bsc#1223714).
CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
CVE-2024-26857: Fixed geneve to make sure to pull inner header in geneve_rx() (bsc#1223058).
CVE-2024-26856: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052).
CVE-2024-26855: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051).
CVE-2024-26853: Fixed igc returning frame twice in XDP_REDIRECT (bsc#1223061).
CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify()…

Record: SUSE-SU-2024:1659-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1663-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Real Time kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-27041: Fixed drm/amd/display NULL checks for adev->dm.dc in amdgpu_dm_fini() (bsc#1223714).
CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
CVE-2024-26857: Fixed geneve to make sure to pull inner header in geneve_rx() (bsc#1223058).
CVE-2024-26856: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052).
CVE-2024-26855: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051).
CVE-2024-26853: Fixed igc returning frame twice in XDP_REDIRECT (bsc#1223061).
CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).
CVE-2024-26848: Fixed afs endless loop in directory parsing…

Record: SUSE-SU-2024:1663-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2023-6270: Fixed a use-after-free issue in…

Record: SUSE-SU-2024:2135-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2203-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26632: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635).
CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26704: Fixed a…

Record: SUSE-SU-2024:2203-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…

Record: SUSE-SU-2024:2973-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
CVE-2024-35890:…

Record: SUSE-SU-2025:20008-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…

Record: SUSE-SU-2025:20028-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20166-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20249-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20249-1
Updated: 2026-11-02

OSVUSN-6816-1 No score

linux, linux-ibm, linux-lowlatency, linux-raspi vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network…

Record: USN-6816-1
Updated: 2026-11-02

OSVUSN-6817-1 No score

linux-aws, linux-gcp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…

Record: USN-6817-1
Updated: 2026-11-02

OSVUSN-6817-2 No score

linux-oem-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…

Record: USN-6817-2
Updated: 2026-11-02

OSVUSN-6817-3 No score

linux-azure, linux-gke vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…

Record: USN-6817-3
Updated: 2026-11-02

OSVUSN-6878-1 No score

linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-27032, CVE-2024-26868, CVE-2024-26879, CVE-2024-27033, CVE-2024-26943, CVE-2024-27040, CVE-2024-26950, CVE-2023-52650,…

Record: USN-6878-1
Updated: 2026-11-02

OSVUSN-6898-1 No score

linux, linux-gcp, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-oracle vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…

Record: USN-6898-1
Updated: 2026-11-02

OSVUSN-6898-2 No score

linux-ibm-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…

Record: USN-6898-2
Updated: 2026-11-02

OSVUSN-6898-3 No score

linux-aws, linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…

Record: USN-6898-3
Updated: 2026-11-02

OSVUSN-6898-4 No score

linux-aws-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35872, CVE-2024-35807, CVE-2024-27013, CVE-2024-35989, CVE-2024-36008, CVE-2024-26957, CVE-2024-35912, CVE-2024-27000, CVE-2024-35918, CVE-2024-26977, CVE-2024-35821, CVE-2024-35853, CVE-2024-26814, CVE-2024-35823, CVE-2024-35958, CVE-2024-26813, CVE-2024-26811, CVE-2024-26937, CVE-2024-26951, CVE-2024-35925, CVE-2024-26929, CVE-2024-35988, CVE-2024-35902, CVE-2024-26994, CVE-2024-27001, CVE-2024-36029, CVE-2024-36005, CVE-2024-35970, CVE-2024-36007, CVE-2024-35809, CVE-2024-27019, CVE-2024-26970, CVE-2024-27059, CVE-2024-35877, CVE-2024-35899, CVE-2024-26989, CVE-2024-27008, CVE-2024-26812, CVE-2024-35969, CVE-2024-35785, CVE-2024-35871, CVE-2024-35847, CVE-2024-36006, CVE-2024-35973, CVE-2024-27396, CVE-2024-35849, CVE-2024-35990, CVE-2024-26960, CVE-2024-26931, CVE-2024-35852, CVE-2024-26965, CVE-2024-35960, CVE-2024-35813, CVE-2024-26976, CVE-2024-36004, CVE-2024-35895, CVE-2024-27018, CVE-2024-26969, CVE-2024-27016, CVE-2024-27437, CVE-2024-26956, CVE-2024-26629,…

