Every CVE Search/ Get API key

CVE-2022-48760

USB: core: Fix hang in usb_kill_urb by adding memory barriers

7.1 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

USB: core: Fix hang in usb_kill_urb by adding memory barriers

The syzbot fuzzer has identified a bug in which processes hang waiting for usb_kill_urb() to return. It turns out the issue is not unlinking the URB; that works just fine. Rather, the problem arises when the wakeup notification that the URB has completed is not received.

The reason is memory-access ordering on SMP systems. In outline form, usb_kill_urb() and __usb_hcd_giveback_urb() operating concurrently on different CPUs perform the following actions:

CPU 0 CPU 1

usb_kill_urb(): __usb_hcd_giveback_urb(): ... ... atomic_inc(&urb->reject); atomic_dec(&urb->use_count); ... ... wait_event(usb_kill_urb_queue, atomic_read(&urb->use_count) == 0); if (atomic_read(&urb->reject)) wake_up(&usb_kill_urb_queue);

Confining your attention to urb->reject and urb->use_count, you can see that the overall pattern of accesses on CPU 0 is:

write urb->reject, then read urb->use_count;

whereas the overall pattern of accesses on CPU 1 is:

write urb->use_count, then read urb->reject.

This pattern is referred to in memory-model circles as SB (for "Store Buffering"), and it is well known that without suitable enforcement of the desired order of accesses -- in the form of memory barriers -- it is entirely possible for one or both CPUs to execute their reads ahead of their writes. The end result will be that sometimes CPU 0 sees the old un-decremented value of urb->use_count while CPU 1 sees the old un-incremented value of urb->reject. Consequently CPU 0 ends up on the wait queue and never gets woken up, leading to the observed hang in usb_kill_urb().

The same pattern of accesses occurs in usb_poison_urb() and the failure pathway of usb_hcd_submit_urb().

The problem is fixed by adding suitable memory barriers. To provide proper memory-access ordering in the SB pattern, a full barrier is required on both CPUs. The atomic_inc() and atomic_dec() accesses themselves don't provide any memory ordering, but since they are present, we can use the optimized smp_mb__after_atomic() memory barrier in the various routines to obtain the desired effect.

This patch adds the necessary memory barriers.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.19%Up 0.1 points since Jun 21, 2024
90%50%10%1%

What each source reports

NVD Score used 7.1

In the Linux kernel, the following vulnerability has been resolved:

USB: core: Fix hang in usb_kill_urb by adding memory barriers

The syzbot fuzzer has identified a bug in which processes hang waiting for usb_kill_urb() to return. It turns out the issue is not unlinking the URB; that works just fine. Rather, the problem arises when the wakeup notification that the URB has completed is not received.

The reason is memory-access ordering on SMP systems. In outline form, usb_kill_urb() and __usb_hcd_giveback_urb() operating concurrently on different CPUs perform the following actions:

CPU 0 CPU 1

usb_kill_urb(): __usb_hcd_giveback_urb(): ... ... atomic_inc(&urb->reject); atomic_dec(&urb->use_count); ... ... wait_event(usb_kill_urb_queue, atomic_read(&urb->use_count) == 0); if (atomic_read(&urb->reject)) wake_up(&usb_kill_urb_queue);

Confining your attention to urb->reject and urb->use_count, you can see that the overall pattern of accesses on CPU 0 is:

write urb->reject, then read urb->use_count;

whereas the overall pattern of accesses on CPU 1 is:

write urb->use_count, then read urb->reject.

This pattern is referred to in memory-model circles as SB (for "Store Buffering"), and it is well known that without suitable enforcement of the desired order of accesses -- in the form of memory barriers -- it is entirely possible for one or both CPUs to execute their reads ahead of their writes. The end result will be that sometimes CPU 0 sees the old un-decremented value of urb->use_count while CPU 1 sees the old un-incremented value of urb->reject. Consequently CPU 0 ends up on the wait queue and never gets woken up, leading to the observed hang in usb_kill_urb().

The same pattern of accesses occurs in usb_poison_urb() and the failure pathway of usb_hcd_submit_urb().

The problem is fixed by adding suitable memory barriers. To provide proper memory-access ordering in the SB pattern, a full barrier is required on both CPUs. The atomic_inc() and atomic_dec() accesses themselves don't provide any memory ordering, but since they are present, we can use the optimized smp_mb__after_atomic() memory barrier in the various routines to obtain the desired effect.

This patch adds the necessary memory barriers.

Record
CVE-2022-48760
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-667
Updated
2026-11-02
CVE List No score

USB: core: Fix hang in usb_kill_urb by adding memory barriers

In the Linux kernel, the following vulnerability has been resolved:

USB: core: Fix hang in usb_kill_urb by adding memory barriers

The syzbot fuzzer has identified a bug in which processes hang waiting for usb_kill_urb() to return. It turns out the issue is not unlinking the URB; that works just fine. Rather, the problem arises when the wakeup notification that the URB has completed is not received.

The reason is memory-access ordering on SMP systems. In outline form, usb_kill_urb() and __usb_hcd_giveback_urb() operating concurrently on different CPUs perform the following actions:

CPU 0 CPU 1

usb_kill_urb(): __usb_hcd_giveback_urb(): ... ... atomic_inc(&urb->reject); atomic_dec(&urb->use_count); ... ... wait_event(usb_kill_urb_queue, atomic_read(&urb->use_count) == 0); if (atomic_read(&urb->reject)) wake_up(&usb_kill_urb_queue);

Confining your attention to urb->reject and urb->use_count, you can see that the overall pattern of accesses on CPU 0 is:

write urb->reject, then read urb->use_count;

whereas the overall pattern of accesses on CPU 1 is:

write urb->use_count, then read urb->reject.

This pattern is referred to in memory-model circles as SB (for "Store Buffering"), and it is well known that without suitable enforcement of the desired order of accesses -- in the form of memory barriers -- it is entirely possible for one or both CPUs to execute their reads ahead of their writes. The end result will be that sometimes CPU 0 sees the old un-decremented value of urb->use_count while CPU 1 sees the old un-incremented value of urb->reject. Consequently CPU 0 ends up on the wait queue and never gets woken up, leading to the observed hang in usb_kill_urb().

The same pattern of accesses occurs in usb_poison_urb() and the failure pathway of usb_hcd_submit_urb().

The problem is fixed by adding suitable memory barriers. To provide proper memory-access ordering in the SB pattern, a full barrier is required on both CPUs. The atomic_inc() and atomic_dec() accesses themselves don't provide any memory ordering, but since they are present, we can use the optimized smp_mb__after_atomic() memory barrier in the various routines to obtain the desired effect.

This patch adds the necessary memory barriers.

Record
CVE-2022-48760
Updated
2026-11-02
EUVDEUVD-2022-53639 No score

In the Linux kernel, the following vulnerability has been resolved:

USB: core: Fix hang in usb_kill_urb by adding memory barriers

The syzbot fuzzer has identified a bug in which processes hang waiting for usb_kill_urb() to return. It turns out the issue is not unlinking the URB; that works just fine. Rather, the problem arises when the wakeup notification that the URB has completed is not received.

The reason is memory-access ordering on SMP systems. In outline form, usb_kill_urb() and __usb_hcd_giveback_urb() operating concurrently on different CPUs perform the following actions:

CPU 0 CPU 1

usb_kill_urb(): __usb_hcd_giveback_urb(): ... ... atomic_inc(&urb->reject); atomic_dec(&urb->use_count); ... ... wait_event(usb_kill_urb_queue, atomic_read(&urb->use_count) == 0); if (atomic_read(&urb->reject)) wake_up(&usb_kill_urb_queue);

Confining your attention to urb->reject and urb->use_count, you can see that the overall pattern of accesses on CPU 0 is:

write urb->reject, then read urb->use_count;

whereas the overall pattern of accesses on CPU 1 is:

write urb->use_count, then read urb->reject.

