CVE-2022-48923

btrfs: prevent copying too big compressed lzo segment

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

btrfs: prevent copying too big compressed lzo segment

Compressed length can be corrupted to be a lot larger than memory we have allocated for buffer. This will cause memcpy in copy_compressed_segment to write outside of allocated memory.

This mostly results in stuck read syscall but sometimes when using btrfs send can get #GP

kernel: general protection fault, probably for non-canonical address 0x841551d5c1000: 0000 [#1] PREEMPT SMP NOPTI kernel: CPU: 17 PID: 264 Comm: kworker/u256:7 Tainted: P OE 5.17.0-rc2-1 #12 kernel: Workqueue: btrfs-endio btrfs_work_helper [btrfs] kernel: RIP: 0010:lzo_decompress_bio (./include/linux/fortify-string.h:225 fs/btrfs/lzo.c:322 fs/btrfs/lzo.c:394) btrfs Code starting with the faulting instruction

 0:*  48 8b 06                mov    (%rsi),%rax              <-- trapping instruction
 3:   48 8d 79 08             lea    0x8(%rcx),%rdi
 7:   48 83 e7 f8             and    $0xfffffffffffffff8,%rdi
 b:   48 89 01                mov    %rax,(%rcx)
 e:   44 89 f0                mov    %r14d,%eax
11:   48 8b 54 06 f8          mov    -0x8(%rsi,%rax,1),%rdx

kernel: RSP: 0018:ffffb110812efd50 EFLAGS: 00010212 kernel: RAX: 0000000000001000 RBX: 000000009ca264c8 RCX: ffff98996e6d8ff8 kernel: RDX: 0000000000000064 RSI: 000841551d5c1000 RDI: ffffffff9500435d kernel: RBP: ffff989a3be856c0 R08: 0000000000000000 R09: 0000000000000000 kernel: R10: 0000000000000000 R11: 0000000000001000 R12: ffff98996e6d8000 kernel: R13: 0000000000000008 R14: 0000000000001000 R15: 000841551d5c1000 kernel: FS: 0000000000000000(0000) GS:ffff98a09d640000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 00001e9f984d9ea8 CR3: 000000014971a000 CR4: 00000000003506e0 kernel: Call Trace: kernel: <TASK> kernel: end_compressed_bio_read (fs/btrfs/compression.c:104 fs/btrfs/compression.c:1363 fs/btrfs/compression.c:323) btrfs kernel: end_workqueue_fn (fs/btrfs/disk-io.c:1923) btrfs kernel: btrfs_work_helper (fs/btrfs/async-thread.c:326) btrfs kernel: process_one_work (./arch/x86/include/asm/jump_label.h:27 ./include/linux/jump_label.h:212 ./include/trace/events/workqueue.h:108 kernel/workqueue.c:2312) kernel: worker_thread (./include/linux/list.h:292 kernel/workqueue.c:2455) kernel: ? process_one_work (kernel/workqueue.c:2397) kernel: kthread (kernel/kthread.c:377) kernel: ? kthread_complete_and_exit (kernel/kthread.c:332) kernel: ret_from_fork (arch/x86/entry/entry_64.S:301) kernel: </TASK>

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.23%Up 0.2 points since Aug 22, 2024

What each source reports

CVE List Score used 7.8

btrfs: prevent copying too big compressed lzo segment

In the Linux kernel, the following vulnerability has been resolved:

btrfs: prevent copying too big compressed lzo segment

Compressed length can be corrupted to be a lot larger than memory we have allocated for buffer. This will cause memcpy in copy_compressed_segment to write outside of allocated memory.

