Every CVESearch/Get API key

CVE-2022-50031

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix HW conn...

No scoreFix availableRejected

CVE-2022-50031 has been rejected by its source and should not be treated as a live vulnerability, published June 18, 2025. Fixed in linux 5.10.262-1.aikido.113.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
5.10.262-1.aikido.113linux +84 more

Description

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Affected packages

Affected packages
PackageAffectedFixed
linux
Root:Debian:11
before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Ubuntu:22.04
before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-source
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-livepatch-SLE15-SP5_Update_28
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 258 CVEs
before 1-150500.11.3.1
1-150500.11.3.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
Show 75 moreShow less
Affected packages
PackageAffectedFixed
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 260 CVEs
before 5.14.21-150500.13.100.2
5.14.21-150500.13.100.2
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 260 CVEs
before 5.14.21-150500.13.100.1
5.14.21-150500.13.100.1
kernel-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 221 CVEs
before 5.14.21-150400.15.124.1
5.14.21-150400.15.124.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 221 CVEs
before 5.14.21-150400.15.124.1
5.14.21-150400.15.124.1
kernel-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 221 CVEs
before 5.14.21-150400.15.124.1
5.14.21-150400.15.124.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 221 CVEs
before 5.14.21-150400.15.124.1
5.14.21-150400.15.124.1
kernel-default
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-default
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-default
SUSE:Manager Proxy 4.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Manager Proxy 4.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-source
SUSE:Manager Proxy 4.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-syms
SUSE:Manager Proxy 4.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-default
SUSE:Manager Server 4.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Manager Server 4.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-source
SUSE:Manager Server 4.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-syms
SUSE:Manager Server 4.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-zfcpdump
SUSE:Manager Server 4.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2

What each source reports

CVE ListNo score

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record
CVE-2022-50031
Updated
2026-11-02
EUVDEUVD-2022-55214No score

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record
EUVD-2022-55214
Updated
2026-11-02
GitHub AdvisoriesGHSA-9xr7-h93h-xh9rNo score

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix HW conn...

In the Linux kernel, the following vulnerability has been resolved:

scsi: iscsi: Fix HW conn removal use after free

If qla4xxx doesn't remove the connection before the session, the iSCSI class tries to remove the connection for it. We were doing a iscsi_put_conn() in the iter function which is not needed and will result in a use after free because iscsi_remove_conn() will free the connection.

Record
GHSA-9xr7-h93h-xh9r
Updated
2026-11-02
NVDNo score

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record
CVE-2022-50031
Updated
2026-11-02
OSVNo score

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record
CVE-2022-50031
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2022-50031No score

CVE-2022-50031 in linux - Patched by Root

Root has patched CVE-2022-50031 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2022-50031
Updated
2026-11-02
Show 7 moreShow less
OSVROOT-OS-UBUNTU-2204-CVE-2022-50031No score

CVE-2022-50031 in linux - Patched by Root

Root has patched CVE-2022-50031 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2022-50031
Updated
2026-11-06
OSVSUSE-SU-2025:02264-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • bs-upload-kernel: Pass limit_packages also on multibuild Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build') Fixes: 747f601d4156 ('bs-upload-kernel, MyBS, Buildresults: Support multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184)')
  • hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).
  • kernel-source: Do not use multiple -r in sed parameters
  • kernel-source: Remove log.sh from sources
  • mkspec: Exclude rt flavor from kernel-syms dependencies (bsc#1244337).
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431).
  • mm/hugetlb: unshare…
Record
SUSE-SU-2025:02264-1
Updated
2026-11-02
OSVSUSE-SU-2025:02321-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-28956: x86/its: Add support for ITS-safe indirect thunk (bsc#1242006).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
  • Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
  • Use gcc-13 for build on SLE16 (jsc#PED-10028).
  • add…
Record
SUSE-SU-2025:02321-1
Updated
2026-11-02
OSVSUSE-SU-2025:02322-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
  • Test the correct macro to detect RT kernel build Fixes: 470cd1a41502 ('kernel-binary: Support livepatch_rt with merged RT branch')
  • Use gcc-13 for build on SLE16 (jsc#PED-10028).
  • add nf_tables for iptables non-legacy network…
Record
SUSE-SU-2025:02322-1
Updated
2026-11-02
OSVSUSE-SU-2025:02537-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
  • Use gcc-13 for build on SLE16 (jsc#PED-10028).
  • add nf_tables for iptables non-legacy network handling This is needed for example by docker on the Alpine Linux distribution, but can also be used on openSUSE.
  • bs-upload-kernel: Pass…
Record
SUSE-SU-2025:02537-1
Updated
2026-11-02
OSVSUSE-SU-2025:2264-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • bs-upload-kernel: Pass limit_packages also on multibuild Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build') Fixes: 747f601d4156 ('bs-upload-kernel, MyBS, Buildresults: Support multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184)')
  • hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).
  • kernel-source: Do not use multiple -r in sed parameters
  • kernel-source: Remove log.sh from sources
  • mkspec: Exclude rt flavor from kernel-syms dependencies (bsc#1244337).
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431).
  • mm/hugetlb: unshare…
Record
SUSE-SU-2025:2264-1
Updated
2026-11-02
OSVUBUNTU-CVE-2022-50031No score

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: Fix HW conn removal use after free If qla4xxx doesn't remove the connection before the session, the iSCSI class tries to remove the connection for it. We were doing a iscsi_put_conn() in the iter function which is not needed and will result in a use after free because iscsi_remove_conn() will free the connection.

Record
UBUNTU-CVE-2022-50031
Updated
2026-11-02

History

History
RecordedChangedSources
affectedOSV
affected, facts
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 378 references and the rest of 5 source descriptions. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open