This pattern is referred to in memory-model circles as SB (for "Store Buffering"), and it is well known that without suitable enforcement of the desired order of accesses -- in the form of memory barriers -- it is entirely possible for one or both CPUs to execute their reads ahead of their writes. The end result will be that sometimes CPU 0 sees the old un-decremented value of urb->use_count while CPU 1 sees the old un-incremented value of urb->reject. Consequently CPU 0 ends up on the wait queue and never gets woken up, leading to the observed hang in usb_kill_urb().

The same pattern of accesses occurs in usb_poison_urb() and the failure pathway of usb_hcd_submit_urb().

The problem is fixed by adding suitable memory barriers. To provide proper memory-access ordering in the SB pattern, a full barrier is required on both CPUs. The atomic_inc() and atomic_dec() accesses themselves don't provide any memory ordering, but since they are present, we can use the optimized smp_mb__after_atomic() memory barrier in the various routines to obtain the desired effect.

This patch adds the necessary memory barriers.

Record
EUVD-2022-53639
Updated
2026-11-02
GitHub AdvisoriesGHSA-3wjp-7h53-cfv8 7.1

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix hang in...

In the Linux kernel, the following vulnerability has been resolved:

USB: core: Fix hang in usb_kill_urb by adding memory barriers

The syzbot fuzzer has identified a bug in which processes hang waiting for usb_kill_urb() to return. It turns out the issue is not unlinking the URB; that works just fine. Rather, the problem arises when the wakeup notification that the URB has completed is not received.

The reason is memory-access ordering on SMP systems. In outline form, usb_kill_urb() and __usb_hcd_giveback_urb() operating concurrently on different CPUs perform the following actions:

CPU 0 CPU 1

usb_kill_urb(): __usb_hcd_giveback_urb(): ... ... atomic_inc(&urb->reject); atomic_dec(&urb->use_count); ... ... wait_event(usb_kill_urb_queue, atomic_read(&urb->use_count) == 0); if (atomic_read(&urb->reject)) wake_up(&usb_kill_urb_queue);

Confining your attention to urb->reject and urb->use_count, you can see that the overall pattern of accesses on CPU 0 is:

write urb->reject, then read urb->use_count;

whereas the overall pattern of accesses on CPU 1 is:

write urb->use_count, then read urb->reject.

This pattern is referred to in memory-model circles as SB (for "Store Buffering"), and it is well known that without suitable enforcement of the desired order of accesses -- in the form of memory barriers -- it is entirely possible for one or both CPUs to execute their reads ahead of their writes. The end result will be that sometimes CPU 0 sees the old un-decremented value of urb->use_count while CPU 1 sees the old un-incremented value of urb->reject. Consequently CPU 0 ends up on the wait queue and never gets woken up, leading to the observed hang in usb_kill_urb().

The same pattern of accesses occurs in usb_poison_urb() and the failure pathway of usb_hcd_submit_urb().

The problem is fixed by adding suitable memory barriers. To provide proper memory-access ordering in the SB pattern, a full barrier is required on both CPUs. The atomic_inc() and atomic_dec() accesses themselves don't provide any memory ordering, but since they are present, we can use the optimized smp_mb__after_atomic() memory barrier in the various routines to obtain the desired effect.

This patch adds the necessary memory barriers.

Record
GHSA-3wjp-7h53-cfv8
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-667
Updated
2026-11-02
OSVDEBIAN-CVE-2022-48760 7.1

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix hang in usb_kill_urb by adding memory barriers The syzbot fuzzer has identified a bug in which processes hang waiting for usb_kill_urb() to return. It turns out the issue is not unlinking the URB; that works just fine. Rather, the problem arises when the wakeup notification that the URB has completed is not received. The reason is memory-access ordering on SMP systems. In outline form, usb_kill_urb() and __usb_hcd_giveback_urb() operating concurrently on different CPUs perform the following actions: CPU 0 CPU 1 ---------------------------- --------------------------------- usb_kill_urb(): __usb_hcd_giveback_urb(): ... ... atomic_inc(&urb->reject); atomic_dec(&urb->use_count); ... ... wait_event(usb_kill_urb_queue, atomic_read(&urb->use_count) == 0); if (atomic_read(&urb->reject)) wake_up(&usb_kill_urb_queue); Confining your attention to urb->reject and urb->use_count, you can see that the overall pattern of accesses on CPU 0 is: write urb->reject, then read urb->use_count; whereas the overall pattern of accesses on CPU 1 is: write urb->use_count, then read urb->reject. This pattern is referred to in memory-model circles as SB (for "Store Buffering"), and it is well known that without suitable enforcement of the desired order of accesses -- in the form of memory barriers -- it is entirely possible for one or both CPUs to execute their reads ahead of their writes. The end result will be that sometimes CPU 0 sees the old un-decremented value of urb->use_count while CPU 1 sees the old un-incremented value of urb->reject. Consequently CPU 0 ends up on the wait queue and never gets woken up, leading to the observed hang in usb_kill_urb(). The same pattern of accesses occurs in usb_poison_urb() and the failure pathway of usb_hcd_submit_urb(). The problem is fixed by adding suitable memory barriers. To provide proper memory-access ordering in the SB pattern, a full barrier is required on both CPUs. The atomic_inc() and atomic_dec() accesses themselves don't provide any memory ordering, but since they are present, we can use the optimized smp_mb__after_atomic() memory barrier in the various routines to obtain the desired effect. This patch adds the necessary memory barriers.

Record
DEBIAN-CVE-2022-48760
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-03
OSVOESA-2024-1862 7.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak

vcpu_put is not called if the user copy fails. This can result in preempt notifier corruption and crashes, among other issues.(CVE-2021-47296)

In the Linux kernel, the following vulnerability has been resolved:

net: qcom/emac: fix UAF in emac_remove

adpt is netdev private data and it cannot be used after free_netdev() call. Using adpt after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.(CVE-2021-47311)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests

The FSM can run in a circle allowing rdma_resolve_ip() to be called twice on the same id_priv. While this cannot happen without going through the work, it violates the invariant that the same address resolution background request cannot be active twice.

   CPU 1                                  CPU 2

rdma_resolve_addr(): RDMA_CM_IDLE -> RDMA_CM_ADDR_QUERY rdma_resolve_ip(addr_handler) #1

		 process_one_req(): for #1
                      addr_handler():
                        RDMA_CM_ADDR_QUERY -> RDMA_CM_ADDR_BOUND
                        mutex_unlock(&id_priv->handler_mutex);
                        [.. handler still running ..]

rdma_resolve_addr(): RDMA_CM_ADDR_BOUND -> RDMA_CM_ADDR_QUERY rdma_resolve_ip(addr_handler) !! two requests are now on the req_list

rdma_destroy_id(): destroy_id_handler_unlock(): _destroy_id(): cma_cancel_operation(): rdma_addr_cancel()

                      // process_one_req() self removes it
	          spin_lock_bh(&lock);
                       cancel_delayed_work(&req->work);
                   if (!list_empty(&req->list)) == true

  ! rdma_addr_cancel() returns after process_on_req #1 is done

kfree(id_priv)

		 process_one_req(): for #2
                      addr_handler():
                    mutex_lock(&id_priv->handler_mutex);
                        !! Use after free on id_priv

rdma_addr_cancel() expects there to be one req on the list and only cancels the first one. The self-removal behavior of the work only happens after the handler has returned. This yields a situations where the req_list can have two reqs for the same "handle" but rdma_addr_cancel() only cancels the first one.

The second req remains active beyond rdma_destroy_id() and will use-after-free id_priv once it inevitably triggers.

