Every CVE Search/ Get API key

CVE-2021-47118

pid: take a reference when initializing `cad_pid`

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

pid: take a reference when initializing cad_pid

During boot, kernel_init_freeable() initializes cad_pid to the init task's struct pid. Later on, we may change cad_pid via a sysctl, and when this happens proc_do_cad_pid() will increment the refcount on the new pid via get_pid(), and will decrement the refcount on the old pid via put_pid(). As we never called get_pid() when we initialized cad_pid, we decrement a reference we never incremented, can therefore free the init task's struct pid early. As there can be dangling references to the struct pid, we can later encounter a use-after-free (e.g. when delivering signals).

This was spotted when fuzzing v5.13-rc3 with Syzkaller, but seems to have been around since the conversion of cad_pid to struct pid in commit 9ec52099e4b8 ("[PATCH] replace cad_pid by a struct pid") from the pre-KASAN stone age of v2.6.19.

Fix this by getting a reference to the init task's struct pid when we assign it to cad_pid.

Full KASAN splat below.

================================================================== BUG: KASAN: use-after-free in ns_of_pid include/linux/pid.h:153 [inline] BUG: KASAN: use-after-free in task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 Read of size 4 at addr ffff23794dda0004 by task syz-executor.0/273

CPU: 1 PID: 273 Comm: syz-executor.0 Not tainted 5.12.0-00001-g9aef892b2d15 #1 Hardware name: linux,dummy-virt (DT) Call trace: ns_of_pid include/linux/pid.h:153 [inline] task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 do_notify_parent+0x308/0xe60 kernel/signal.c:1950 exit_notify kernel/exit.c:682 [inline] do_exit+0x2334/0x2bd0 kernel/exit.c:845 do_group_exit+0x108/0x2c8 kernel/exit.c:922 get_signal+0x4e4/0x2a88 kernel/signal.c:2781 do_signal arch/arm64/kernel/signal.c:882 [inline] do_notify_resume+0x300/0x970 arch/arm64/kernel/signal.c:936 work_pending+0xc/0x2dc

Allocated by task 0: slab_post_alloc_hook+0x50/0x5c0 mm/slab.h:516 slab_alloc_node mm/slub.c:2907 [inline] slab_alloc mm/slub.c:2915 [inline] kmem_cache_alloc+0x1f4/0x4c0 mm/slub.c:2920 alloc_pid+0xdc/0xc00 kernel/pid.c:180 copy_process+0x2794/0x5e18 kernel/fork.c:2129 kernel_clone+0x194/0x13c8 kernel/fork.c:2500 kernel_thread+0xd4/0x110 kernel/fork.c:2552 rest_init+0x44/0x4a0 init/main.c:687 arch_call_rest_init+0x1c/0x28 start_kernel+0x520/0x554 init/main.c:1064 0x0

Freed by task 270: slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x98/0x260 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kmem_cache_free+0x224/0x8e0 mm/slub.c:3177 put_pid.part.4+0xe0/0x1a8 kernel/pid.c:114 put_pid+0x30/0x48 kernel/pid.c:109 proc_do_cad_pid+0x190/0x1b0 kernel/sysctl.c:1401 proc_sys_call_handler+0x338/0x4b0 fs/proc/proc_sysctl.c:591 proc_sys_write+0x34/0x48 fs/proc/proc_sysctl.c:617 call_write_iter include/linux/fs.h:1977 [inline] new_sync_write+0x3ac/0x510 fs/read_write.c:518 vfs_write fs/read_write.c:605 [inline] vfs_write+0x9c4/0x1018 fs/read_write.c:585 ksys_write+0x124/0x240 fs/read_write.c:658 __do_sys_write fs/read_write.c:670 [inline] __se_sys_write fs/read_write.c:667 [inline] __arm64_sys_write+0x78/0xb0 fs/read_write.c:667 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] el0_svc_common.constprop.1+0x16c/0x388 arch/arm64/kernel/syscall.c:129 do_el0_svc+0xf8/0x150 arch/arm64/kernel/syscall.c:168 el0_svc+0x28/0x38 arch/arm64/kernel/entry-common.c:416 el0_sync_handler+0x134/0x180 arch/arm64/kernel/entry-common.c:432 el0_sync+0x154/0x180 arch/arm64/kernel/entry.S:701

The buggy address belongs to the object at ffff23794dda0000 which belongs to the cache pid of size 224 The buggy address is located 4 bytes inside of 224-byte region [ff ---truncated---

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.25%Up 0.2 points since Mar 16, 2024
90%50%10%1%

What each source reports

NVD Score used 7.8

In the Linux kernel, the following vulnerability has been resolved:

pid: take a reference when initializing cad_pid

During boot, kernel_init_freeable() initializes cad_pid to the init task's struct pid. Later on, we may change cad_pid via a sysctl, and when this happens proc_do_cad_pid() will increment the refcount on the new pid via get_pid(), and will decrement the refcount on the old pid via put_pid(). As we never called get_pid() when we initialized cad_pid, we decrement a reference we never incremented, can therefore free the init task's struct pid early. As there can be dangling references to the struct pid, we can later encounter a use-after-free (e.g. when delivering signals).

This was spotted when fuzzing v5.13-rc3 with Syzkaller, but seems to have been around since the conversion of cad_pid to struct pid in commit 9ec52099e4b8 ("[PATCH] replace cad_pid by a struct pid") from the pre-KASAN stone age of v2.6.19.

Fix this by getting a reference to the init task's struct pid when we assign it to cad_pid.

Full KASAN splat below.

================================================================== BUG: KASAN: use-after-free in ns_of_pid include/linux/pid.h:153 [inline] BUG: KASAN: use-after-free in task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 Read of size 4 at addr ffff23794dda0004 by task syz-executor.0/273

CPU: 1 PID: 273 Comm: syz-executor.0 Not tainted 5.12.0-00001-g9aef892b2d15 #1 Hardware name: linux,dummy-virt (DT) Call trace: ns_of_pid include/linux/pid.h:153 [inline] task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 do_notify_parent+0x308/0xe60 kernel/signal.c:1950 exit_notify kernel/exit.c:682 [inline] do_exit+0x2334/0x2bd0 kernel/exit.c:845 do_group_exit+0x108/0x2c8 kernel/exit.c:922 get_signal+0x4e4/0x2a88 kernel/signal.c:2781 do_signal arch/arm64/kernel/signal.c:882 [inline] do_notify_resume+0x300/0x970 arch/arm64/kernel/signal.c:936 work_pending+0xc/0x2dc

Allocated by task 0: slab_post_alloc_hook+0x50/0x5c0 mm/slab.h:516 slab_alloc_node mm/slub.c:2907 [inline] slab_alloc mm/slub.c:2915 [inline] kmem_cache_alloc+0x1f4/0x4c0 mm/slub.c:2920 alloc_pid+0xdc/0xc00 kernel/pid.c:180 copy_process+0x2794/0x5e18 kernel/fork.c:2129 kernel_clone+0x194/0x13c8 kernel/fork.c:2500 kernel_thread+0xd4/0x110 kernel/fork.c:2552 rest_init+0x44/0x4a0 init/main.c:687 arch_call_rest_init+0x1c/0x28 start_kernel+0x520/0x554 init/main.c:1064 0x0

Freed by task 270: slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x98/0x260 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kmem_cache_free+0x224/0x8e0 mm/slub.c:3177 put_pid.part.4+0xe0/0x1a8 kernel/pid.c:114 put_pid+0x30/0x48 kernel/pid.c:109 proc_do_cad_pid+0x190/0x1b0 kernel/sysctl.c:1401 proc_sys_call_handler+0x338/0x4b0 fs/proc/proc_sysctl.c:591 proc_sys_write+0x34/0x48 fs/proc/proc_sysctl.c:617 call_write_iter include/linux/fs.h:1977 [inline] new_sync_write+0x3ac/0x510 fs/read_write.c:518 vfs_write fs/read_write.c:605 [inline] vfs_write+0x9c4/0x1018 fs/read_write.c:585 ksys_write+0x124/0x240 fs/read_write.c:658 __do_sys_write fs/read_write.c:670 [inline] __se_sys_write fs/read_write.c:667 [inline] __arm64_sys_write+0x78/0xb0 fs/read_write.c:667 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] el0_svc_common.constprop.1+0x16c/0x388 arch/arm64/kernel/syscall.c:129 do_el0_svc+0xf8/0x150 arch/arm64/kernel/syscall.c:168 el0_svc+0x28/0x38 arch/arm64/kernel/entry-common.c:416 el0_sync_handler+0x134/0x180 arch/arm64/kernel/entry-common.c:432 el0_sync+0x154/0x180 arch/arm64/kernel/entry.S:701

The buggy address belongs to the object at ffff23794dda0000 which belongs to the cache pid of size 224 The buggy address is located 4 bytes inside of 224-byte region [ff ---truncated---

Record
CVE-2021-47118
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
CVE List No score

pid: take a reference when initializing `cad_pid`

In the Linux kernel, the following vulnerability has been resolved:

pid: take a reference when initializing cad_pid

During boot, kernel_init_freeable() initializes cad_pid to the init task's struct pid. Later on, we may change cad_pid via a sysctl, and when this happens proc_do_cad_pid() will increment the refcount on the new pid via get_pid(), and will decrement the refcount on the old pid via put_pid(). As we never called get_pid() when we initialized cad_pid, we decrement a reference we never incremented, can therefore free the init task's struct pid early. As there can be dangling references to the struct pid, we can later encounter a use-after-free (e.g. when delivering signals).