This mostly results in stuck read syscall but sometimes when using btrfs send can get #GP

kernel: general protection fault, probably for non-canonical address 0x841551d5c1000: 0000 [#1] PREEMPT SMP NOPTI kernel: CPU: 17 PID: 264 Comm: kworker/u256:7 Tainted: P OE 5.17.0-rc2-1 #12 kernel: Workqueue: btrfs-endio btrfs_work_helper [btrfs] kernel: RIP: 0010:lzo_decompress_bio (./include/linux/fortify-string.h:225 fs/btrfs/lzo.c:322 fs/btrfs/lzo.c:394) btrfs Code starting with the faulting instruction

 0:*  48 8b 06                mov    (%rsi),%rax              <-- trapping instruction
 3:   48 8d 79 08             lea    0x8(%rcx),%rdi
 7:   48 83 e7 f8             and    $0xfffffffffffffff8,%rdi
 b:   48 89 01                mov    %rax,(%rcx)
 e:   44 89 f0                mov    %r14d,%eax
11:   48 8b 54 06 f8          mov    -0x8(%rsi,%rax,1),%rdx

Record: CVE-2022-48923
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2022-53802 7.8

In the Linux kernel, the following vulnerability has been resolved:

btrfs: prevent copying too big compressed lzo segment

Compressed length can be corrupted to be a lot larger than memory we have allocated for buffer. This will cause memcpy in copy_compressed_segment to write outside of allocated memory.

This mostly results in stuck read syscall but sometimes when using btrfs send can get #GP

kernel: general protection fault, probably for non-canonical address 0x841551d5c1000: 0000 [#1] PREEMPT SMP NOPTI kernel: CPU: 17 PID: 264 Comm: kworker/u256:7 Tainted: P OE 5.17.0-rc2-1 #12 kernel: Workqueue: btrfs-endio btrfs_work_helper [btrfs] kernel: RIP: 0010:lzo_decompress_bio (./include/linux/fortify-string.h:225 fs/btrfs/lzo.c:322 fs/btrfs/lzo.c:394) btrfs Code starting with the faulting instruction

 0:*  48 8b 06                mov    (%rsi),%rax              <-- trapping instruction
 3:   48 8d 79 08             lea    0x8(%rcx),%rdi
 7:   48 83 e7 f8             and    $0xfffffffffffffff8,%rdi
 b:   48 89 01                mov    %rax,(%rcx)
 e:   44 89 f0                mov    %r14d,%eax
11:   48 8b 54 06 f8          mov    -0x8(%rsi,%rax,1),%rdx

Record: EUVD-2022-53802
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-8qr8-pjqc-9jxp 5.5

In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too...

In the Linux kernel, the following vulnerability has been resolved:

btrfs: prevent copying too big compressed lzo segment

Compressed length can be corrupted to be a lot larger than memory we have allocated for buffer. This will cause memcpy in copy_compressed_segment to write outside of allocated memory.

This mostly results in stuck read syscall but sometimes when using btrfs send can get #GP

kernel: general protection fault, probably for non-canonical address 0x841551d5c1000: 0000 [#1] PREEMPT SMP NOPTI kernel: CPU: 17 PID: 264 Comm: kworker/u256:7 Tainted: P OE 5.17.0-rc2-1 #12 kernel: Workqueue: btrfs-endio btrfs_work_helper [btrfs] kernel: RIP: 0010:lzo_decompress_bio (./include/linux/fortify-string.h:225 fs/btrfs/lzo.c:322 fs/btrfs/lzo.c:394) btrfs Code starting with the faulting instruction

 0:*  48 8b 06                mov    (%rsi),%rax              <-- trapping instruction
 3:   48 8d 79 08             lea    0x8(%rcx),%rdi
 7:   48 83 e7 f8             and    $0xfffffffffffffff8,%rdi
 b:   48 89 01                mov    %rax,(%rcx)
 e:   44 89 f0                mov    %r14d,%eax
11:   48 8b 54 06 f8          mov    -0x8(%rsi,%rax,1),%rdx

Record: GHSA-8qr8-pjqc-9jxp
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-787
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

btrfs: prevent copying too big compressed lzo segment

Compressed length can be corrupted to be a lot larger than memory we have allocated for buffer. This will cause memcpy in copy_compressed_segment to write outside of allocated memory.