Fix this by remembering if the id_priv has called rdma_resolve_ip() and always cancel before calling it again. This ensures the req_list never gets more than one item in it and doesn't cost anything in the normal flow that never uses this strange error path.(CVE-2021-47391)

In the Linux kernel, the following vulnerability has been resolved:

sch_cake: do not call cake_destroy() from cake_init()

qdiscs are not supposed to call their own destroy() method from init(), because core stack already does that.

syzbot was able to trigger use after free:

DEBUG_LOCKS_WARN_ON(lock->magic != lock) WARNING: CPU: 0 PID: 21902 at kernel/locking/mutex.c:586 __mutex_lock_common kernel/locking/mutex.c:586 [inline] WARNING: CPU: 0 PID: 21902 at kernel/locking/mutex.c:586 __mutex_lock+0x9ec/0x12f0 kernel/locking/mutex.c:740 Modules linked in: CPU: 0 PID: 21902 Comm: syz-executor189 Not tainted 5.16.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__mutex_lock_common kernel/locking/mutex.c:586 [inline] RIP: 0010:__mutex_lock+0x9ec/0x12f0 kernel/locking/mutex.c:740 Code: 08 84 d2 0f 85 19 08 00 00 8b 05 97 38 4b 04 85 c0 0f 85 27 f7 ff ff 48 c7 c6 20 00 ac 89 48 c7 c7 a0 fe ab 89 e8…

Record
OESA-2024-1862
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 28 moreShow less
OSVRHSA-2024:7000 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:7000
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:7001 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2024:7001
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2024:7000 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26638 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26846 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52798 CVE-2023-52809 CVE-2023-52817 CVE-2023-52840 CVE-2023-52800 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36922 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36919 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38579 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41023 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41064 CVE-2024-41065 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42094 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42225 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43830 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:7000
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-48760 5.7

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix hang in usb_kill_urb by adding memory barriers The syzbot fuzzer has identified a bug in which processes hang waiting for usb_kill_urb() to return. It turns out the issue is not unlinking the URB; that works just fine. Rather, the problem arises when the wakeup notification that the URB has completed is not received. The reason is memory-access ordering on SMP systems. In outline form, usb_kill_urb() and __usb_hcd_giveback_urb() operating concurrently on different CPUs perform the following actions: CPU 0 CPU 1 ---------------------------- --------------------------------- usb_kill_urb(): __usb_hcd_giveback_urb(): ... ... atomic_inc(&urb->reject); atomic_dec(&urb->use_count); ... ... wait_event(usb_kill_urb_queue, atomic_read(&urb->use_count) == 0); if (atomic_read(&urb->reject)) wake_up(&usb_kill_urb_queue); Confining your attention to urb->reject and urb->use_count, you can see that the overall pattern of accesses on CPU 0 is: write urb->reject, then read urb->use_count; whereas the overall pattern of accesses on CPU 1 is: write urb->use_count, then read urb->reject. This pattern is referred to in memory-model circles as SB (for "Store Buffering"), and it is well known that without suitable enforcement of the desired order of accesses -- in the form of memory barriers -- it is entirely possible for one or both CPUs to execute their reads ahead of their writes. The end result will be that sometimes CPU 0 sees the old un-decremented value of urb->use_count while CPU 1 sees the old un-incremented value of urb->reject. Consequently CPU 0 ends up on the wait queue and never gets woken up, leading to the observed hang in usb_kill_urb(). The same pattern of accesses occurs in usb_poison_urb() and the failure pathway of usb_hcd_submit_urb(). The problem is fixed by adding suitable memory barriers. To provide proper memory-access ordering in the SB pattern, a full barrier is required on both CPUs. The atomic_inc() and atomic_dec() accesses themselves don't provide any memory ordering, but since they are present, we can use the optimized smp_mb__after_atomic() memory barrier in the various routines to obtain the desired effect. This patch adds the necessary memory barriers.

Record
UBUNTU-CVE-2022-48760
CVSS 4.0
5.7 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-06
OSVALSA-2024:7000 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26638 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26846 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52798 CVE-2023-52809 CVE-2023-52817 CVE-2023-52840 CVE-2023-52800 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36922 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36919 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38579 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41023 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41064 CVE-2024-41065 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42094 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42225 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43830 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:7000
Updated
2026-11-02
OSVALSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52817 CVE-2023-52840 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:7001
Updated
2026-11-02
OSVCLSA-2024-1727690025 No score

kernel: Fix of 80 CVEs

  • sch/netem: fix use after free in netem_dequeue {CVE-2024-46800}
  • VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
  • drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725}
  • drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724}
  • drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723}
  • drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}
  • scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673}
  • ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987}
  • exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882}
  • dev/parport: fix the array out-of-bounds risk {CVE-2024-42301}
  • RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285}
  • tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284}
  • mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280}
  • nvme: avoid double free special payload {CVE-2024-41073}
  • wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071}
  • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665}
  • KVM: x86/mmu: make apf token non-zero to fix bug {CVE-2022-48943}
  • cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
  • netfilter: fix use-after-free in __nf_register_net_hook() {CVE-2022-48912}
  • rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() {CVE-2022-48742}
  • selinux: fix double free of cond_list on error paths {CVE-2022-48740}
  • ALSA: hda: Fix UAF of leds class devs at unbinding {CVE-2022-48735}
  • drm/nouveau: fix off by one in BIOS boundary checking {CVE-2022-48732}
  • mm, slub: fix potential memoryleak in kmem_cache_open() {CVE-2021-47466}
  • x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25744}
  • x86: Make IA32_EMULATION boot time configurable {CVE-2024-25744}
  • x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() {CVE-2024-25744}
  • x86/elf: Make loading of 32bit processes depend on ia32_enabled() {CVE-2024-25744}
  • x86/entry: Rename ignore_sysret() {CVE-2024-25744}
  • x86/cpu: Don't write CSTAR MSR on Intel CPUs {CVE-2024-25744}
  • x86: Introduce ia32_enabled() {CVE-2024-25744}
  • scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124}
  • ftruncate: pass a signed offset {CVE-2024-42084}
  • USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035}
  • xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
  • drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
  • ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
  • Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
  • Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
  • wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
  • wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
  • ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683}
  • ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605}
  • HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • phylib: fix potential use-after-free {CVE-2022-48754}
  • serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527}
  • nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
  • mlxsw: thermal: Fix out-of-bounds memory accesses {CVE-2021-47441}
  • hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs {CVE-2021-47393}
  • hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386}
  • hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385}
  • hwmon: (w83793) Fix NULL pointer…
Record
CLSA-2024-1727690025
Updated
2026-11-02
OSVCLSA-2024-1727690947 No score