This was spotted when fuzzing v5.13-rc3 with Syzkaller, but seems to have been around since the conversion of cad_pid to struct pid in commit 9ec52099e4b8 ("[PATCH] replace cad_pid by a struct pid") from the pre-KASAN stone age of v2.6.19.

Fix this by getting a reference to the init task's struct pid when we assign it to cad_pid.

Full KASAN splat below.

================================================================== BUG: KASAN: use-after-free in ns_of_pid include/linux/pid.h:153 [inline] BUG: KASAN: use-after-free in task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 Read of size 4 at addr ffff23794dda0004 by task syz-executor.0/273

CPU: 1 PID: 273 Comm: syz-executor.0 Not tainted 5.12.0-00001-g9aef892b2d15 #1 Hardware name: linux,dummy-virt (DT) Call trace: ns_of_pid include/linux/pid.h:153 [inline] task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 do_notify_parent+0x308/0xe60 kernel/signal.c:1950 exit_notify kernel/exit.c:682 [inline] do_exit+0x2334/0x2bd0 kernel/exit.c:845 do_group_exit+0x108/0x2c8 kernel/exit.c:922 get_signal+0x4e4/0x2a88 kernel/signal.c:2781 do_signal arch/arm64/kernel/signal.c:882 [inline] do_notify_resume+0x300/0x970 arch/arm64/kernel/signal.c:936 work_pending+0xc/0x2dc

Allocated by task 0: slab_post_alloc_hook+0x50/0x5c0 mm/slab.h:516 slab_alloc_node mm/slub.c:2907 [inline] slab_alloc mm/slub.c:2915 [inline] kmem_cache_alloc+0x1f4/0x4c0 mm/slub.c:2920 alloc_pid+0xdc/0xc00 kernel/pid.c:180 copy_process+0x2794/0x5e18 kernel/fork.c:2129 kernel_clone+0x194/0x13c8 kernel/fork.c:2500 kernel_thread+0xd4/0x110 kernel/fork.c:2552 rest_init+0x44/0x4a0 init/main.c:687 arch_call_rest_init+0x1c/0x28 start_kernel+0x520/0x554 init/main.c:1064 0x0

Freed by task 270: slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x98/0x260 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kmem_cache_free+0x224/0x8e0 mm/slub.c:3177 put_pid.part.4+0xe0/0x1a8 kernel/pid.c:114 put_pid+0x30/0x48 kernel/pid.c:109 proc_do_cad_pid+0x190/0x1b0 kernel/sysctl.c:1401 proc_sys_call_handler+0x338/0x4b0 fs/proc/proc_sysctl.c:591 proc_sys_write+0x34/0x48 fs/proc/proc_sysctl.c:617 call_write_iter include/linux/fs.h:1977 [inline] new_sync_write+0x3ac/0x510 fs/read_write.c:518 vfs_write fs/read_write.c:605 [inline] vfs_write+0x9c4/0x1018 fs/read_write.c:585 ksys_write+0x124/0x240 fs/read_write.c:658 __do_sys_write fs/read_write.c:670 [inline] __se_sys_write fs/read_write.c:667 [inline] __arm64_sys_write+0x78/0xb0 fs/read_write.c:667 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] el0_svc_common.constprop.1+0x16c/0x388 arch/arm64/kernel/syscall.c:129 do_el0_svc+0xf8/0x150 arch/arm64/kernel/syscall.c:168 el0_svc+0x28/0x38 arch/arm64/kernel/entry-common.c:416 el0_sync_handler+0x134/0x180 arch/arm64/kernel/entry-common.c:432 el0_sync+0x154/0x180 arch/arm64/kernel/entry.S:701

The buggy address belongs to the object at ffff23794dda0000 which belongs to the cache pid of size 224 The buggy address is located 4 bytes inside of 224-byte region [ff ---truncated---

Record
CVE-2021-47118
Updated
2026-11-02
EUVDEUVD-2021-33766 No score

In the Linux kernel, the following vulnerability has been resolved:

pid: take a reference when initializing cad_pid

During boot, kernel_init_freeable() initializes cad_pid to the init task's struct pid. Later on, we may change cad_pid via a sysctl, and when this happens proc_do_cad_pid() will increment the refcount on the new pid via get_pid(), and will decrement the refcount on the old pid via put_pid(). As we never called get_pid() when we initialized cad_pid, we decrement a reference we never incremented, can therefore free the init task's struct pid early. As there can be dangling references to the struct pid, we can later encounter a use-after-free (e.g. when delivering signals).

This was spotted when fuzzing v5.13-rc3 with Syzkaller, but seems to have been around since the conversion of cad_pid to struct pid in commit 9ec52099e4b8 ("[PATCH] replace cad_pid by a struct pid") from the pre-KASAN stone age of v2.6.19.

Fix this by getting a reference to the init task's struct pid when we assign it to cad_pid.

Full KASAN splat below.

================================================================== BUG: KASAN: use-after-free in ns_of_pid include/linux/pid.h:153 [inline] BUG: KASAN: use-after-free in task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 Read of size 4 at addr ffff23794dda0004 by task syz-executor.0/273

CPU: 1 PID: 273 Comm: syz-executor.0 Not tainted 5.12.0-00001-g9aef892b2d15 #1 Hardware name: linux,dummy-virt (DT) Call trace: ns_of_pid include/linux/pid.h:153 [inline] task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 do_notify_parent+0x308/0xe60 kernel/signal.c:1950 exit_notify kernel/exit.c:682 [inline] do_exit+0x2334/0x2bd0 kernel/exit.c:845 do_group_exit+0x108/0x2c8 kernel/exit.c:922 get_signal+0x4e4/0x2a88 kernel/signal.c:2781 do_signal arch/arm64/kernel/signal.c:882 [inline] do_notify_resume+0x300/0x970 arch/arm64/kernel/signal.c:936 work_pending+0xc/0x2dc

Allocated by task 0: slab_post_alloc_hook+0x50/0x5c0 mm/slab.h:516 slab_alloc_node mm/slub.c:2907 [inline] slab_alloc mm/slub.c:2915 [inline] kmem_cache_alloc+0x1f4/0x4c0 mm/slub.c:2920 alloc_pid+0xdc/0xc00 kernel/pid.c:180 copy_process+0x2794/0x5e18 kernel/fork.c:2129 kernel_clone+0x194/0x13c8 kernel/fork.c:2500 kernel_thread+0xd4/0x110 kernel/fork.c:2552 rest_init+0x44/0x4a0 init/main.c:687 arch_call_rest_init+0x1c/0x28 start_kernel+0x520/0x554 init/main.c:1064 0x0

Freed by task 270: slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x98/0x260 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kmem_cache_free+0x224/0x8e0 mm/slub.c:3177 put_pid.part.4+0xe0/0x1a8 kernel/pid.c:114 put_pid+0x30/0x48 kernel/pid.c:109 proc_do_cad_pid+0x190/0x1b0 kernel/sysctl.c:1401 proc_sys_call_handler+0x338/0x4b0 fs/proc/proc_sysctl.c:591 proc_sys_write+0x34/0x48 fs/proc/proc_sysctl.c:617 call_write_iter include/linux/fs.h:1977 [inline] new_sync_write+0x3ac/0x510 fs/read_write.c:518 vfs_write fs/read_write.c:605 [inline] vfs_write+0x9c4/0x1018 fs/read_write.c:585 ksys_write+0x124/0x240 fs/read_write.c:658 __do_sys_write fs/read_write.c:670 [inline] __se_sys_write fs/read_write.c:667 [inline] __arm64_sys_write+0x78/0xb0 fs/read_write.c:667 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] el0_svc_common.constprop.1+0x16c/0x388 arch/arm64/kernel/syscall.c:129 do_el0_svc+0xf8/0x150 arch/arm64/kernel/syscall.c:168 el0_svc+0x28/0x38 arch/arm64/kernel/entry-common.c:416 el0_sync_handler+0x134/0x180 arch/arm64/kernel/entry-common.c:432 el0_sync+0x154/0x180 arch/arm64/kernel/entry.S:701

The buggy address belongs to the object at ffff23794dda0000 which belongs to the cache pid of size 224 The buggy address is located 4 bytes inside of 224-byte region [ff ---truncated---

Record
EUVD-2021-33766
Updated
2026-11-02
GitHub AdvisoriesGHSA-f22j-p6f5-7h8x 7.8

In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when...

In the Linux kernel, the following vulnerability has been resolved:

pid: take a reference when initializing cad_pid

During boot, kernel_init_freeable() initializes cad_pid to the init task's struct pid. Later on, we may change cad_pid via a sysctl, and when this happens proc_do_cad_pid() will increment the refcount on the new pid via get_pid(), and will decrement the refcount on the old pid via put_pid(). As we never called get_pid() when we initialized cad_pid, we decrement a reference we never incremented, can therefore free the init task's struct pid early. As there can be dangling references to the struct pid, we can later encounter a use-after-free (e.g. when delivering signals).

This was spotted when fuzzing v5.13-rc3 with Syzkaller, but seems to have been around since the conversion of cad_pid to struct pid in commit 9ec52099e4b8 ("[PATCH] replace cad_pid by a struct pid") from the pre-KASAN stone age of v2.6.19.