This mostly results in stuck read syscall but sometimes when using btrfs send can get #GP

kernel: general protection fault, probably for non-canonical address 0x841551d5c1000: 0000 [#1] PREEMPT SMP NOPTI kernel: CPU: 17 PID: 264 Comm: kworker/u256:7 Tainted: P OE 5.17.0-rc2-1 #12 kernel: Workqueue: btrfs-endio btrfs_work_helper [btrfs] kernel: RIP: 0010:lzo_decompress_bio (./include/linux/fortify-string.h:225 fs/btrfs/lzo.c:322 fs/btrfs/lzo.c:394) btrfs Code starting with the faulting instruction

 0:*  48 8b 06                mov    (%rsi),%rax              <-- trapping instruction
 3:   48 8d 79 08             lea    0x8(%rcx),%rdi
 7:   48 83 e7 f8             and    $0xfffffffffffffff8,%rdi
 b:   48 89 01                mov    %rax,(%rcx)
 e:   44 89 f0                mov    %r14d,%eax
11:   48 8b 54 06 f8          mov    -0x8(%rsi,%rax,1),%rdx

Record: CVE-2022-48923
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSV 7.8

btrfs: prevent copying too big compressed lzo segment

In the Linux kernel, the following vulnerability has been resolved:

btrfs: prevent copying too big compressed lzo segment

Compressed length can be corrupted to be a lot larger than memory we have allocated for buffer. This will cause memcpy in copy_compressed_segment to write outside of allocated memory.

This mostly results in stuck read syscall but sometimes when using btrfs send can get #GP

kernel: general protection fault, probably for non-canonical address 0x841551d5c1000: 0000 [#1] PREEMPT SMP NOPTI kernel: CPU: 17 PID: 264 Comm: kworker/u256:7 Tainted: P OE 5.17.0-rc2-1 #12 kernel: Workqueue: btrfs-endio btrfs_work_helper [btrfs] kernel: RIP: 0010:lzo_decompress_bio (./include/linux/fortify-string.h:225 fs/btrfs/lzo.c:322 fs/btrfs/lzo.c:394) btrfs Code starting with the faulting instruction

 0:*  48 8b 06                mov    (%rsi),%rax              <-- trapping instruction
 3:   48 8d 79 08             lea    0x8(%rcx),%rdi
 7:   48 83 e7 f8             and    $0xfffffffffffffff8,%rdi
 b:   48 89 01                mov    %rax,(%rcx)
 e:   44 89 f0                mov    %r14d,%eax
11:   48 8b 54 06 f8          mov    -0x8(%rsi,%rax,1),%rdx

Record: CVE-2022-48923
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2022-48923 5.5