kernel: Fix of 80 CVEs

  • sch/netem: fix use after free in netem_dequeue {CVE-2024-46800}
  • VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
  • drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725}
  • drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724}
  • drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723}
  • drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}
  • scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673}
  • ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987}
  • exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882}
  • dev/parport: fix the array out-of-bounds risk {CVE-2024-42301}
  • RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285}
  • tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284}
  • mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280}
  • nvme: avoid double free special payload {CVE-2024-41073}
  • wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071}
  • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665}
  • KVM: x86/mmu: make apf token non-zero to fix bug {CVE-2022-48943}
  • cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
  • netfilter: fix use-after-free in __nf_register_net_hook() {CVE-2022-48912}
  • rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() {CVE-2022-48742}
  • selinux: fix double free of cond_list on error paths {CVE-2022-48740}
  • ALSA: hda: Fix UAF of leds class devs at unbinding {CVE-2022-48735}
  • drm/nouveau: fix off by one in BIOS boundary checking {CVE-2022-48732}
  • mm, slub: fix potential memoryleak in kmem_cache_open() {CVE-2021-47466}
  • x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25744}
  • x86: Make IA32_EMULATION boot time configurable {CVE-2024-25744}
  • x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() {CVE-2024-25744}
  • x86/elf: Make loading of 32bit processes depend on ia32_enabled() {CVE-2024-25744}
  • x86/entry: Rename ignore_sysret() {CVE-2024-25744}
  • x86/cpu: Don't write CSTAR MSR on Intel CPUs {CVE-2024-25744}
  • x86: Introduce ia32_enabled() {CVE-2024-25744}
  • x86/asm/64: Change all ENTRY+END to SYM_CODE_* {CVE-2024-25744}
  • x86/head/64: Annotate start_cpu0() as non-callable {CVE-2024-25744}
  • x86/asm: Do not annotate functions with GLOBAL {CVE-2024-25744}
  • kprobes/x86/xen: blacklist non-attachable xen interrupt functions {CVE-2024-25744}
  • x86/asm/64: Add ENDs to some functions and relabel with SYM_CODE_* {CVE-2024-25744}
  • x86/asm: Use SYM_INNER_LABEL instead of GLOBAL {CVE-2024-25744}
  • x86/asm: Annotate aliases {CVE-2024-25744}
  • x86/asm/crypto: Annotate local functions {CVE-2024-25744}
  • scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124}
  • ftruncate: pass a signed offset {CVE-2024-42084}
  • USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035}
  • xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
  • drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
  • ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
  • Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
  • Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
  • wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
  • wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
  • ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683}
  • ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605}
  • HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • phylib: fix potential use-after-free {CVE-2022-48754}
  • serial: core: fix transmit-buffer…
Record
CLSA-2024-1727690947
Updated
2026-11-02
OSVCLSA-2024-1727815919 No score

kernel: Fix of 73 CVEs

  • firmware: cs_dsp: Return error if block header overflows file {CVE-2024-42238}
  • scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124}
  • ftruncate: pass a signed offset {CVE-2024-42084}
  • firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files {CVE-2024-41056}
  • firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
  • USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035}
  • xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
  • netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005}
  • drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
  • ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
  • scsi: mpi3mr: Avoid memcpy field-spanning write WARNING {CVE-2024-36920}
  • dmaengine: idxd: Fix oops during rmmod on single-CPU platforms {CVE-2024-35989}
  • udp: do not accept non-tunnel GSO skbs landing in a tunnel {CVE-2024-35884}
  • nvme-fc: do not wait in vain when unloading module {CVE-2024-26846}
  • drm/amdgpu: Fix the null pointer when load rlc firmware {CVE-2024-26649}
  • Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
  • Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
  • wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
  • wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
  • ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683}
  • ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605}
  • HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • phylib: fix potential use-after-free {CVE-2022-48754}
  • serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527}
  • nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
  • mlxsw: thermal: Fix out-of-bounds memory accesses {CVE-2021-47441}
  • hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs {CVE-2021-47393}
  • hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386}
  • hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385}
  • hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47384}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • fbmem: Do not delete the mode that is still in use {CVE-2021-47338}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • ACPI: fix NULL pointer dereference {CVE-2021-47289}
  • driver core: auxiliary bus: Fix memory leak when driver_register() fail {CVE-2021-47287}
  • Input: elantech - fix stack out of bound access in elantech_change_report_id() {CVE-2021-47097}
  • HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts {CVE-2022-48866}
  • ipv6: prevent possible NULL dereference in rt6_probe() {CVE-2024-40960}
  • xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() {CVE-2024-40959}
  • wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941}
  • wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  • wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912}
  • wifi: cfg80211: Lock wiphy in cfg80211_get_station {CVE-2024-40911}
  • USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages {CVE-2024-40904}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet {CVE-2024-39506}
  • vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
  • crypto: bcm - Fix pointer arithmetic {CVE-2024-38579}
  • scsi: qedf: Ensure the copied buf is NUL terminated {CVE-2024-38559}
  • net: openvswitch: fix overwriting ct original tuple for ICMPv6…
Record
CLSA-2024-1727815919
Updated
2026-11-02
OSVCLSA-2025-1759431860 No score

kernel: Fix of 39 CVEs

  • ASoC: topology: Clean up route loading {CVE-2024-41069}
  • ASoC: topology: Fix references to freed memory {CVE-2024-41069}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
  • Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965}
  • usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966}
  • media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
  • net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
  • sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932}
  • codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798}
  • sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350}
  • sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350}
  • sch_htb: make htb_deactivate() idempotent {CVE-2025-38350}
  • sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000}
  • inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
  • scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
  • wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
  • mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
  • net: ti: fix UAF in tlan_remove_one {CVE-2021-47310}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
  • net: add atomic_long_t to net_device_stats fields {CVE-2023-52578}
  • media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
  • media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
  • xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039}
  • xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037}
  • xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
  • ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386}
  • ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
  • gfs2: Fix length of holes reported at end-of-file
  • gfs2: Only do glock put in gfs2_create_inode for free inodes
  • gfs2: Fix use-after-free in gfs2_logd after withdraw
  • gfs2: fix use-after-free in trans_drain
  • gfs2: Clean up revokes on normal withdraws
  • GFS2: gfs2_free_extlen can return an extent that is too long
  • gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe
  • GFS2: Refactor gfs2_remove_from_journal
  • GFS2: Only set PageChecked for jdata…
Record
CLSA-2025-1759431860
Updated
2026-11-02
OSVCLSA-2025-1759431869 No score

kernel: Fix of 39 CVEs

  • ASoC: topology: Clean up route loading {CVE-2024-41069}
  • ASoC: topology: Fix references to freed memory {CVE-2024-41069}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
  • Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965}
  • usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966}
  • media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
  • net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
  • sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932}
  • codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798}
  • sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350}
  • sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350}
  • sch_htb: make htb_deactivate() idempotent {CVE-2025-38350}
  • sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000}
  • inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
  • scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
  • wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
  • mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
  • net: ti: fix UAF in tlan_remove_one {CVE-2021-47310}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
  • net: add atomic_long_t to net_device_stats fields {CVE-2023-52578}
  • media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
  • media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
  • xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039}
  • xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037}
  • xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
  • ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386}
  • ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
  • gfs2: Fix length of holes reported at end-of-file
  • gfs2: Only do glock put in gfs2_create_inode for free inodes
  • gfs2: Fix use-after-free in gfs2_logd after withdraw
  • gfs2: fix use-after-free in trans_drain
  • gfs2: Clean up revokes on normal withdraws
  • GFS2: gfs2_free_extlen can return an extent that is too long
  • gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe
  • GFS2: Refactor gfs2_remove_from_journal
  • GFS2: Only set PageChecked for jdata…
Record
CLSA-2025-1759431869
Updated
2026-11-02
OSVCLSA-2025-1759432250 No score

kernel: Fix of 36 CVEs

  • ASoC: topology: Clean up route loading {CVE-2024-41069}
  • ASoC: topology: Fix references to freed memory {CVE-2024-41069}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
  • Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965}
  • usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966}
  • media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
  • inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
  • scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
  • wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
  • mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
  • net: ti: fix UAF in tlan_remove_one {CVE-2021-47310}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
  • net: add atomic_long_t to net_device_stats fields {CVE-2023-52578}
  • media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
  • media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
  • xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039}
  • xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037}
  • xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
  • ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386}
  • ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
Record
CLSA-2025-1759432250
Updated
2026-11-02
OSVCLSA-2025-1761074747 No score