Record: USN-6898-4
Updated: 2026-11-02

OSVUSN-6917-1 No score

linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
Distributed Switch Architecture;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
Key management;
ALSA SH drivers;
KVM core; (CVE-2024-26993, CVE-2024-26996, CVE-2024-35879, CVE-2024-26812, CVE-2024-26984, CVE-2024-26817, CVE-2024-35950, CVE-2024-26960, CVE-2024-27437, CVE-2024-26964, CVE-2024-27059, CVE-2024-35969, CVE-2024-35936, CVE-2024-35912, CVE-2024-35915, CVE-2024-35938, CVE-2024-27019, CVE-2024-35822, CVE-2024-35997, CVE-2024-35855, CVE-2024-26925, CVE-2024-26654, CVE-2024-26923, CVE-2024-36031, CVE-2024-36020, CVE-2024-35823, CVE-2024-35852, CVE-2024-35989, CVE-2024-27000, CVE-2024-35853, CVE-2024-27013, CVE-2024-35854, CVE-2024-35922, CVE-2024-26937, CVE-2023-52880, CVE-2024-26974, CVE-2024-26629, CVE-2024-35804, CVE-2024-35958, CVE-2024-26814, CVE-2024-35890, CVE-2024-35940, CVE-2024-26999, CVE-2024-35847, CVE-2024-27015, CVE-2024-26687, CVE-2024-26970, CVE-2024-35930, CVE-2024-26813, CVE-2024-26810, CVE-2024-26969, CVE-2024-26977, CVE-2024-26956, CVE-2024-35901, CVE-2024-27020,…

Record: USN-6917-1
Updated: 2026-11-02

OSVUSN-6919-1 No score

linux-raspi vulnerabilities

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client; -…

Record: USN-6919-1
Updated: 2026-11-02

OSVUSN-6927-1 No score

linux-gcp-5.15 vulnerabilities

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
Distributed Switch Architecture;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35902, CVE-2024-35958, CVE-2024-35978, CVE-2024-35886, CVE-2024-35807, CVE-2024-26994, CVE-2024-36004, CVE-2024-35955, CVE-2024-26925, CVE-2024-27059, CVE-2024-35989, CVE-2024-35940, CVE-2024-26952, CVE-2024-35907, CVE-2024-35819, CVE-2024-35872, CVE-2024-36016, CVE-2023-52488, CVE-2024-35884, CVE-2024-26886, CVE-2024-27018, CVE-2024-35905, CVE-2024-35897, CVE-2024-26929, CVE-2024-36007, CVE-2024-35855, CVE-2024-35885, CVE-2024-26965, CVE-2024-35896, CVE-2024-36029, CVE-2024-35813, CVE-2024-26811, CVE-2024-26923,…

Record: USN-6927-1
Updated: 2026-11-02

OSVUSN-7019-1 No score

linux-xilinx-zynqmp vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-40902)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
M68K architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
Bluetooth drivers;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FireWire subsystem;
FPGA Framework;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
IRQ chip drivers;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
EEPROM drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Pin controllers subsystem;
PTP clock framework;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC…