In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segment Compressed length can be corrupted to be a lot larger than memory we have allocated for buffer. This will cause memcpy in copy_compressed_segment to write outside of allocated memory. This mostly results in stuck read syscall but sometimes when using btrfs send can get #GP kernel: general protection fault, probably for non-canonical address 0x841551d5c1000: 0000 [#1] PREEMPT SMP NOPTI kernel: CPU: 17 PID: 264 Comm: kworker/u256:7 Tainted: P OE 5.17.0-rc2-1 #12 kernel: Workqueue: btrfs-endio btrfs_work_helper [btrfs] kernel: RIP: 0010:lzo_decompress_bio (./include/linux/fortify-string.h:225 fs/btrfs/lzo.c:322 fs/btrfs/lzo.c:394) btrfs Code starting with the faulting instruction =========================================== 0:* 48 8b 06 mov (%rsi),%rax <-- trapping instruction 3: 48 8d 79 08 lea 0x8(%rcx),%rdi 7: 48 83 e7 f8 and $0xfffffffffffffff8,%rdi b: 48 89 01 mov %rax,(%rcx) e: 44 89 f0 mov %r14d,%eax 11: 48 8b 54 06 f8 mov -0x8(%rsi,%rax,1),%rdx kernel: RSP: 0018:ffffb110812efd50 EFLAGS: 00010212 kernel: RAX: 0000000000001000 RBX: 000000009ca264c8 RCX: ffff98996e6d8ff8 kernel: RDX: 0000000000000064 RSI: 000841551d5c1000 RDI: ffffffff9500435d kernel: RBP: ffff989a3be856c0 R08: 0000000000000000 R09: 0000000000000000 kernel: R10: 0000000000000000 R11: 0000000000001000 R12: ffff98996e6d8000 kernel: R13: 0000000000000008 R14: 0000000000001000 R15: 000841551d5c1000 kernel: FS: 0000000000000000(0000) GS:ffff98a09d640000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 00001e9f984d9ea8 CR3: 000000014971a000 CR4: 00000000003506e0 kernel: Call Trace: kernel: <TASK> kernel: end_compressed_bio_read (fs/btrfs/compression.c:104 fs/btrfs/compression.c:1363 fs/btrfs/compression.c:323) btrfs kernel: end_workqueue_fn (fs/btrfs/disk-io.c:1923) btrfs kernel: btrfs_work_helper (fs/btrfs/async-thread.c:326) btrfs kernel: process_one_work (./arch/x86/include/asm/jump_label.h:27 ./include/linux/jump_label.h:212 ./include/trace/events/workqueue.h:108 kernel/workqueue.c:2312) kernel: worker_thread (./include/linux/list.h:292 kernel/workqueue.c:2455) kernel: ? process_one_work (kernel/workqueue.c:2397) kernel: kthread (kernel/kthread.c:377) kernel: ? kthread_complete_and_exit (kernel/kthread.c:332) kernel: ret_from_fork (arch/x86/entry/entry_64.S:301) kernel: </TASK>

Record: UBUNTU-CVE-2022-48923
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 13 moreShow less

OSVDEBIAN-CVE-2022-48923 No score

Record: DEBIAN-CVE-2022-48923
Updated: 2026-11-03

OSVSUSE-SU-2024:3190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
CVE-2024-44939: fix null ptr deref in dtInsertEntry (bsc#1229820).
CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-27016: Validate pppoe header (bsc#1223807).
CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).
CVE-2023-52581: Fix memleak when more than 255…

Record: SUSE-SU-2024:3190-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3209-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
CVE-2024-44939: Fix null ptr deref in dtInsertEntry (bsc#1229820).
CVE-2024-41087: Fix double free on error (bsc#1228466).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: struct virqfd kABI workaround (bsc#1222808).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-27016: Validate pppoe header (bsc#1223807).
CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).
CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).…

Record: SUSE-SU-2024:3209-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3483-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2024-36270: Fix reference in patches.suse/netfilter-tproxy-bail-out-if-IP-has-been-disabled-on.patch (bsc#1226798)
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
CVE-2024-44939: Fix null ptr deref in dtInsertEntry (bsc#1229820).
CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-27016: Validate pppoe header (bsc#1223807). -…

Record: SUSE-SU-2024:3483-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3547-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2024-41087: Fix double free on error (bsc#1228466).
CVE-2024-42301: Fix the array out-of-bounds risk (bsc#1229407).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434).
CVE-2024-46674: usb: dwc3: st: fix probed platform device ref count on probe error path (bsc#1230507).

The following non-security bugs were fixed:

blk-mq: add helper for checking if one CPU is mapped to specified hctx (bsc#1223600).
blk-mq: do not schedule block kworker on isolated CPUs (bsc#1223600).
kabi: add __nf_queue_get_refs() for kabi compliance.
scsi: ibmvfc: Add max_sectors module parameter (bsc#1216223).
scsi: smartpqi: Expose SAS address for SATA drives (bsc#1223958).
SUNRPC: avoid soft lockup when transmitting UDP to reachable server (bsc#1225272 bsc#1231016).