kernel: Fix of 39 CVEs

  • nfs: fix UAF in direct writes {CVE-2024-26958}
  • NFSD: Fix the behavior of READ near OFFSET_MAX {CVE-2022-48827}
  • thermal: core: prevent potential string overflow {CVE-2023-52868}
  • ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 {CVE-2021-47633}
  • RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests {CVE-2021-47391}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • netfilter: validate user input for expected length {CVE-2024-35896}
  • wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
  • net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
  • bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487}
  • SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885}
  • tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
  • scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
  • jffs2: prevent xattr node from overflowing the eraseblock {CVE-2024-38599}
  • ecryptfs: Fix buffer size for tag 66 packet {CVE-2024-38578}
  • dlm: fix plock invalid read {CVE-2022-49407}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • jfs: fix shift-out-of-bounds in dbSplit {CVE-2024-56597}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • pid: take a reference when initializing cad_pid {CVE-2021-47118}
  • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077}
  • media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824}
  • xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
  • media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
  • media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886}
  • media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
  • media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919}
  • x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265}
  • x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265}
  • x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265}
  • i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153}
Record
CLSA-2025-1761074747
Updated
2026-11-02
OSVCLSA-2025-1761139764 No score

kernel: Fix of 39 CVEs

  • nfs: fix UAF in direct writes {CVE-2024-26958}
  • NFSD: Fix the behavior of READ near OFFSET_MAX {CVE-2022-48827}
  • thermal: core: prevent potential string overflow {CVE-2023-52868}
  • ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 {CVE-2021-47633}
  • RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests {CVE-2021-47391}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • netfilter: validate user input for expected length {CVE-2024-35896}
  • wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
  • net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
  • bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487}
  • SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885}
  • tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
  • scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
  • jffs2: prevent xattr node from overflowing the eraseblock {CVE-2024-38599}
  • ecryptfs: Fix buffer size for tag 66 packet {CVE-2024-38578}
  • dlm: fix plock invalid read {CVE-2022-49407}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • jfs: fix shift-out-of-bounds in dbSplit {CVE-2024-56597}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • pid: take a reference when initializing cad_pid {CVE-2021-47118}
  • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077}
  • media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824}
  • xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
  • media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
  • media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886}
  • media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
  • media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919}
  • x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit {CVE-2022-25265}
  • x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK {CVE-2022-25265}
  • x86/elf: Add table to document READ_IMPLIES_EXEC {CVE-2022-25265}
  • i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153}
Record
CLSA-2025-1761139764
Updated
2026-11-02
OSVCLSA-2025-1763991095 No score

Fix of 25 CVEs

Record
CLSA-2025-1763991095
Updated
2026-11-02
OSV No score

USB: core: Fix hang in usb_kill_urb by adding memory barriers

In the Linux kernel, the following vulnerability has been resolved:

USB: core: Fix hang in usb_kill_urb by adding memory barriers

The syzbot fuzzer has identified a bug in which processes hang waiting for usb_kill_urb() to return. It turns out the issue is not unlinking the URB; that works just fine. Rather, the problem arises when the wakeup notification that the URB has completed is not received.

The reason is memory-access ordering on SMP systems. In outline form, usb_kill_urb() and __usb_hcd_giveback_urb() operating concurrently on different CPUs perform the following actions:

CPU 0 CPU 1

usb_kill_urb(): __usb_hcd_giveback_urb(): ... ... atomic_inc(&urb->reject); atomic_dec(&urb->use_count); ... ... wait_event(usb_kill_urb_queue, atomic_read(&urb->use_count) == 0); if (atomic_read(&urb->reject)) wake_up(&usb_kill_urb_queue);

Confining your attention to urb->reject and urb->use_count, you can see that the overall pattern of accesses on CPU 0 is:

write urb->reject, then read urb->use_count;

whereas the overall pattern of accesses on CPU 1 is:

write urb->use_count, then read urb->reject.

This pattern is referred to in memory-model circles as SB (for "Store Buffering"), and it is well known that without suitable enforcement of the desired order of accesses -- in the form of memory barriers -- it is entirely possible for one or both CPUs to execute their reads ahead of their writes. The end result will be that sometimes CPU 0 sees the old un-decremented value of urb->use_count while CPU 1 sees the old un-incremented value of urb->reject. Consequently CPU 0 ends up on the wait queue and never gets woken up, leading to the observed hang in usb_kill_urb().

The same pattern of accesses occurs in usb_poison_urb() and the failure pathway of usb_hcd_submit_urb().

The problem is fixed by adding suitable memory barriers. To provide proper memory-access ordering in the SB pattern, a full barrier is required on both CPUs. The atomic_inc() and atomic_dec() accesses themselves don't provide any memory ordering, but since they are present, we can use the optimized smp_mb__after_atomic() memory barrier in the various routines to obtain the desired effect.

This patch adds the necessary memory barriers.

Record
CVE-2022-48760
Updated
2026-11-02
OSVRLSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52817 CVE-2023-52840 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:7001
Updated
2026-11-02
OSVSUSE-SU-2024:2360-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
  • CVE-2021-47191: Fix out-of-bound read in resp_readcap16() (bsc#1222866).
  • CVE-2021-47267: usb: fix various gadget panics on 10gbps cabling (bsc#1224993).
  • CVE-2021-47270: usb: fix various gadgets null ptr deref on 10gbps cabling (bsc#1224997).
  • CVE-2021-47293: net/sched: act_skbmod: Skip non-Ethernet packets (bsc#1224978).
  • CVE-2021-47294: netrom: Decrease sock refcount when sock timers expire (bsc#1224977).
  • CVE-2021-47297: net: fix uninit-value in caif_seqpkt_sendmsg (bsc#1224976).
  • CVE-2021-47309: net: validate lwtstate->data before returning from skb_tunnel_info() (bsc#1224967).
  • CVE-2021-47354: drm/sched: Avoid data corruptions (bsc#1225140)
  • CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
  • CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
  • CVE-2021-47407: KVM: x86: Handle SRCU initialization failure during page track init (bsc#1225306).
  • CVE-2021-47418: net_sched: fix NULL deref in fifo_set_limit() (bsc#1225337).
  • CVE-2021-47434: xhci: Fix commad ring abort, write all 64 bits to CRCR register (bsc#1225232).
  • CVE-2021-47445: drm/msm: Fix null pointer dereference on pointer edp (bsc#1225261)
  • CVE-2021-47518: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (bsc#1225372).
  • CVE-2021-47544: tcp: fix page frag corruption on page fault (bsc#1225463).
  • CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2021-47587: net: systemport: Add global locking for descriptor lifecycle (bsc#1226567).
  • CVE-2021-47602: mac80211: track only QoS data frames for admission control (bsc#1226554).
  • CVE-2021-47609: firmware: arm_scpi: Fix string overflow in SCPI genpd driver (bsc#1226562)
  • CVE-2022-48732: drm/nouveau: fix off by one in BIOS boundary checking (bsc#1226716)
  • CVE-2022-48733: btrfs: fix use-after-free after failure to create a snapshot (bsc#1226718).
  • CVE-2022-48740: selinux: fix double free of cond_list on error paths (bsc#1226699).
  • CVE-2022-48743: net: amd-xgbe: Fix skb data length underflow (bsc#1226705).
  • CVE-2022-48756: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (bsc#1226698)
  • CVE-2022-48759: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (bsc#1226711).
  • CVE-2022-48761: usb: xhci-plat: fix crash when suspend if remote wake enable (bsc#1226701).
  • CVE-2022-48772: media: lgdt3306a: Add a check against null-pointer-def (bsc#1226976).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
  • CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52754: media: imon: fix access to invalid resource for the second interface (bsc#1225490).
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
  • CVE-2023-52764: media: gspca: cpia1: shift-out-of-bounds in set_flicker (bsc#1225571).
  • CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
  • CVE-2023-52832: wifi: mac80211: do not return unset power in ieee80211_get_tx_power() (bsc#1225577).
  • CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
  • CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
  • CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
  • CVE-2023-52845: tipc: Change nla_policy…
Record
SUSE-SU-2024:2360-1
Updated
2026-11-02
OSVSUSE-SU-2024:2362-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47247: net/mlx5e: Fix use-after-free of encap entry in neigh update handler (bsc#1224865).
  • CVE-2021-47311: net: qcom/emac: fix UAF in emac_remove (bsc#1225010).
  • CVE-2021-47368: enetc: Fix illegal access when reading affinity_hint (bsc#1225161).
  • CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
  • CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2022-48760: USB: core: Fix hang in usb_kill_urb by adding memory barriers (bsc#1226712).
  • CVE-2023-52707: sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1225109). polled (bsc#1202623).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
  • CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1224703).
  • CVE-2024-36894: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (bsc#1225749).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
  • CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable() (bsc#1225840).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
  • CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595)
  • CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226758).
  • CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).