Fix this by getting a reference to the init task's struct pid when we assign it to cad_pid.

Full KASAN splat below.

================================================================== BUG: KASAN: use-after-free in ns_of_pid include/linux/pid.h:153 [inline] BUG: KASAN: use-after-free in task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 Read of size 4 at addr ffff23794dda0004 by task syz-executor.0/273

CPU: 1 PID: 273 Comm: syz-executor.0 Not tainted 5.12.0-00001-g9aef892b2d15 #1 Hardware name: linux,dummy-virt (DT) Call trace: ns_of_pid include/linux/pid.h:153 [inline] task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 do_notify_parent+0x308/0xe60 kernel/signal.c:1950 exit_notify kernel/exit.c:682 [inline] do_exit+0x2334/0x2bd0 kernel/exit.c:845 do_group_exit+0x108/0x2c8 kernel/exit.c:922 get_signal+0x4e4/0x2a88 kernel/signal.c:2781 do_signal arch/arm64/kernel/signal.c:882 [inline] do_notify_resume+0x300/0x970 arch/arm64/kernel/signal.c:936 work_pending+0xc/0x2dc

Allocated by task 0: slab_post_alloc_hook+0x50/0x5c0 mm/slab.h:516 slab_alloc_node mm/slub.c:2907 [inline] slab_alloc mm/slub.c:2915 [inline] kmem_cache_alloc+0x1f4/0x4c0 mm/slub.c:2920 alloc_pid+0xdc/0xc00 kernel/pid.c:180 copy_process+0x2794/0x5e18 kernel/fork.c:2129 kernel_clone+0x194/0x13c8 kernel/fork.c:2500 kernel_thread+0xd4/0x110 kernel/fork.c:2552 rest_init+0x44/0x4a0 init/main.c:687 arch_call_rest_init+0x1c/0x28 start_kernel+0x520/0x554 init/main.c:1064 0x0

Freed by task 270: slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x98/0x260 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kmem_cache_free+0x224/0x8e0 mm/slub.c:3177 put_pid.part.4+0xe0/0x1a8 kernel/pid.c:114 put_pid+0x30/0x48 kernel/pid.c:109 proc_do_cad_pid+0x190/0x1b0 kernel/sysctl.c:1401 proc_sys_call_handler+0x338/0x4b0 fs/proc/proc_sysctl.c:591 proc_sys_write+0x34/0x48 fs/proc/proc_sysctl.c:617 call_write_iter include/linux/fs.h:1977 [inline] new_sync_write+0x3ac/0x510 fs/read_write.c:518 vfs_write fs/read_write.c:605 [inline] vfs_write+0x9c4/0x1018 fs/read_write.c:585 ksys_write+0x124/0x240 fs/read_write.c:658 __do_sys_write fs/read_write.c:670 [inline] __se_sys_write fs/read_write.c:667 [inline] __arm64_sys_write+0x78/0xb0 fs/read_write.c:667 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] el0_svc_common.constprop.1+0x16c/0x388 arch/arm64/kernel/syscall.c:129 do_el0_svc+0xf8/0x150 arch/arm64/kernel/syscall.c:168 el0_svc+0x28/0x38 arch/arm64/kernel/entry-common.c:416 el0_sync_handler+0x134/0x180 arch/arm64/kernel/entry-common.c:432 el0_sync+0x154/0x180 arch/arm64/kernel/entry.S:701

The buggy address belongs to the object at ffff23794dda0000 which belongs to the cache pid of size 224 The buggy address is located 4 bytes inside of 224-byte region [ff ---truncated---

Record
GHSA-f22j-p6f5-7h8x
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSV 7.8

In the Linux kernel, the following vulnerability has been resolved:

pid: take a reference when initializing cad_pid

During boot, kernel_init_freeable() initializes cad_pid to the init task's struct pid. Later on, we may change cad_pid via a sysctl, and when this happens proc_do_cad_pid() will increment the refcount on the new pid via get_pid(), and will decrement the refcount on the old pid via put_pid(). As we never called get_pid() when we initialized cad_pid, we decrement a reference we never incremented, can therefore free the init task's struct pid early. As there can be dangling references to the struct pid, we can later encounter a use-after-free (e.g. when delivering signals).

This was spotted when fuzzing v5.13-rc3 with Syzkaller, but seems to have been around since the conversion of cad_pid to struct pid in commit 9ec52099e4b8 ("[PATCH] replace cad_pid by a struct pid") from the pre-KASAN stone age of v2.6.19.

Fix this by getting a reference to the init task's struct pid when we assign it to cad_pid.

Full KASAN splat below.

================================================================== BUG: KASAN: use-after-free in ns_of_pid include/linux/pid.h:153 [inline] BUG: KASAN: use-after-free in task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 Read of size 4 at addr ffff23794dda0004 by task syz-executor.0/273

CPU: 1 PID: 273 Comm: syz-executor.0 Not tainted 5.12.0-00001-g9aef892b2d15 #1 Hardware name: linux,dummy-virt (DT) Call trace: ns_of_pid include/linux/pid.h:153 [inline] task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 do_notify_parent+0x308/0xe60 kernel/signal.c:1950 exit_notify kernel/exit.c:682 [inline] do_exit+0x2334/0x2bd0 kernel/exit.c:845 do_group_exit+0x108/0x2c8 kernel/exit.c:922 get_signal+0x4e4/0x2a88 kernel/signal.c:2781 do_signal arch/arm64/kernel/signal.c:882 [inline] do_notify_resume+0x300/0x970 arch/arm64/kernel/signal.c:936 work_pending+0xc/0x2dc

Allocated by task 0: slab_post_alloc_hook+0x50/0x5c0 mm/slab.h:516 slab_alloc_node mm/slub.c:2907 [inline] slab_alloc mm/slub.c:2915 [inline] kmem_cache_alloc+0x1f4/0x4c0 mm/slub.c:2920 alloc_pid+0xdc/0xc00 kernel/pid.c:180 copy_process+0x2794/0x5e18 kernel/fork.c:2129 kernel_clone+0x194/0x13c8 kernel/fork.c:2500 kernel_thread+0xd4/0x110 kernel/fork.c:2552 rest_init+0x44/0x4a0 init/main.c:687 arch_call_rest_init+0x1c/0x28 start_kernel+0x520/0x554 init/main.c:1064 0x0

Freed by task 270: slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x98/0x260 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kmem_cache_free+0x224/0x8e0 mm/slub.c:3177 put_pid.part.4+0xe0/0x1a8 kernel/pid.c:114 put_pid+0x30/0x48 kernel/pid.c:109 proc_do_cad_pid+0x190/0x1b0 kernel/sysctl.c:1401 proc_sys_call_handler+0x338/0x4b0 fs/proc/proc_sysctl.c:591 proc_sys_write+0x34/0x48 fs/proc/proc_sysctl.c:617 call_write_iter include/linux/fs.h:1977 [inline] new_sync_write+0x3ac/0x510 fs/read_write.c:518 vfs_write fs/read_write.c:605 [inline] vfs_write+0x9c4/0x1018 fs/read_write.c:585 ksys_write+0x124/0x240 fs/read_write.c:658 __do_sys_write fs/read_write.c:670 [inline] __se_sys_write fs/read_write.c:667 [inline] __arm64_sys_write+0x78/0xb0 fs/read_write.c:667 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] el0_svc_common.constprop.1+0x16c/0x388 arch/arm64/kernel/syscall.c:129 do_el0_svc+0xf8/0x150 arch/arm64/kernel/syscall.c:168 el0_svc+0x28/0x38 arch/arm64/kernel/entry-common.c:416 el0_sync_handler+0x134/0x180 arch/arm64/kernel/entry-common.c:432 el0_sync+0x154/0x180 arch/arm64/kernel/entry.S:701

The buggy address belongs to the object at ffff23794dda0000 which belongs to the cache pid of size 224 The buggy address is located 4 bytes inside of 224-byte region [ff ---truncated---

Record
CVE-2021-47118
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-47118 7.8