Record: SUSE-SU-2024:3547-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3563-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2024-42301: Fix the array out-of-bounds risk (bsc#1229407).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434).
CVE-2024-46674: usb: dwc3: st: fix probed platform device ref count on probe error path (bsc#1230507).

The following non-security bugs were fixed:

SUNRPC: avoid soft lockup when transmitting UDP to reachable server (bsc#1225272 bsc#1231016).
blk-mq: add helper for checking if one CPU is mapped to specified hctx (bsc#1223600).
blk-mq: do not schedule block kworker on isolated CPUs (bsc#1223600).
kabi: add __nf_queue_get_refs() for kabi compliance.
scsi: ibmvfc: Add max_sectors module parameter (bsc#1216223).
scsi: smartpqi: Expose SAS address for SATA drives (bsc#1223958).

Record: SUSE-SU-2024:3563-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3569-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit()…

Record: SUSE-SU-2024:3569-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3587-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
CVE-2024-44999: gtp: pull network headers in…

Record: SUSE-SU-2024:3587-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3592-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176).
CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx()…

Record: SUSE-SU-2024:3592-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0455-1 No score

Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_103 fixes several issues.

The following security issues were fixed:

CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993).

Record: SUSE-SU-2025:0455-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0462-1 No score

Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues.

The following security issues were fixed:

CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993).

Record: SUSE-SU-2025:0462-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0486-1 No score

Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_133 fixes several issues.

The following security issues were fixed:

CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998).
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993).

Record: SUSE-SU-2025:0486-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0489-1 No score

Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues.

The following security issues were fixed:

CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993).

Record: SUSE-SU-2025:0489-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`Kernel` Linux	5.15.0 up to 5.15.26, 5.16.0 up to 5.16.12	5.15.265.16.12
`linux` Debian:12	before 5.16.12-1	5.16.12-1
`linux` Debian:13	before 5.16.12-1	5.16.12-1
`linux` Debian:14	before 5.16.12-1	5.16.12-1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1