The following non-security bugs were fixed:

  • NFS: avoid infinite loop in pnfs_update_layout (bsc#1219633 bsc#1226226).
  • ocfs2: adjust enabling place for la window (bsc#1219224).
  • ocfs2: fix sparse warnings (bsc#1219224).
  • ocfs2: improve write IO performance when fragmentation is high (bsc#1219224).
  • ocfs2: speed up chain-list searching (bsc#1219224).
  • psi: Fix uaf issue when psi trigger is destroyed while being
  • x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (bsc#1222015 bsc#1226962).
Record
SUSE-SU-2024:2362-1
Updated
2026-11-02
OSVSUSE-SU-2024:2365-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47247: net/mlx5e: Fix use-after-free of encap entry in neigh update handler (bsc#1224865).
  • CVE-2021-47311: net: qcom/emac: fix UAF in emac_remove (bsc#1225010).
  • CVE-2021-47368: enetc: Fix illegal access when reading affinity_hint (bsc#1225161).
  • CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
  • CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2022-2938: psi: Fix uaf issue when psi trigger is destroyed while being polled (bsc#1202623).
  • CVE-2022-48760: USB: core: Fix hang in usb_kill_urb by adding memory barriers (bsc#1226712).
  • CVE-2023-52707: sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1225109).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
  • CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1224703).
  • CVE-2024-36894: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (bsc#1225749).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
  • CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable() (bsc#1225840).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
  • CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595)
  • CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226758).
  • CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).

The following non-security bugs were fixed:

  • ocfs2: adjust enabling place for la window (bsc#1219224).
  • ocfs2: fix sparse warnings (bsc#1219224).
  • ocfs2: improve write IO performance when fragmentation is high (bsc#1219224).
  • ocfs2: speed up chain-list searching (bsc#1219224).
  • x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (bsc#1222015 bsc#1226962).
  • x86/xen: Drop USERGS_SYSRET64 paravirt call (git-fixes).
Record
SUSE-SU-2024:2365-1
Updated
2026-11-02
OSVSUSE-SU-2024:2372-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
  • CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
  • CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
  • CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
  • CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
  • CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
  • CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
  • CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
  • CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
  • CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
  • CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
  • CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
  • CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
  • CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
  • CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
  • CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
  • CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
  • CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
  • CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
  • CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
  • CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
  • CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
  • CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
  • CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
  • CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282bsc#1222072).
  • CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
  • CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (git-fixesbsc#1223641).
  • CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
  • CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
  • CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
  • CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
  • CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
  • CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
  • CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
  • CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
  • CVE-2024-35861:…
Record
SUSE-SU-2024:2372-1
Updated
2026-11-02
OSVSUSE-SU-2024:2381-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
  • CVE-2021-47191: Fix out-of-bound read in resp_readcap16() (bsc#1222866).
  • CVE-2021-47267: usb: fix various gadget panics on 10gbps cabling (bsc#1224993).
  • CVE-2021-47270: usb: fix various gadgets null ptr deref on 10gbps cabling (bsc#1224997).
  • CVE-2021-47293: net/sched: act_skbmod: Skip non-Ethernet packets (bsc#1224978).
  • CVE-2021-47294: netrom: Decrease sock refcount when sock timers expire (bsc#1224977).
  • CVE-2021-47297: net: fix uninit-value in caif_seqpkt_sendmsg (bsc#1224976).
  • CVE-2021-47309: net: validate lwtstate->data before returning from skb_tunnel_info() (bsc#1224967).
  • CVE-2021-47354: drm/sched: Avoid data corruptions (bsc#1225140)
  • CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
  • CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
  • CVE-2021-47407: KVM: x86: Handle SRCU initialization failure during page track init (bsc#1225306).
  • CVE-2021-47418: net_sched: fix NULL deref in fifo_set_limit() (bsc#1225337).
  • CVE-2021-47434: xhci: Fix commad ring abort, write all 64 bits to CRCR register (bsc#1225232).
  • CVE-2021-47445: drm/msm: Fix null pointer dereference on pointer edp (bsc#1225261)
  • CVE-2021-47518: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (bsc#1225372).
  • CVE-2021-47544: tcp: fix page frag corruption on page fault (bsc#1225463).
  • CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2021-47587: net: systemport: Add global locking for descriptor lifecycle (bsc#1226567).
  • CVE-2021-47602: mac80211: track only QoS data frames for admission control (bsc#1226554).
  • CVE-2021-47609: firmware: arm_scpi: Fix string overflow in SCPI genpd driver (bsc#1226562)
  • CVE-2022-48732: drm/nouveau: fix off by one in BIOS boundary checking (bsc#1226716)
  • CVE-2022-48733: btrfs: fix use-after-free after failure to create a snapshot (bsc#1226718).
  • CVE-2022-48740: selinux: fix double free of cond_list on error paths (bsc#1226699).
  • CVE-2022-48743: net: amd-xgbe: Fix skb data length underflow (bsc#1226705).
  • CVE-2022-48756: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (bsc#1226698)
  • CVE-2022-48759: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (bsc#1226711).
  • CVE-2022-48761: usb: xhci-plat: fix crash when suspend if remote wake enable (bsc#1226701).
  • CVE-2022-48772: media: lgdt3306a: Add a check against null-pointer-def (bsc#1226976).
  • CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
  • CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52754: media: imon: fix access to invalid resource for the second interface (bsc#1225490).
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
  • CVE-2023-52764: media: gspca: cpia1: shift-out-of-bounds in set_flicker (bsc#1225571).
  • CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
  • CVE-2023-52832: wifi: mac80211: do not return unset power in ieee80211_get_tx_power() (bsc#1225577).
  • CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
  • CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
  • CVE-2023-52843: llc: verify mac len before…
Record
SUSE-SU-2024:2381-1
Updated
2026-11-02
OSVSUSE-SU-2024:2384-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2021-47247: net/mlx5e: Fix use-after-free of encap entry in neigh update handler (bsc#1224865).
- CVE-2021-47311: net: qcom/emac: fix UAF in emac_remove (bsc#1225010).
- CVE-2021-47368: enetc: Fix illegal access when reading affinity_hint (bsc#1225161).
- CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
- CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
- CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
- CVE-2022-2938: psi: Fix uaf issue when psi trigger is destroyed while being polled (bsc#1202623).
- CVE-2022-48760: USB: core: Fix hang in usb_kill_urb by adding memory barriers (bsc#1226712).
- CVE-2023-52707: sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1225109). polled (bsc#1202623).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
- CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
- CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
- CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
- CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
- CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1224703).
- CVE-2024-36894: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (bsc#1225749).
- CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
- CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable() (bsc#1225840).
- CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
- CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
- CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
- CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).