Record: USN-7019-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`hyperv-daemons` Azure Linux:2	before 5.15.158.1-1	5.15.158.1-1
`linux-lts` Alpaquita:23	6.1.82-r0 up to 6.1.89-r0	6.1.89-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.7.els27	7.0.0-284.1101.el9_2.tuxcare.7.els27
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els27	2:1.0.0-2.el9_2.tuxcare.7.els27
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els27	2:1.0.0-2.el9_2.tuxcare.7.els27
`libbpf-static` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els27	2:1.0.0-2.el9_2.tuxcare.7.els27
`perf` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`python3-perf` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`rtla` TuxCare:AlmaLinux:9.2 From an advisory covering 38 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els27	5.14.0-284.1101.el9_2.tuxcare.7.els27
`Kernel` Linux	5.6.0 up to 5.10.215, 5.11.0 up to 5.15.154, 5.16.0 up to 6.1.84, 6.2.0 up to 6.6.24, 6.7.0 up to 6.7.12, 6.8.0 up to 6.8.3	5.10.2155.15.1546.1.846.6.246.7.126.8.3
`linux` Debian:12	before 6.1.85-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 14 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1	6.1.85-1
`linux` Debian:13	before 6.7.12-1	6.7.12-1
`linux` Debian:14	before 6.7.12-1	6.7.12-1
`linux-5.10` Debian:10 From an advisory covering 344 CVEs	before 5.10.216-1~deb10u1, plus listed versions 5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1 Show 8 moreShow less 5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1	5.10.216-1~deb10u1
`linux` Debian:11 From an advisory covering 246 CVEs	before 5.10.216-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 34 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.216-1
`bpftool-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`bpftool` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`bpftool-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-tools` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-tools-libs` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-uki-virt-addons` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`libperf-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`perf-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`python3-perf` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2.150500.6.27.2	5.14.21-150500.55.62.2.150500.6.27.2
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2.150500.6.27.2	5.14.21-150500.55.62.2.150500.6.27.2
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.1	5.14.21-150500.55.62.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-livepatch-SLE15-SP5_Update_13` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 218 CVEs	before 1-150500.11.3.2	1-150500.11.3.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.1	5.14.21-150500.55.62.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2.150500.6.27.2	5.14.21-150500.55.62.2.150500.6.27.2
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.1	5.14.21-150500.55.62.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.1	5.14.21-150500.55.62.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-livepatch-SLE15-SP5-RT_Update_14` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 219 CVEs	before 1-150500.11.5.1	1-150500.11.5.1
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.1	6.4.0-150600.8.5.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.1	6.4.0-150600.8.5.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3.150600.12.2.7	6.4.0-150600.23.7.3.150600.12.2.7
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.2	6.4.0-150600.23.7.2
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.4	6.4.0-150600.23.7.4
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.2	6.4.0-150600.23.7.2
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-livepatch-SLE15-SP6_Update_1` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 408 CVEs	before 1-150600.13.3.7	1-150600.13.3.7
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3.150600.12.2.7	6.4.0-150600.23.7.3.150600.12.2.7
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.4	6.4.0-150600.23.7.4
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.2	6.4.0-150600.23.7.2
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-livepatch-SLE15-SP6-RT_Update_1` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 783 CVEs	before 1-150600.1.5.1	1-150600.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-17.1.1.51	6.4.0-17.1.1.51
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 826 CVEs	before 6.4.0-9.1	6.4.0-9.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 826 CVEs	before 6.4.0-9.1	6.4.0-9.1
`kernel-livepatch-MICRO-6-0-RT_Update_5` SUSE:Linux Micro 6.0 From an advisory covering 610 CVEs	before 1-1.1	1-1.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-livepatch-MICRO-6-0-RT_Update_5` SUSE:Linux Micro 6.1 From an advisory covering 610 CVEs	before 1-1.1	1-1.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1065.71~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 35 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.1	5.15.0-1065.71~20.04.1
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1068.77~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 38 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.1	5.15.0-1068.77~20.04.1
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1065.73~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 35 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.1	5.15.0-1065.73~20.04.1
`linux-gkeop-5.15` Ubuntu:20.04:LTS	before 5.15.0-1048.55~20.04.1, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 32 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.1	5.15.0-1048.55~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-116.126~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 35 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.1	5.15.0-116.126~20.04.1