Show 209 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-livepatch-SLE15-SP5-RT_Update_19` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 292 CVEs	before 1-150500.11.3.2	1-150500.11.3.2
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.1	5.14.21-150500.13.67.1
`kernel-rt` openSUSE:Leap Micro 5.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.1	5.14.21-150500.13.67.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2.150500.6.35.6	5.14.21-150500.55.80.2.150500.6.35.6
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2.150500.6.35.6	5.14.21-150500.55.80.2.150500.6.35.6
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.1	5.14.21-150500.55.80.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.1	5.14.21-150500.55.80.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-livepatch-SLE15-SP5_Update_19` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 296 CVEs	before 1-150500.11.3.2	1-150500.11.3.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default` openSUSE:Leap Micro 5.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default-base` openSUSE:Leap Micro 5.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2.150500.6.35.6	5.14.21-150500.55.80.2.150500.6.35.6
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.1	5.14.21-150500.55.80.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2.150500.6.35.6	5.14.21-150500.55.80.2.150500.6.35.6
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.1	5.14.21-150500.55.80.1
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.1	5.14.21-150500.55.80.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.1	5.14.21-150500.55.80.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1.150400.24.66.1	5.14.21-150400.24.136.1.150400.24.66.1
`kernel-default` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1.150400.24.66.1	5.14.21-150400.24.136.1.150400.24.66.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-livepatch-SLE15-SP4_Update_32` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 10 CVEs	before 1-150400.9.3.1	1-150400.9.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1.150400.24.66.1	5.14.21-150400.24.136.1.150400.24.66.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1.150400.24.66.1	5.14.21-150400.24.136.1.150400.24.66.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1.150400.24.66.1	5.14.21-150400.24.136.1.150400.24.66.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1.150400.24.66.1	5.14.21-150400.24.136.1.150400.24.66.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default` SUSE:Manager Proxy 4.3 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default-base` SUSE:Manager Proxy 4.3 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1.150400.24.66.1	5.14.21-150400.24.136.1.150400.24.66.1
`kernel-source` SUSE:Manager Proxy 4.3 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-syms` SUSE:Manager Proxy 4.3 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default` SUSE:Manager Server 4.3 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-default-base` SUSE:Manager Server 4.3 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1.150400.24.66.1	5.14.21-150400.24.136.1.150400.24.66.1
`kernel-source` SUSE:Manager Server 4.3 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-syms` SUSE:Manager Server 4.3 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-zfcpdump` SUSE:Manager Server 4.3 From an advisory covering 10 CVEs	before 5.14.21-150400.24.136.1	5.14.21-150400.24.136.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 9 CVEs	before 5.14.21-150400.15.97.1	5.14.21-150400.15.97.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 9 CVEs	before 5.14.21-150400.15.97.1	5.14.21-150400.15.97.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 9 CVEs	before 5.14.21-150400.15.97.1	5.14.21-150400.15.97.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 9 CVEs	before 5.14.21-150400.15.97.1	5.14.21-150400.15.97.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1.150500.6.37.1	5.14.21-150500.55.83.1.150500.6.37.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1.150500.6.37.1	5.14.21-150500.55.83.1.150500.6.37.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-livepatch-SLE15-SP5_Update_20` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 130 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default` openSUSE:Leap Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1	5.14.21-150500.55.83.1
`kernel-default-base` openSUSE:Leap Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.55.83.1.150500.6.37.1	5.14.21-150500.55.83.1.150500.6.37.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 132 CVEs	before 5.14.21-150500.33.69.1	5.14.21-150500.33.69.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-livepatch-SLE15-SP5-RT_Update_21` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 130 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-rt` openSUSE:Leap Micro 5.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 130 CVEs	before 5.14.21-150500.13.73.1	5.14.21-150500.13.73.1
`kernel-livepatch-SLE15-SP4_Update_22` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 4 CVEs	before 15-150400.2.1	15-150400.2.1
`kernel-livepatch-SLE15-SP4_Update_27` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 4 CVEs	before 9-150400.2.1	9-150400.2.1
`kernel-livepatch-SLE15-SP5_Update_9` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 4 CVEs	before 16-150500.2.1	16-150500.2.1
`kernel-livepatch-SLE15-SP4_Update_31` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 3 CVEs	before 3-150400.2.1	3-150400.2.1
`kernel-livepatch-SLE15-SP4_Update_28` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 4 CVEs	before 6-150400.2.1	6-150400.2.1
`kernel-livepatch-SLE15-SP5_Update_10` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 4 CVEs	before 14-150500.2.1	14-150500.2.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1008.11~20.04.1, plus listed versions 5.15.0-1003.5~20.04.1	5.15.0-1008.11~20.04.1
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known
`linux-oem-6.1` Ubuntu:22.04:LTS	All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less 6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36	None known
`linux-oem-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 14 moreShow less 6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28	None known
`linux-oracle-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 8 moreShow less 6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1	None known
`linux-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1032.35	None known
`linux-riscv` Ubuntu:22.04:LTS	All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less 5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32	None known
`linux-riscv-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1	None known
`linux-riscv-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1 Show 5 moreShow less 6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-starfive-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1	None known
`linux-starfive-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1	None known
`linux-starfive-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1 Show 6 moreShow less 6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1	None known
`linux-raspi-realtime` Ubuntu:24.04:LTS	All versions, plus listed versions 6.8.0-2019.20	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-48923 is a high vulnerability (CVSS 7.8) in Linux, published August 22, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 13th percentile. Fixed in Kernel 5.15.26.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 29 versions, 774 references and the rest of 6 source descriptions. The JSON record has them.