In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when initializing cad_pid During boot, kernel_init_freeable() initializes cad_pid to the init task's struct pid. Later on, we may change cad_pid via a sysctl, and when this happens proc_do_cad_pid() will increment the refcount on the new pid via get_pid(), and will decrement the refcount on the old pid via put_pid(). As we never called get_pid() when we initialized cad_pid, we decrement a reference we never incremented, can therefore free the init task's struct pid early. As there can be dangling references to the struct pid, we can later encounter a use-after-free (e.g. when delivering signals). This was spotted when fuzzing v5.13-rc3 with Syzkaller, but seems to have been around since the conversion of cad_pid to struct pid in commit 9ec52099e4b8 ("[PATCH] replace cad_pid by a struct pid") from the pre-KASAN stone age of v2.6.19. Fix this by getting a reference to the init task's struct pid when we assign it to cad_pid. Full KASAN splat below. ================================================================== BUG: KASAN: use-after-free in ns_of_pid include/linux/pid.h:153 [inline] BUG: KASAN: use-after-free in task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 Read of size 4 at addr ffff23794dda0004 by task syz-executor.0/273 CPU: 1 PID: 273 Comm: syz-executor.0 Not tainted 5.12.0-00001-g9aef892b2d15 #1 Hardware name: linux,dummy-virt (DT) Call trace: ns_of_pid include/linux/pid.h:153 [inline] task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 do_notify_parent+0x308/0xe60 kernel/signal.c:1950 exit_notify kernel/exit.c:682 [inline] do_exit+0x2334/0x2bd0 kernel/exit.c:845 do_group_exit+0x108/0x2c8 kernel/exit.c:922 get_signal+0x4e4/0x2a88 kernel/signal.c:2781 do_signal arch/arm64/kernel/signal.c:882 [inline] do_notify_resume+0x300/0x970 arch/arm64/kernel/signal.c:936 work_pending+0xc/0x2dc Allocated by task 0: slab_post_alloc_hook+0x50/0x5c0 mm/slab.h:516 slab_alloc_node mm/slub.c:2907 [inline] slab_alloc mm/slub.c:2915 [inline] kmem_cache_alloc+0x1f4/0x4c0 mm/slub.c:2920 alloc_pid+0xdc/0xc00 kernel/pid.c:180 copy_process+0x2794/0x5e18 kernel/fork.c:2129 kernel_clone+0x194/0x13c8 kernel/fork.c:2500 kernel_thread+0xd4/0x110 kernel/fork.c:2552 rest_init+0x44/0x4a0 init/main.c:687 arch_call_rest_init+0x1c/0x28 start_kernel+0x520/0x554 init/main.c:1064 0x0 Freed by task 270: slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x98/0x260 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kmem_cache_free+0x224/0x8e0 mm/slub.c:3177 put_pid.part.4+0xe0/0x1a8 kernel/pid.c:114 put_pid+0x30/0x48 kernel/pid.c:109 proc_do_cad_pid+0x190/0x1b0 kernel/sysctl.c:1401 proc_sys_call_handler+0x338/0x4b0 fs/proc/proc_sysctl.c:591 proc_sys_write+0x34/0x48 fs/proc/proc_sysctl.c:617 call_write_iter include/linux/fs.h:1977 [inline] new_sync_write+0x3ac/0x510 fs/read_write.c:518 vfs_write fs/read_write.c:605 [inline] vfs_write+0x9c4/0x1018 fs/read_write.c:585 ksys_write+0x124/0x240 fs/read_write.c:658 __do_sys_write fs/read_write.c:670 [inline] __se_sys_write fs/read_write.c:667 [inline] __arm64_sys_write+0x78/0xb0 fs/read_write.c:667 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] el0_svc_common.constprop.1+0x16c/0x388 arch/arm64/kernel/syscall.c:129 do_el0_svc+0xf8/0x150 arch/arm64/kernel/syscall.c:168 el0_svc+0x28/0x38 arch/arm64/kernel/entry-common.c:416 el0_sync_handler+0x134/0x180 arch/arm64/kernel/entry-common.c:432 el0_sync+0x154/0x180 arch/arm64/kernel/entry.S:701 The buggy address belongs to the object at ffff23794dda0000 which belongs to the cache pid of size 224 The buggy address is located 4 bytes inside of 224-byte region [ff ---truncated---

Record
DEBIAN-CVE-2021-47118
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 22 moreShow less
OSVRHSA-2024:3618 7.8

Red Hat Security Advisory: kernel update

Record
RHSA-2024:3618
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3627 7.8

Red Hat Security Advisory: kernel-rt security and bug fix update

Record
RHSA-2024:3627
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-47118 7.8

In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when initializing cad_pid During boot, kernel_init_freeable() initializes cad_pid to the init task's struct pid. Later on, we may change cad_pid via a sysctl, and when this happens proc_do_cad_pid() will increment the refcount on the new pid via get_pid(), and will decrement the refcount on the old pid via put_pid(). As we never called get_pid() when we initialized cad_pid, we decrement a reference we never incremented, can therefore free the init task's struct pid early. As there can be dangling references to the struct pid, we can later encounter a use-after-free (e.g. when delivering signals). This was spotted when fuzzing v5.13-rc3 with Syzkaller, but seems to have been around since the conversion of cad_pid to struct pid in commit 9ec52099e4b8 ("[PATCH] replace cad_pid by a struct pid") from the pre-KASAN stone age of v2.6.19. Fix this by getting a reference to the init task's struct pid when we assign it to cad_pid. Full KASAN splat below. ================================================================== BUG: KASAN: use-after-free in ns_of_pid include/linux/pid.h:153 [inline] BUG: KASAN: use-after-free in task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 Read of size 4 at addr ffff23794dda0004 by task syz-executor.0/273 CPU: 1 PID: 273 Comm: syz-executor.0 Not tainted 5.12.0-00001-g9aef892b2d15 #1 Hardware name: linux,dummy-virt (DT) Call trace: ns_of_pid include/linux/pid.h:153 [inline] task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 do_notify_parent+0x308/0xe60 kernel/signal.c:1950 exit_notify kernel/exit.c:682 [inline] do_exit+0x2334/0x2bd0 kernel/exit.c:845 do_group_exit+0x108/0x2c8 kernel/exit.c:922 get_signal+0x4e4/0x2a88 kernel/signal.c:2781 do_signal arch/arm64/kernel/signal.c:882 [inline] do_notify_resume+0x300/0x970 arch/arm64/kernel/signal.c:936 work_pending+0xc/0x2dc Allocated by task 0: slab_post_alloc_hook+0x50/0x5c0 mm/slab.h:516 slab_alloc_node mm/slub.c:2907 [inline] slab_alloc mm/slub.c:2915 [inline] kmem_cache_alloc+0x1f4/0x4c0 mm/slub.c:2920 alloc_pid+0xdc/0xc00 kernel/pid.c:180 copy_process+0x2794/0x5e18 kernel/fork.c:2129 kernel_clone+0x194/0x13c8 kernel/fork.c:2500 kernel_thread+0xd4/0x110 kernel/fork.c:2552 rest_init+0x44/0x4a0 init/main.c:687 arch_call_rest_init+0x1c/0x28 start_kernel+0x520/0x554 init/main.c:1064 0x0 Freed by task 270: slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x98/0x260 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kmem_cache_free+0x224/0x8e0 mm/slub.c:3177 put_pid.part.4+0xe0/0x1a8 kernel/pid.c:114 put_pid+0x30/0x48 kernel/pid.c:109 proc_do_cad_pid+0x190/0x1b0 kernel/sysctl.c:1401 proc_sys_call_handler+0x338/0x4b0 fs/proc/proc_sysctl.c:591 proc_sys_write+0x34/0x48 fs/proc/proc_sysctl.c:617 call_write_iter include/linux/fs.h:1977 [inline] new_sync_write+0x3ac/0x510 fs/read_write.c:518 vfs_write fs/read_write.c:605 [inline] vfs_write+0x9c4/0x1018 fs/read_write.c:585 ksys_write+0x124/0x240 fs/read_write.c:658 __do_sys_write fs/read_write.c:670 [inline] __se_sys_write fs/read_write.c:667 [inline] __arm64_sys_write+0x78/0xb0 fs/read_write.c:667 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] el0_svc_common.constprop.1+0x16c/0x388 arch/arm64/kernel/syscall.c:129 do_el0_svc+0xf8/0x150 arch/arm64/kernel/syscall.c:168 el0_svc+0x28/0x38 arch/arm64/kernel/entry-common.c:416 el0_sync_handler+0x134/0x180 arch/arm64/kernel/entry-common.c:432 el0_sync+0x154/0x180 arch/arm64/kernel/entry.S:701 The buggy address belongs to the object at ffff23794dda0000 which belongs to the cache pid of size 224 The buggy address is located 4 bytes inside of 224-byte region [ff ---truncated---

Record
UBUNTU-CVE-2021-47118
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2024:3618 No score

Moderate: kernel update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
  • kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
  • kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
  • kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
  • kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
  • kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)
  • kernel: use after free in i2c (CVE-2019-25162)
  • kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
  • kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
  • kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
  • kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
  • kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
  • kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
  • kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
  • kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
  • kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
  • kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
  • kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
  • kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
  • kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)
  • kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
  • kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
  • kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
  • kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
  • kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
  • kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
  • kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
  • kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
  • kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
  • kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
  • kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
  • kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
  • kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
  • kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
  • kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
  • kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)
  • kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
  • kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
  • kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)
  • kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)
  • kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)
  • kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)
  • kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
  • kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (CVE-2023-52594)
  • kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)
Record
ALSA-2024:3618
Updated
2026-11-02
OSVALSA-2024:3627 No score

Moderate: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
  • kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
  • kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
  • kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
  • kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
  • kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)
  • kernel: use after free in i2c (CVE-2019-25162)
  • kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
  • kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
  • kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
  • kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
  • kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
  • kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
  • kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
  • kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
  • kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
  • kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
  • kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
  • kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
  • kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)
  • kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
  • kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
  • kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
  • kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
  • kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
  • kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
  • kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
  • kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
  • kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
  • kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
  • kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
  • kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
  • kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
  • kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
  • kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
  • kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)
  • kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
  • kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
  • kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)

Bug Fix(es):