The following non-security bugs were fixed:

- NFS: avoid infinite loop in pnfs_update_layout (bsc#1219633 bsc#1226226).
- ocfs2: adjust enabling place for la window (bsc#1219224).
- ocfs2: fix sparse warnings (bsc#1219224).
- ocfs2: improve write IO performance when fragmentation is high (bsc#1219224).
- ocfs2: speed up chain-list searching (bsc#1219224).
- psi: Fix uaf issue when psi trigger is destroyed while being
- x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (bsc#1222015 bsc#1226962).
Record
SUSE-SU-2024:2384-1
Updated
2026-11-02
OSVSUSE-SU-2024:2394-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
  • CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
  • CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
  • CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
  • CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
  • CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
  • CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
  • CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
  • CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
  • CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
  • CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
  • CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
  • CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
  • CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
  • CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
  • CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
  • CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
  • CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
  • CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
  • CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
  • CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
  • CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
  • CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
  • CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
  • CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282, bsc#1222072).
  • CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
  • CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
  • CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (bsc#1223641).
  • CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
  • CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
  • CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
  • CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
  • CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
  • CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
  • CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
  • CVE-2024-35857: icmp: prevent possible…
Record
SUSE-SU-2024:2394-1
Updated
2026-11-02
OSVSUSE-SU-2024:2561-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
  • CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
  • CVE-2021-47145: btrfs: do not BUG_ON in link_to_fixup_dir (bsc#1222005).
  • CVE-2021-47191: Fix out-of-bound read in resp_readcap16() (bsc#1222866).
  • CVE-2021-47201: iavf: free q_vectors before queues in iavf_disable_vf (bsc#1222792).
  • CVE-2021-47267: usb: fix various gadget panics on 10gbps cabling (bsc#1224993).
  • CVE-2021-47270: usb: fix various gadgets null ptr deref on 10gbps cabling (bsc#1224997).
  • CVE-2021-47275: bcache: avoid oversized read request in cache missing code path (bsc#1224965).
  • CVE-2021-47293: net/sched: act_skbmod: Skip non-Ethernet packets (bsc#1224978).
  • CVE-2021-47294: netrom: Decrease sock refcount when sock timers expire (bsc#1224977).
  • CVE-2021-47297: net: fix uninit-value in caif_seqpkt_sendmsg (bsc#1224976).
  • CVE-2021-47309: net: validate lwtstate->data before returning from skb_tunnel_info() (bsc#1224967).
  • CVE-2021-47328: blacklist.conf: bsc#1225047 CVE-2021-47328: breaks kABI Also, does not apply.
  • CVE-2021-47354: drm/sched: Avoid data corruptions (bsc#1225140)
  • CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
  • CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
  • CVE-2021-47407: KVM: x86: Handle SRCU initialization failure during page track init (bsc#1225306).
  • CVE-2021-47418: net_sched: fix NULL deref in fifo_set_limit() (bsc#1225337).
  • CVE-2021-47434: xhci: Fix commad ring abort, write all 64 bits to CRCR register (bsc#1225232).
  • CVE-2021-47438: net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (bsc#1225229)
  • CVE-2021-47445: drm/msm: Fix null pointer dereference on pointer edp (bsc#1225261)
  • CVE-2021-47498: dm rq: do not queue request to blk-mq during DM suspend (bsc#1225357).
  • CVE-2021-47518: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (bsc#1225372).
  • CVE-2021-47520: can: pch_can: pch_can_rx_normal: fix use after free (bsc#1225431).
  • CVE-2021-47544: tcp: fix page frag corruption on page fault (bsc#1225463).
  • CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
  • CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2021-47587: net: systemport: Add global locking for descriptor lifecycle (bsc#1226567).
  • CVE-2021-47602: mac80211: track only QoS data frames for admission control (bsc#1226554).
  • CVE-2021-47609: firmware: arm_scpi: Fix string overflow in SCPI genpd driver (bsc#1226562)
  • CVE-2022-48732: drm/nouveau: fix off by one in BIOS boundary checking (bsc#1226716)
  • CVE-2022-48733: btrfs: fix use-after-free after failure to create a snapshot (bsc#1226718).
  • CVE-2022-48740: selinux: fix double free of cond_list on error paths (bsc#1226699).
  • CVE-2022-48743: net: amd-xgbe: Fix skb data length underflow (bsc#1226705).
  • CVE-2022-48756: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (bsc#1226698)
  • CVE-2022-48759: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (bsc#1226711).
  • CVE-2022-48761: usb: xhci-plat: fix crash when suspend if remote wake enable (bsc#1226701).
  • CVE-2022-48772: media: lgdt3306a: Add a check against null-pointer-def (bsc#1226976).
  • CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
  • CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
  • CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci…
Record
SUSE-SU-2024:2561-1
Updated
2026-11-02
OSVSUSE-SU-2024:2902-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
  • CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).
  • CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829).
  • CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
  • CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
  • CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823).
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
  • CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
  • CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
  • CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
  • CVE-2024-39463: 9p: add missing locking around taking dentry fid list (bsc#1227090).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
  • CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
  • CVE-2024-35901: net: mana: Fix Rx DMA datasize and skb_over_panic (bsc#1224495).
  • CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).
  • CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
  • CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).

The following non-security bugs were fixed:

  • NFS: Do not re-read the entire page cache to find the next cookie (bsc#1226662).
  • NFS: Reduce use of uncached readdir (bsc#1226662).
  • NFSv4.x: by default serialize open/close operations (bsc#1226226 bsc#1223863).
  • X.509: Fix the parser of extended key usage for length (bsc#1218820).
  • btrfs: sysfs: update fs features directory asynchronously (bsc#1226168).
  • cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801).
  • jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383).
  • kABI: rtas: Workaround false positive due to lost definition (bsc#1227487).
  • kernel-binary: vdso: Own module_dir
  • net/dcb: check for detached device before executing callbacks (bsc#1215587).
  • ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
  • powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
  • powerpc/rtas: clean up includes (bsc#1227487).
  • workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454).
  • workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454).
Record
SUSE-SU-2024:2902-1
Updated
2026-11-02
OSVSUSE-SU-2024:2929-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
  • CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743)
  • CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829).
  • CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
  • CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
  • CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823).
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
  • CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
  • CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
  • CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
  • CVE-2024-39463: 9p: add missing locking around taking dentry fid list (bsc#1227090).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
  • CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
  • CVE-2024-35901: net: mana: Fix Rx DMA datasize and skb_over_panic (bsc#1224495).
  • CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
  • CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
  • CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).

The following non-security bugs were fixed:

  • NFS: Do not re-read the entire page cache to find the next cookie (bsc#1226662).
  • NFS: Reduce use of uncached readdir (bsc#1226662).
  • NFSv4.x: by default serialize open/close operations (bsc#1226226 bsc#1223863).
  • X.509: Fix the parser of extended key usage for length (bsc#1218820).
  • btrfs: sysfs: update fs features directory asynchronously (bsc#1226168).
  • cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801).
  • jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383).
  • kABI: rtas: Workaround false positive due to lost definition (bsc#1227487).
  • kernel-binary: vdso: Own module_dir
  • net/dcb: check for detached device before executing callbacks (bsc#1215587).
  • ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
  • powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
  • powerpc/rtas: clean up includes (bsc#1227487).
  • workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454).
  • workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454).
Record
SUSE-SU-2024:2929-1
Updated
2026-11-02
OSVSUSE-SU-2024:2939-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
  • CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958).
  • CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
  • CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
  • CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
  • CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
  • CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
  • CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
  • CVE-2021-47546: ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
  • CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
  • CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
  • CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
  • CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
  • CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
  • CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
  • CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
  • CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571).
  • CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len. (bsc#1226555).
  • CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
  • CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
  • CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
  • CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
  • CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071).
  • CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
  • CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
  • CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
  • CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869).
  • CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
  • CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
  • CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
  • CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
  • CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
  • CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
  • CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
  • CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
  • CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
  • CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
  • CVE-2023-52787: blk-mq: make…
Record
SUSE-SU-2024:2939-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
perf
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-rt
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-kvm
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-kvm
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
bpftool
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-core
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-cross-headers
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-debug
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-debug-core
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-debug-devel
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-debug-modules
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-debug-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-debug-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-devel
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-headers
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-ipaclones-internal
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-modules
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-selftests-internal
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-tools
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-tools-libs
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
kernel-tools-libs-devel
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
perf
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
python3-perf
TuxCare:CentOS:8.5
From an advisory covering 80 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els20
4.18.0-348.7.1.el8_5.tuxcare.els20
bpftool
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-core
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-cross-headers
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-debug
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-debug-core
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-debug-devel
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-debug-modules
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-debug-modules-extra
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-debug-modules-internal
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-devel
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-headers
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-ipaclones-internal
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-modules
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-modules-extra
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-modules-internal
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-selftests-internal
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-tools
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-tools-libs
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
kernel-tools-libs-devel
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
perf
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
python3-perf
TuxCare:CentOS:8.4
From an advisory covering 80 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els20
4.18.0-305.25.1.el8_4.tuxcare.els20
bpftool
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-core
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-cross-headers
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-debug
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-debug-core
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-debug-devel
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-debug-modules
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-debug-modules-extra
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-debug-modules-internal
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-devel
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-headers
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-ipaclones-internal
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-modules
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
kernel-modules-extra
TuxCare:CentOS-Stream:8
From an advisory covering 75 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els3
4.18.0-553.6.1.el8_10.tuxcare.els3
Kernel
Linux
 2.6.29 up to 4.4.302, 4.5.0 up to 4.9.300, 4.10.0 up to 4.14.265, 4.15.0 up to 4.19.228, 4.20.0 up to 5.4.176, 5.5.0 up to 5.10.96, 5.11.0 up to 5.15.19, 5.16.0 up to 5.16.5
4.4.3024.9.3004.14.2654.19.2285.4.1765.10.965.15.195.16.5
linux
Debian:12
 before 5.16.7-1
5.16.7-1
linux
Debian:13
 before 5.16.7-1
5.16.7-1
linux
Debian:14
 before 5.16.7-1
5.16.7-1
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 13 CVEs
 before 4.19.90-2407.4.0.0286.oe2003sp4
4.19.90-2407.4.0.0286.oe2003sp4
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 151 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel
Rocky Linux:8
From an advisory covering 147 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-livepatch-SLE15-SP3_Update_46
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 72 CVEs
 before 1-150300.7.3.1
1-150300.7.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1.150300.18.98.1
5.3.18-150300.59.167.1.150300.18.98.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1.150300.18.98.1
5.3.18-150300.59.167.1.150300.18.98.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-preempt
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-source
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1.150300.18.98.1
5.3.18-150300.59.167.1.150300.18.98.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1.150300.18.98.1
5.3.18-150300.59.167.1.150300.18.98.1
kernel-default
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1.150300.18.98.1
5.3.18-150300.59.167.1.150300.18.98.1
kernel-64kb
SUSE:Enterprise Storage 7.1
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default
SUSE:Enterprise Storage 7.1
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default-base
SUSE:Enterprise Storage 7.1
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1.150300.18.98.1
5.3.18-150300.59.167.1.150300.18.98.1
kernel-docs
SUSE:Enterprise Storage 7.1
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-obs-build
SUSE:Enterprise Storage 7.1
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-preempt
SUSE:Enterprise Storage 7.1
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-source
SUSE:Enterprise Storage 7.1
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-syms
SUSE:Enterprise Storage 7.1
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1
5.3.18-150200.24.197.1
kernel-livepatch-SLE15-SP2_Update_50
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 38 CVEs
 before 1-150200.5.3.1
1-150200.5.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP2
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1
5.3.18-150200.24.197.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1
5.3.18-150200.24.197.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1.150200.9.101.1
5.3.18-150200.24.197.1.150200.9.101.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1
5.3.18-150200.24.197.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1
5.3.18-150200.24.197.1
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1
5.3.18-150200.24.197.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1
5.3.18-150200.24.197.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1
5.3.18-150200.24.197.1
kernel-default
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1
5.3.18-150200.24.197.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1.150200.9.101.1
5.3.18-150200.24.197.1.150200.9.101.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1
5.3.18-150200.24.197.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 38 CVEs
 before 5.3.18-150200.24.197.1
5.3.18-150200.24.197.1
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.33.60.1
5.14.21-150500.33.60.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.33.60.1
5.14.21-150500.33.60.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.33.60.1
5.14.21-150500.33.60.1
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-default
openSUSE:Leap Micro 5.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-default-base
openSUSE:Leap Micro 5.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1.150500.6.33.8
5.14.21-150500.55.73.1.150500.6.33.8
dtb-aarch64
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-64kb
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-debug
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-default
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-default-base
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1.150500.6.33.8
5.14.21-150500.55.73.1.150500.6.33.8
kernel-docs
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.2
5.14.21-150500.55.73.2
kernel-kvmsmall
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-obs-build
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-obs-qa
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-source
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-syms
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-zfcpdump
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
linux-azure
Ubuntu:Pro:14.04:LTS
 before 4.15.0-1137.150~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
4.15.0-1137.150~14.04.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1127.136~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1127.136~16.04.1
linux-azure
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1137.150~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1137.150~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1121.135~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1121.135~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-176.185~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-176.185~16.04.1
linux-oracle
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1092.101~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
4.15.0-1092.101~16.04.1
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:18.04:LTS
 before 4.15.0-176.185, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-176.185
linux-aws
Ubuntu:18.04:LTS
 before 4.15.0-1127.136, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1127.136
linux-aws-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1072.77~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 31 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.1
5.4.0-1072.77~18.04.1
linux-azure-4.15
Ubuntu:18.04:LTS
 before 4.15.0-1137.150, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 31 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.149
4.15.0-1137.150
linux-azure-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1077.80~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 31 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.1
5.4.0-1077.80~18.04.1
linux-gcp-4.15
Ubuntu:18.04:LTS
 before 4.15.0-1121.135, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 30 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.134
4.15.0-1121.135
linux-gcp-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1072.77~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 32 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.1
5.4.0-1072.77~18.04.1
linux-hwe-5.4
Ubuntu:18.04:LTS
 before 5.4.0-109.123~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 38 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.1
5.4.0-109.123~18.04.1
linux-ibm-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1020.22~18.04.1, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
5.4.0-1020.22~18.04.1
linux-kvm
Ubuntu:18.04:LTS
 before 4.15.0-1113.116, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
4.15.0-1113.116
linux-oracle
Ubuntu:18.04:LTS
 before 4.15.0-1092.101, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1092.101
linux-oracle-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1070.76~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 31 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.1
5.4.0-1070.76~18.04.1
linux-raspi-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1059.66~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 28 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.1
5.4.0-1059.66~18.04.1
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2066.69, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 31 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.68
4.15.0-2066.69
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2048.52, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 28 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.51
4.15.0-2048.52
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-1084.93, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 35 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.92
4.15.0-1084.93
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2031.34, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 9 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.33
4.15.0-2031.34
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:20.04:LTS
 before 5.4.0-109.123, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-109.123
linux-aws
Ubuntu:20.04:LTS
 before 5.4.0-1072.77, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 43 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.76
5.4.0-1072.77
linux-azure
Ubuntu:20.04:LTS
 before 5.4.0-1077.80, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 41 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.77
5.4.0-1077.80
linux-bluefield
Ubuntu:20.04:LTS
 before 5.4.0-1035.38, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 10 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.35
5.4.0-1035.38
linux-gcp
Ubuntu:20.04:LTS
 before 5.4.0-1072.77, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 42 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.73
5.4.0-1072.77
linux-gkeop
Ubuntu:20.04:LTS
 before 5.4.0-1039.40, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 20 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.39
5.4.0-1039.40
linux-ibm
Ubuntu:20.04:LTS
 before 5.4.0-1020.22, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 9 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.21
5.4.0-1020.22

History

History
RecordedChangedSources
affectedOSV
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-48760 is a high vulnerability (CVSS 7.1) in Linux, published June 20, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in Kernel 4.4.302.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 261 package rows, 988 versions, 2,165 references and the rest of 13 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open