`linux-ibm-5.15` Ubuntu:20.04:LTS	before 5.15.0-1058.61~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 16 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.1	5.15.0-1058.61~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1060.66~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 26 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.1	5.15.0-1060.66~20.04.1
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-116.126~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 35 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.1	5.15.0-116.126~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:20.04:LTS	before 5.15.0-1027.27~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 7 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.1	5.15.0-1027.27~20.04.1
`linux-oracle-5.15` Ubuntu:20.04:LTS	before 5.15.0-1063.69~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 34 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.1	5.15.0-1063.69~20.04.1
`linux-riscv-5.15` Ubuntu:20.04:LTS	before 5.15.0-1061.65~20.04.1, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 33 moreShow less 5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.1	5.15.0-1061.65~20.04.1
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux` Ubuntu:22.04:LTS	before 5.15.0-116.126, plus listed versions 5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23 Show 45 moreShow less 5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115	5.15.0-116.126
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws` Ubuntu:22.04:LTS	before 5.15.0-1065.71, plus listed versions 5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7 Show 44 moreShow less 5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70	5.15.0-1065.71
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-azure` Ubuntu:22.04:LTS	before 5.15.0-1068.77, plus listed versions 5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6 Show 45 moreShow less 5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75	5.15.0-1068.77
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-fde` Ubuntu:22.04:LTS	before 5.15.0-1068.77.1, plus listed versions 5.15.0-1019.24.15.15.0-1024.30.15.15.0-1029.36.15.15.0-1030.37.15.15.0-1031.38.1 Show 29 moreShow less 5.15.0-1033.40.15.15.0-1034.41.15.15.0-1035.42.15.15.0-1036.43.15.15.0-1037.44.15.15.0-1038.45.15.15.0-1039.46.15.15.0-1041.48.15.15.0-1042.49.15.15.0-1044.51.15.15.0-1045.52.15.15.0-1046.53.15.15.0-1047.54.15.15.0-1049.56.15.15.0-1050.57.15.15.0-1051.59.15.15.0-1052.60.15.15.0-1053.61.15.15.0-1054.62.15.15.0-1056.64.15.15.0-1057.65.15.15.0-1058.66.15.15.0-1059.67.15.15.0-1060.69.15.15.0-1061.70.15.15.0-1063.72.15.15.0-1064.73.15.15.0-1065.74.15.15.0-1067.76.1	5.15.0-1068.77.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp` Ubuntu:22.04:LTS	before 5.15.0-1064.72, plus listed versions 5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7 Show 43 moreShow less 5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.71	5.15.0-1064.72
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-gke` Ubuntu:22.04:LTS	before 5.15.0-1062.68, plus listed versions 5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7 Show 42 moreShow less 5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.67	5.15.0-1062.68
`linux-gkeop` Ubuntu:22.04:LTS	before 5.15.0-1048.55, plus listed versions 5.15.0-1001.25.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7 Show 35 moreShow less 5.15.0-1007.105.15.0-1008.125.15.0-1011.155.15.0-1012.165.15.0-1013.175.15.0-1015.195.15.0-1016.215.15.0-1017.225.15.0-1018.235.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.285.15.0-1024.295.15.0-1025.305.15.0-1026.315.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.375.15.0-1032.385.15.0-1033.395.15.0-1034.405.15.0-1035.415.15.0-1036.425.15.0-1037.435.15.0-1038.445.15.0-1039.455.15.0-1040.465.15.0-1043.505.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.54	5.15.0-1048.55
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-ibm` Ubuntu:22.04:LTS	before 5.15.0-1058.61, plus listed versions 5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8 Show 40 moreShow less 5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.60	5.15.0-1058.61
`linux-intel-iotg` Ubuntu:22.04:LTS	before 5.15.0-1060.66, plus listed versions 5.15.0-1004.65.15.0-1008.115.15.0-1010.145.15.0-1013.175.15.0-1015.20 Show 32 moreShow less 5.15.0-1016.215.15.0-1017.225.15.0-1018.235.15.0-1021.265.15.0-1023.285.15.0-1025.305.15.0-1026.315.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.455.15.0-1040.465.15.0-1043.495.15.0-1045.515.15.0-1046.525.15.0-1047.535.15.0-1048.545.15.0-1049.555.15.0-1050.565.15.0-1051.575.15.0-1052.585.15.0-1055.615.15.0-1057.635.15.0-1058.645.15.0-1059.65	5.15.0-1060.66
`linux-kvm` Ubuntu:22.04:LTS	before 5.15.0-1062.67, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1002.2 Show 45 moreShow less 5.15.0-1004.45.15.0-1005.55.15.0-1007.75.15.0-1008.85.15.0-1010.115.15.0-1012.145.15.0-1013.165.15.0-1016.195.15.0-1017.215.15.0-1018.225.15.0-1019.235.15.0-1020.245.15.0-1021.265.15.0-1024.295.15.0-1025.305.15.0-1026.315.15.0-1028.335.15.0-1029.345.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.65	5.15.0-1062.67

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26951 is a high vulnerability (CVSS 7.8) in Debian Linux, published May 1, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 14th percentile. Fixed in hyperv-daemons 5.15.158.1-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 150 package rows, 7 versions, 6,598 references and the rest of 23 source descriptions. The JSON record has them.