  • kernel-rt: update RT source tree to the latest AlmaLinux-8.10.z kernel (JIRA:AlmaLinux-34640)
  • kernel-rt: epoll_wait not reporting catching all events to application (JIRA:AlmaLinux-23022)
Record
ALSA-2024:3627
Updated
2026-11-02
OSVCLSA-2024-1720468480 No score

kernel: Fix of 101 CVEs

  • kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513}
  • wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719}
  • mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719}
  • netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016}
  • xprtrdma: fix incorrect header size calculations {CVE-2022-0812}
  • net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171}
  • i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153}
  • pid: take a reference when initializing cad_pid {CVE-2021-47118}
  • Input: appletouch - initialize work before device registration {CVE-2021-46932}
  • HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906}
  • quota: check block number when reading the block in quota file {CVE-2021-45868}
  • mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976}
  • atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975}
  • isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389}
  • usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159}
  • can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693}
  • dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916}
  • KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178}
  • perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971}
  • btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964}
  • ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321}
  • drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292}
  • bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159}
  • btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149}
  • tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679}
  • net: mac802154: Fix general protection fault {CVE-2021-3659}
  • nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178}
  • Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129}
  • drm/nouveau: clean up all clients on device removal {CVE-2020-27820}
  • drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820}
  • drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820}
  • Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555}
  • vsock: Fix memory leak in vsock_connect() {CVE-2022-3629}
  • RDMA/core: Don't infoleak GRH fields {CVE-2021-3923}
  • xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741}
  • net: Rename and export copy_skb_header
  • floppy: use a statically allocated error counter {CVE-2022-1652}
  • fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011}
  • aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898}
  • smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
  • media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
  • media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824}
  • perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931}
  • perf: Fix perf_event_validate_size() {CVE-2023-6931}
  • net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
  • relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}
  • xfs: verify buffer contents when we skip log replay {CVE-2023-2124}
  • Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989}
  • Fix double fget() in vhost_net_set_backend() {CVE-2023-1838}
  • net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829}
  • xen/netfront: fix leaking data in shared pages {CVE-2022-33740}
  • can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390}
  • xen/blkfront: fix leaking data in shared pages {CVE-2022-26365}
  • mISDN: fix use-after-free bugs in l1oip timer…
Record
CLSA-2024-1720468480
Updated
2026-11-02
OSVCLSA-2025-1736470237 No score

Fix of 32 CVEs

Record
CLSA-2025-1736470237
Updated
2026-11-02
OSVCLSA-2025-1736470534 No score

Fix of 32 CVEs

Record
CLSA-2025-1736470534
Updated
2026-11-02
OSVCLSA-2025-1761074747 No score

kernel: Fix of 39 CVEs

  • nfs: fix UAF in direct writes {CVE-2024-26958}
  • NFSD: Fix the behavior of READ near OFFSET_MAX {CVE-2022-48827}
  • thermal: core: prevent potential string overflow {CVE-2023-52868}
  • ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 {CVE-2021-47633}
  • RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests {CVE-2021-47391}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • netfilter: validate user input for expected length {CVE-2024-35896}
  • wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
  • net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
  • bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487}
  • SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885}
  • tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
  • scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
  • jffs2: prevent xattr node from overflowing the eraseblock {CVE-2024-38599}
  • ecryptfs: Fix buffer size for tag 66 packet {CVE-2024-38578}
  • dlm: fix plock invalid read {CVE-2022-49407}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • jfs: fix shift-out-of-bounds in dbSplit {CVE-2024-56597}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • pid: take a reference when initializing cad_pid {CVE-2021-47118}
  • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077}
  • media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824}
  • xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
  • media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
  • media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886}
  • media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
  • media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919}
  • x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265}
  • x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265}
  • x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265}
  • i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153}
Record
CLSA-2025-1761074747
Updated
2026-11-02
OSVCLSA-2025-1761139764 No score

kernel: Fix of 39 CVEs

  • nfs: fix UAF in direct writes {CVE-2024-26958}
  • NFSD: Fix the behavior of READ near OFFSET_MAX {CVE-2022-48827}
  • thermal: core: prevent potential string overflow {CVE-2023-52868}
  • ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 {CVE-2021-47633}
  • RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests {CVE-2021-47391}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • netfilter: validate user input for expected length {CVE-2024-35896}
  • wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
  • net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
  • bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487}
  • SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885}
  • tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
  • scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
  • jffs2: prevent xattr node from overflowing the eraseblock {CVE-2024-38599}
  • ecryptfs: Fix buffer size for tag 66 packet {CVE-2024-38578}
  • dlm: fix plock invalid read {CVE-2022-49407}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • jfs: fix shift-out-of-bounds in dbSplit {CVE-2024-56597}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • pid: take a reference when initializing cad_pid {CVE-2021-47118}
  • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077}
  • media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824}
  • xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
  • media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
  • media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886}
  • media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
  • media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919}
  • x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265}
  • x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265}
  • x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265}
  • i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153}
Record
CLSA-2025-1761139764
Updated
2026-11-02
OSVCLSA-2026-1771077729 No score

kernel: Fix of 108 CVEs

  • net/ieee802154: don't warn zero-sized raw_sendmsg() {CVE-2022-50706}
  • bpf: Don't redirect packets with invalid pkt_len {CVE-2022-49975}
  • media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
  • ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network {CVE-2022-49865}
  • scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}
  • ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}
  • binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497}
  • ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
  • NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349}
  • pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574}
  • lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484}
  • ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
  • fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
  • i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853}
  • fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691}
  • wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue {CVE-2022-50164}
  • mptcp: fix race condition in mptcp_schedule_work() {CVE-2025-40258}
  • fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322}
  • smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
  • wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
  • xfrm: Duplicate SPI Handling {CVE-2025-39797}
  • scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input {CVE-2022-50030}
  • net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent {CVE-2022-48883}
  • net/mlx5e: Move representor neigh cleanup to profile cleanup_tx {CVE-2023-54148}
  • dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085}
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() {CVE-2022-50050}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
  • nfs: fix UAF in direct writes {CVE-2024-26958}
  • iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406}
  • drm/amdkfd: Fix an illegal memory access {CVE-2023-53090}
  • HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
  • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • ALSA: pcm: Fix potential data race at PCM memory allocation helpers {CVE-2023-54072}
  • drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes {CVE-2023-53077}
  • net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
  • i40e: fix idx validation in config queues msg {CVE-2025-39971}
  • loop: Fix use-after-free issues {CVE-2023-53111}
  • fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117}
  • media: rc: fix races with imon_disconnect() {CVE-2025-39993}
  • fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198}
  • vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}
  • Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • pid: take a reference when initializing cad_pid {CVE-2021-47118}
  • net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749}
  • iommu/amd: Fix potential buffer overflow in…
Record
CLSA-2026-1771077729
Updated
2026-11-02
OSVCLSA-2026-1771078945 No score

kernel: Fix of 131 CVEs

  • net/ieee802154: don't warn zero-sized raw_sendmsg() {CVE-2022-50706}
  • scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}
  • ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
  • ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
  • smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
  • wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
  • xfrm: Duplicate SPI Handling {CVE-2025-39797}
  • scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input {CVE-2022-50030}
  • net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent {CVE-2022-48883}
  • net/mlx5e: Move representor neigh cleanup to profile cleanup_tx {CVE-2023-54148}
  • dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085}
  • ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() {CVE-2022-50050}
  • nfs: fix UAF in direct writes {CVE-2024-26958}
  • iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406}
  • drm/amdkfd: Fix an illegal memory access {CVE-2023-53090}
  • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • ALSA: pcm: Fix potential data race at PCM memory allocation helpers {CVE-2023-54072}
  • drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes {CVE-2023-53077}
  • net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
  • loop: Fix use-after-free issues {CVE-2023-53111}
  • media: rc: fix races with imon_disconnect() {CVE-2025-39993}
  • fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198}
  • vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}
  • Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673}
  • ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}
  • libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285}
  • firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432}
  • tracing: Fix wild-memory-access in register_synth_event() {CVE-2022-49799}
  • iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093}
  • drm/shmem-helper: Remove another errant put in error path {CVE-2023-53084}
  • wifi: mac80211: Fix UAF in ieee80211_scan_rx() {CVE-2022-49934}
  • drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() {CVE-2022-50185}
  • ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403}
  • wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279}
  • nbd: fix incomplete validation of ioctl arg {CVE-2023-53513}
  • r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586}
  • sctp: handle the error returned from sctp_auth_asoc_init_active_key {CVE-2022-50243}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-39493}
  • i40e: fix idx validation in config queues msg {CVE-2025-39971}
  • netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
  • netfilter: validate user input for expected length {CVE-2024-35962}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • wifi: iwlwifi: fix a memory corruption {CVE-2024-26610}
  • pid: take a reference when initializing cad_pid {CVE-2021-47118}
  • wifi: cfg80211: check A-MSDU format more carefully…
Record
CLSA-2026-1771078945
Updated
2026-11-02
OSVRLSA-2024:3618 No score

Moderate: kernel update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

  • kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)

  • kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

  • kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)

  • kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)

  • kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)

  • kernel: use after free in i2c (CVE-2019-25162)

  • kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)

  • kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)

  • kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)

  • kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)

  • kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)

  • kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)

  • kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)

  • kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)

  • kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)

  • kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)

  • kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)

  • kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)

  • kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)

  • kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)

  • kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)

  • kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)

  • kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)

  • kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)

  • kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)

  • kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)

  • kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)

  • kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)

  • kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)

  • kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)

  • kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)

  • kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)

  • kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)

  • kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)

  • kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)

  • kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)

  • kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)

  • kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)

  • kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)

  • kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)

  • kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)

  • kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)

  • kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (CVE-2023-52594)

  • kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)

Record
RLSA-2024:3618
Updated
2026-11-02
OSVRLSA-2024:3627 No score

Moderate: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)

  • kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)

  • kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)

  • kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)

  • kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)

  • kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)

  • kernel: use after free in i2c (CVE-2019-25162)

  • kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)

  • kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)

  • kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)

  • kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)

  • kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)

  • kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)

  • kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)

  • kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)

  • kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)

  • kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)

  • kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)

  • kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)

  • kernel: pid: take a reference when initializing cad_pid (CVE-2021-47118)

  • kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)

  • kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)

  • kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)

  • kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)

  • kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)

  • kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)

  • kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)

  • kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)

  • kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)

  • kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)

  • kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)

  • kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)

  • kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)

  • kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)

  • kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)

  • kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)

  • kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)

  • kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)

  • kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)

Bug Fix(es):

  • kernel-rt: update RT source tree to the latest Rocky Linux-8.10.z kernel (JIRA:Rocky Linux-34640)

  • kernel-rt: epoll_wait not reporting catching all events to application (JIRA:Rocky Linux-23022)

Record
RLSA-2024:3627
Updated
2026-11-02
OSVSUSE-SU-2024:1454-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556).
  • CVE-2020-36782: Fixed a reference leak when pm_runtime_get_sync fails in i2c imx-lpi2c (bsc#1220560).
  • CVE-2020-36783: Fixed a reference leak when pm_runtime_get_sync fails in i2c img-scb (bsc#1220561).
  • CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
  • CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
  • CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
  • CVE-2021-46930: Fixed a list_head check warning caused by uninitialization of list_head in usb mtu3 (bsc#1220484).
  • CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
  • CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
  • CVE-2021-46943: Fixed an oops in set_fmt error handling in media: staging/intel-ipu3 (bsc#1220583).
  • CVE-2021-46944: Fixed a memory leak in imu_fmt in media staging/intel-ipu3 (bsc#1220566).
  • CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
  • CVE-2021-46951: Fixed an integer underflow of efi_tpm_final_log_size in tpm_read_log_efi in tpm efi (bsc#1220615).
  • CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
  • CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
  • CVE-2021-46961: Fixed an error on not enabling irqs when handling spurious interrups in irqchip/gic-v3 (bsc#1220529).
  • CVE-2021-46962: Fixed a resource leak in the remove function in mmc uniphier-sd (bsc#1220532).
  • CVE-2021-46963: Fixed a denial of service in qla2xxx_mqueuecommand() in scsi qla2xxx (bsc#1220536)
  • CVE-2021-46971: Fixed unconditional security_locked_down() call in perf/core (bsc#1220697).
  • CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
  • CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
  • CVE-2021-46988: Fixed release page in error path to avoid BUG_ON in userfaultfd (bsc#1220706).
  • CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
  • CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
  • CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
  • CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
  • CVE-2021-47000: Fixed an inode leak on getattr error in __fh_to_dentry in ceph (bsc#1220669).
  • CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
  • CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
  • CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
  • CVE-2021-47020: Fixed a memory leak in stream config error path in soundwire stream (bsc#1220785).
  • CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
  • CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
  • CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
  • CVE-2021-47051: Fixed a PM reference leak in lpspi_prepare_xfer_hardware() in spi fsl-lpspi (bsc#1220764).
  • CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
  • CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
  • CVE-2021-47058: Fixed a possible user-after-free in set debugfs_name in regmap (bsc#1220779).
  • CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
  • CVE-2021-47063: Fixed a potential…
Record
SUSE-SU-2024:1454-1
Updated
2026-11-02
OSVSUSE-SU-2024:1465-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556).
  • CVE-2020-36781: Fixed reference leak when pm_runtime_get_sync fails in i2c/imx (bsc#1220557).
  • CVE-2020-36782: Fixed a reference leak when pm_runtime_get_sync fails in i2c imx-lpi2c (bsc#1220560).
  • CVE-2020-36783: Fixed a reference leak when pm_runtime_get_sync fails in i2c img-scb (bsc#1220561).
  • CVE-2021-46908: Fixed incorrect permission flag for mixed signed bounds arithmetic in bpf (bsc#1220425).
  • CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
  • CVE-2021-46911: Fixed kernel panic (bsc#1220400).
  • CVE-2021-46914: Fixed unbalanced device enable/disable in suspend/resume in pci_disable_device() (bsc#1220465).
  • CVE-2021-46917: Fixed wq cleanup of WQCFG registers in idxd (bsc#1220432).
  • CVE-2021-46918: Fixed not clearing MSIX permission entry on shutdown in idxd (bsc#1220429).
  • CVE-2021-46919: Fixed wq size store permission state in idxd (bsc#1220414).
  • CVE-2021-46920: Fixed clobbering of SWERR overflow bit on writeback (bsc#1220426).
  • CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
  • CVE-2021-46922: Fixed TPM reservation for seal/unseal (bsc#1220475).
  • CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
  • CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
  • CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
  • CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
  • CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
  • CVE-2021-46943: Fixed an oops in set_fmt error handling in media: staging/intel-ipu3 (bsc#1220583).
  • CVE-2021-46944: Fixed a memory leak in imu_fmt in media staging/intel-ipu3 (bsc#1220566).
  • CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
  • CVE-2021-46951: Fixed an integer underflow of efi_tpm_final_log_size in tpm_read_log_efi in tpm efi (bsc#1220615).
  • CVE-2021-46956: Fixed memory leak in virtio_fs_probe() (bsc#1220516).
  • CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
  • CVE-2021-46959: Fixed use-after-free with devm_spi_alloc_* (bsc#1220734).
  • CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
  • CVE-2021-46961: Fixed spurious interrup handling (bsc#1220529).
  • CVE-2021-46962: Fixed a resource leak in the remove function in mmc uniphier-sd (bsc#1220532).
  • CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
  • CVE-2021-46971: Fixed unconditional security_locked_down() call (bsc#1220697).
  • CVE-2021-46976: Fixed crash in auto_retire in drm/i915 (bsc#1220621).
  • CVE-2021-46980: Fixed not retrieving all the PDOs instead of just the first 4 in usb/typec/ucsi (bsc#1220663).
  • CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
  • CVE-2021-46983: Fixed NULL pointer dereference when SEND is completed with error (bsc#1220639).
  • CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
  • CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
  • CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
  • CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
  • CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
  • CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
  • CVE-2021-47000: Fixed an inode leak on getattr error in __fh_to_dentry in ceph (bsc#1220669).
  • CVE-2021-47001: Fixed cwnd update ordering in xprtrdma (bsc#1220670).
  • CVE-2021-47003: Fixed…
Record
SUSE-SU-2024:1465-1
Updated
2026-11-02
OSVSUSE-SU-2024:1489-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2020-36781: Fixed reference leak when pm_runtime_get_sync fails in i2c/imx (bsc#1220557).
  • CVE-2021-46911: Fixed kernel panic (bsc#1220400).
  • CVE-2021-46914: Fixed unbalanced device enable/disable in suspend/resume in pci_disable_device() (bsc#1220465).
  • CVE-2021-46917: Fixed wq cleanup of WQCFG registers in idxd (bsc#1220432).
  • CVE-2021-46918: Fixed not clearing MSIX permission entry on shutdown in idxd (bsc#1220429).
  • CVE-2021-46919: Fixed wq size store permission state in idxd (bsc#1220414).
  • CVE-2021-46920: Fixed clobbering of SWERR overflow bit on writeback (bsc#1220426).
  • CVE-2021-46922: Fixed TPM reservation for seal/unseal (bsc#1220475).
  • CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
  • CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
  • CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
  • CVE-2021-46956: Fixed memory leak in virtio_fs_probe() (bsc#1220516).
  • CVE-2021-46959: Fixed use-after-free with devm_spi_alloc_* (bsc#1220734).
  • CVE-2021-46961: Fixed spurious interrup handling (bsc#1220529).
  • CVE-2021-46971: Fixed unconditional security_locked_down() call (bsc#1220697).
  • CVE-2021-46976: Fixed crash in auto_retire in drm/i915 (bsc#1220621).
  • CVE-2021-46980: Fixed not retrieving all the PDOs instead of just the first 4 in usb/typec/ucsi (bsc#1220663).
  • CVE-2021-46983: Fixed NULL pointer dereference when SEND is completed with error (bsc#1220639).
  • CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
  • CVE-2021-47001: Fixed cwnd update ordering in xprtrdma (bsc#1220670).
  • CVE-2021-47003: Fixed potential null dereference on pointer status in idxd_cmd_exec (bsc#1220677).
  • CVE-2021-47009: Fixed memory leak on object td (bsc#1220733).
  • CVE-2021-47014: Fixed wild memory access when clearing fragments in net/sched/act_ct (bsc#1220630).
  • CVE-2021-47017: Fixed use after free in ath10k_htc_send_bundle (bsc#1220678).
  • CVE-2021-47026: Fixed not destroying sysfs after removing session from active list (bsc#1220685).
  • CVE-2021-47035: Fixed wrong WO permissions on second-level paging entries in iommu/vt-d (bsc#1220688).
  • CVE-2021-47038: Fixed deadlock between hci_dev->lock and socket lock in bluetooth (bsc#1220753).
  • CVE-2021-47044: Fixed shift-out-of-bounds in load_balance() in sched/fair (bsc#1220759).
  • CVE-2021-47046: Fixed off by one in hdmi_14_process_transaction() (bsc#1220758).
  • CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
  • CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
  • CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
  • CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
  • CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
  • CVE-2021-47109: Fixed NUD_NOARP entries to be forced GCed (bsc#1221534).
  • CVE-2021-47130: Fixed freeing unallocated p2pmem in nvmet (bsc#1221552).
  • CVE-2021-47137: Fixed memory corruption in RX ring in net/lantiq (bsc#1221932).
  • CVE-2021-47150: Fixed the potential memory leak in fec_enet_init() (bsc#1221973).
  • CVE-2021-47160: Fixed VLAN traffic leaks in dsa: mt7530 (bsc#1221974).
  • CVE-2021-47164: Fixed null pointer dereference accessing lag dev in net/mlx5e (bsc#1221978).
  • CVE-2021-47174: Fixed missing check in irq_fpu_usable() (bsc#1221990).
  • CVE-2021-47175: Fixed OOB access in net/sched/fq_pie (bsc#1222003).
  • CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660).
  • CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
  • CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
  • CVE-2021-47189: Fixed denial of service due to memory…
Record
SUSE-SU-2024:1489-1
Updated
2026-11-02
OSVSUSE-SU-2024:1643-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
  • CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509).
  • CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
  • CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
  • CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
  • CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
  • CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
  • CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
  • CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
  • CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
  • CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
  • CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
  • CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
  • CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
  • CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
  • CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
  • CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
  • CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
  • CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
  • CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
  • CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
  • CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
  • CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
  • CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
  • CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
  • CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
  • CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
  • CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
  • CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
  • CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
  • CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777).
  • CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
  • CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
  • CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846).
  • CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
  • CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
  • CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
  • CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
  • CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
  • CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
  • CVE-2021-47113: Abort…
Record
SUSE-SU-2024:1643-1
Updated
2026-11-02
OSVSUSE-SU-2024:1646-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
  • CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
  • CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
  • CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
  • CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
  • CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
  • CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
  • CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
  • CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
  • CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
  • CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
  • CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
  • CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
  • CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
  • CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
  • CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
  • CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
  • CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
  • CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
  • CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
  • CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
  • CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
  • CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
  • CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
  • CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
  • CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
  • CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
  • CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777).
  • CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
  • CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
  • CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846).
  • CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
  • CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
  • CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
  • CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
  • CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
  • CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
  • CVE-2021-47114: Fixed a data corruption by fallocate in ocfs2 (bsc#1221548).
  • CVE-2021-47117: Fixed a crash in ext4_es_cache_extent as ext4_split_extent_at failed in ext4 (bsc#1221575).
  • CVE-2021-47118: Fixed an use-after-free in init task's struct pid in pid (bsc#1221605).
  • CVE-2021-47119: Fixed a memory leak in ext4_fill_super in ext4 (bsc#1221608). -…
Record
SUSE-SU-2024:1646-1
Updated
2026-11-02
OSVSUSE-SU-2024:1870-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
  • CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509).
  • CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
  • CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
  • CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
  • CVE-2021-46909: Fixed PCI interrupt mapping in ARM footbridge (bsc#1220442).
  • CVE-2021-46938: Fixed double free of blk_mq_tag_set in dev remove after table load fails (bsc#1220554).
  • CVE-2021-46939: Fixed possible hung in trace_clock_global() (bsc#1220580).
  • CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
  • CVE-2021-46950: Fixed possible data corruption in md/raid1 when ending a failed write request (bsc#1220662).
  • CVE-2021-46958: Fixed race between transaction aborts and fsyncs that could lead to use-after-free in btrfs (bsc#1220521).
  • CVE-2021-46960: Fixed wrong error code from smb2_get_enc_key() (bsc#1220528).
  • CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
  • CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
  • CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
  • CVE-2021-46981: Fixed NULL pointer in flush_workqueue (bsc#1220611).
  • CVE-2021-46988: Fixed possible crash in userfaultfd due to unreleased page (bsc#1220706).
  • CVE-2021-46990: Fixed crashes when toggling entry flush barrier in powerpc/64s (bsc#1220743).
  • CVE-2021-46998: Fixed a use after free bug in enic_hard_start_xmit() (bsc#1220625).
  • CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
  • CVE-2021-47015: Fixed RX consumer index logic in the error path in bnxt_en (bsc#1220794).
  • CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
  • CVE-2021-47034: Fixed resolved pte update for kernel memory on radix in powerpc/64s (bsc#1220687).
  • CVE-2021-47045: Fixed null pointer dereference in lpfc_prep_els_iocb() (bsc#1220640).
  • CVE-2021-47049: Fixed Use after free in __vmbus_open() (bsc#1220692).
  • CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
  • CVE-2021-47056: Fixed uninitialized lock in adf_vf2pf_shutdown() (bsc#1220769).
  • CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
  • CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
  • CVE-2021-47063: Fixed possible use-after-free in panel_bridge_detach() (bsc#1220777).
  • CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
  • CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
  • CVE-2021-47071: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220846).
  • CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
  • CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
  • CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
  • CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
  • CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
  • CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
  • CVE-2021-47114: Fixed data corruption by fallocate in ocfs2 (bsc#1221548).
  • CVE-2021-47117: Fixed bug on in ext4_es_cache_extent() as ext4_split_extent_at() failed (bsc#1221575).
  • CVE-2021-47118: Fixed possible use-after-free when initializing cad_pid (bsc#1221605). -…
Record
SUSE-SU-2024:1870-1
Updated
2026-11-02
OSVUSN-7183-1 No score

linux, linux-lts-xenial vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-12351)

Andy Nguyen discovered that the Bluetooth A2MP implementation in the Linux kernel did not properly initialize memory in some situations. A physically proximate remote attacker could use this to expose sensitive information (kernel memory). (CVE-2020-12352)

Andy Nguyen discovered that the Bluetooth HCI event packet parser in the Linux kernel did not properly handle event advertisements of certain sizes, leading to a heap-based buffer overflow. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-24490)

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)

Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in the Linux kernel during device removal. A privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-35827)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • GPU drivers;
  • I2C subsystem;
  • Network drivers;
  • Pin controllers subsystem;
  • TTY drivers;
  • USB Mass Storage drivers;
  • Framebuffer layer;
  • Ext4 file system;
  • File systems infrastructure;
  • Bluetooth subsystem;
  • Kernel init infrastructure;
  • DMA mapping infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • MAC80211 subsystem;
  • Netfilter;
  • NFC subsystem;
  • Phonet protocol;
  • Network traffic control;
  • Wireless networking; (CVE-2024-44947, CVE-2023-52594, CVE-2024-35886, CVE-2024-38633, CVE-2023-52509, CVE-2024-26625, CVE-2024-36946, CVE-2024-45021, CVE-2024-36270, CVE-2021-47118, CVE-2024-43884, CVE-2024-36941, CVE-2024-38619, CVE-2021-47501, CVE-2024-49967, CVE-2024-42090, CVE-2024-40912, CVE-2024-36968, CVE-2024-53057, CVE-2023-52507, CVE-2024-42101, CVE-2021-47086, CVE-2024-42153, CVE-2024-40959, CVE-2024-26777, CVE-2024-44944, CVE-2024-43856, CVE-2024-39301)
Record
USN-7183-1
Updated
2026-11-02
OSVUSN-7184-1 No score

linux-aws, linux-kvm vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)

Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in the Linux kernel during device removal. A privileged attacker could use this to cause a denial of service (system crash). (CVE-2023-35827)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • GPU drivers;
  • I2C subsystem;
  • Network drivers;
  • Pin controllers subsystem;
  • TTY drivers;
  • USB Mass Storage drivers;
  • Framebuffer layer;
  • Ext4 file system;
  • File systems infrastructure;
  • Bluetooth subsystem;
  • Kernel init infrastructure;
  • DMA mapping infrastructure;
  • Memory management;
  • 9P file system network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • MAC80211 subsystem;
  • Netfilter;
  • NFC subsystem;
  • Phonet protocol;
  • Network traffic control;
  • Wireless networking; (CVE-2024-44944, CVE-2023-52507, CVE-2024-42101, CVE-2021-47118, CVE-2024-36941, CVE-2024-38633, CVE-2021-47086, CVE-2024-26625, CVE-2024-39301, CVE-2024-42090, CVE-2024-53057, CVE-2024-26777, CVE-2024-36946, CVE-2024-42153, CVE-2024-40912, CVE-2024-36968, CVE-2024-43856, CVE-2024-49967, CVE-2024-43884, CVE-2023-52509, CVE-2023-52594, CVE-2024-36270, CVE-2024-44947, CVE-2024-45021, CVE-2024-35886, CVE-2024-40959, CVE-2021-47501, CVE-2024-38619)
Record
USN-7184-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
perf
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 59 CVEs
 before 4.18.0-553.5.1.el8_10
4.18.0-553.5.1.el8_10
kernel-rt
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-kvm
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-kvm
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 53 CVEs
 before 4.18.0-553.5.1.rt7.346.el8_10
4.18.0-553.5.1.rt7.346.el8_10
bpftool
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-debug
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-debug-devel
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-devel
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-headers
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-tools
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-tools-libs
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-tools-libs-devel
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
perf
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
python-perf
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
linux-buildinfo-4.4.0-269-tuxcare.els40-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-buildinfo-4.4.0-269-tuxcare.els40-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-cloud-tools-4.4.0-269-tuxcare.els40
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-cloud-tools-4.4.0-269-tuxcare.els40-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-cloud-tools-4.4.0-269-tuxcare.els40-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-cloud-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-cloud-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-crashdump
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-doc
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-headers-4.4.0-269-tuxcare.els40
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-headers-4.4.0-269-tuxcare.els40-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-headers-4.4.0-269-tuxcare.els40-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-headers-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-headers-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-image-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-image-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-image-unsigned-4.4.0-269-tuxcare.els40-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-image-unsigned-4.4.0-269-tuxcare.els40-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-libc-dev
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-modules-4.4.0-269-tuxcare.els40-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-modules-4.4.0-269-tuxcare.els40-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-modules-extra-4.4.0-269-tuxcare.els40-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-source
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-source-4.4.0
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-tools-4.4.0-269-tuxcare.els40
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-tools-4.4.0-269-tuxcare.els40-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-tools-4.4.0-269-tuxcare.els40-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-tools-host
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
kernel
TuxCare:OracleLinux:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-abi-whitelists
TuxCare:OracleLinux:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-debug
TuxCare:OracleLinux:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-debug-devel
TuxCare:OracleLinux:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-devel
TuxCare:OracleLinux:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-doc
TuxCare:OracleLinux:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-firmware
TuxCare:OracleLinux:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-headers
TuxCare:OracleLinux:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
perf
TuxCare:OracleLinux:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
python-perf
TuxCare:OracleLinux:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel
TuxCare:CentOS:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-abi-whitelists
TuxCare:CentOS:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-debug
TuxCare:CentOS:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-debug-devel
TuxCare:CentOS:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-devel
TuxCare:CentOS:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-doc
TuxCare:CentOS:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-firmware
TuxCare:CentOS:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
kernel-headers
TuxCare:CentOS:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
perf
TuxCare:CentOS:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
python-perf
TuxCare:CentOS:6
From an advisory covering 39 CVEs
 before 2.6.32-754.35.8.el6.tuxcare.els26
2.6.32-754.35.8.el6.tuxcare.els26
linux
Debian:12
 before 5.10.46-1
5.10.46-1
linux
Debian:13
 before 5.10.46-1
5.10.46-1
linux
Debian:14
 before 5.10.46-1
5.10.46-1
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 59 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel
Rocky Linux:8
From an advisory covering 57 CVEs
 before 0:4.18.0-553.5.1.el8_10
0:4.18.0-553.5.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 53 CVEs
 before 0:4.18.0-553.5.1.rt7.346.el8_10
0:4.18.0-553.5.1.rt7.346.el8_10
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-livepatch-SLE15-SP2_Update_47
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 114 CVEs
 before 1-150200.5.3.3
1-150200.5.3.3
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP2
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1.150200.9.95.3
5.3.18-150200.24.188.1.150200.9.95.3
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1.150200.9.95.3
5.3.18-150200.24.188.1.150200.9.95.3
kernel-docs
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-preempt
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-source
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1.150200.9.95.3
5.3.18-150200.24.188.1.150200.9.95.3
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 114 CVEs
 before 5.3.18-150200.24.188.1
5.3.18-150200.24.188.1
kernel-rt
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 145 CVEs
 before 5.3.18-150300.166.1
5.3.18-150300.166.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 145 CVEs
 before 5.3.18-150300.166.1
5.3.18-150300.166.1
kernel-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 145 CVEs
 before 5.3.18-150300.166.1
5.3.18-150300.166.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 145 CVEs
 before 5.3.18-150300.166.1
5.3.18-150300.166.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-livepatch-SLE15-SP3_Update_43
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 157 CVEs
 before 1-150300.7.3.5
1-150300.7.3.5
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1.150300.18.92.5
5.3.18-150300.59.158.1.150300.18.92.5
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1.150300.18.92.5
5.3.18-150300.59.158.1.150300.18.92.5
kernel-docs
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-preempt
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-source
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1.150300.18.92.5
5.3.18-150300.59.158.1.150300.18.92.5
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1.150300.18.92.5
5.3.18-150300.59.158.1.150300.18.92.5
kernel-default
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1.150300.18.92.5
5.3.18-150300.59.158.1.150300.18.92.5
kernel-64kb
SUSE:Enterprise Storage 7.1
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default
SUSE:Enterprise Storage 7.1
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-default-base
SUSE:Enterprise Storage 7.1
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1.150300.18.92.5
5.3.18-150300.59.158.1.150300.18.92.5
kernel-docs
SUSE:Enterprise Storage 7.1
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
kernel-obs-build
SUSE:Enterprise Storage 7.1
From an advisory covering 157 CVEs
 before 5.3.18-150300.59.158.1
5.3.18-150300.59.158.1
linux-azure
Ubuntu:Pro:14.04:LTS
 before 4.15.0-1122.135~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
4.15.0-1122.135~14.04.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux-aws
Ubuntu:Pro:14.04:LTS
 before 4.4.0-1139.145, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
4.4.0-1139.145
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 before 4.4.0-262.296~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
4.4.0-262.296~14.04.1
linux
Ubuntu:Pro:16.04:LTS
 before 4.4.0-262.296, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-262.296
linux-aws
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1177.192, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1177.192
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1110.117~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 42 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.1
4.15.0-1110.117~16.04.1
linux-azure
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1122.135~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1122.135~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1107.121~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1107.121~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-154.161~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-154.161~16.04.1
linux-kvm
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1140.151, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
4.4.0-1140.151
linux-oracle
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1079.87~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 41 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.1
4.15.0-1079.87~16.04.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 before 4.4.0-1108.115, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
4.4.0-1108.115
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:18.04:LTS
 before 4.15.0-154.161, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-154.161
linux-aws
Ubuntu:18.04:LTS
 before 4.15.0-1110.117, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1110.117
linux-aws-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1055.58~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 17 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.1
5.4.0-1055.58~18.04.1
linux-azure-4.15
Ubuntu:18.04:LTS
 before 4.15.0-1122.135, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 19 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.134
4.15.0-1122.135
linux-azure-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1056.58~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 16 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.1
5.4.0-1056.58~18.04.1
linux-gcp-4.15
Ubuntu:18.04:LTS
 before 4.15.0-1107.121, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 18 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.120
4.15.0-1107.121
linux-gcp-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1051.55~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 16 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.1
5.4.0-1051.55~18.04.1
linux-hwe-5.4
Ubuntu:18.04:LTS
 before 5.4.0-81.91~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 22 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.1
5.4.0-81.91~18.04.1
linux-kvm
Ubuntu:18.04:LTS
 before 4.15.0-1098.100, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
4.15.0-1098.100
linux-oracle
Ubuntu:18.04:LTS
 before 4.15.0-1079.87, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 43 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.86
4.15.0-1079.87
linux-oracle-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1053.57~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 17 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.1
5.4.0-1053.57~18.04.1
linux-raspi-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1042.46~18.04.3, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 15 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.1
5.4.0-1042.46~18.04.3
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2052.54, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 19 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.53
4.15.0-2052.54
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2034.38, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 16 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.37
4.15.0-2034.38
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-1068.77, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 23 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.76
4.15.0-1068.77
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2017.19, plus listed versions
4.15.0-2013.144.15.0-2016.18
4.15.0-2017.19
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:20.04:LTS
 before 5.4.0-81.91, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 34 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.90
5.4.0-81.91
linux-aws
Ubuntu:20.04:LTS
 before 5.4.0-1055.58, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 29 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.57
5.4.0-1055.58
linux-azure
Ubuntu:20.04:LTS
 before 5.4.0-1056.58, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 26 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.57
5.4.0-1056.58
linux-bluefield
Ubuntu:20.04:LTS
 before 5.4.0-1019.22, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
5.4.0-1019.22
linux-gcp
Ubuntu:20.04:LTS
 before 5.4.0-1051.55, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 26 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.53
5.4.0-1051.55
linux-gkeop
Ubuntu:20.04:LTS
 before 5.4.0-1022.23, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 6 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.22
5.4.0-1022.23
linux-kvm
Ubuntu:20.04:LTS
 before 5.4.0-1045.47, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6
Show 24 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.46
5.4.0-1045.47
linux-oracle
Ubuntu:20.04:LTS
 before 5.4.0-1053.57, plus listed versions
5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7
Show 27 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.56
5.4.0-1053.57
linux-raspi
Ubuntu:20.04:LTS
 before 5.4.0-1042.46, plus listed versions
5.4.0-1007.75.4.0-1008.85.4.0-1011.115.4.0-1012.125.4.0-1013.13
Show 19 moreShow less
5.4.0-1015.155.4.0-1016.175.4.0-1018.205.4.0-1019.215.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1029.325.4.0-1030.335.4.0-1032.355.4.0-1033.365.4.0-1034.375.4.0-1035.385.4.0-1036.395.4.0-1038.415.4.0-1041.45
5.4.0-1042.46
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known

History

History
RecordedChangedSources
affectedOSV
affected
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-47118 is a high vulnerability (CVSS 7.8) in Linux, published March 15, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 15th percentile. Fixed in linux 5.10.46-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 134 package rows, 725 versions, 1,034 references and the rest of 11 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open