CVE-2023-52478

HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

8.8 HighFix available

What does this mean?

: 8.8v3.1, from CVE List
: 0.25%16th percentile
Fixed in: 6.1.62-r0linux-lts
Published: February 29, 2024
Modified: November 6, 2026
Weakness: CWE-367
Also known as: ALSA-2024:7000ALSA-2024:7001BELL-CVE-2023-52478CLSA-2024-1727690025CLSA-2024-1727690947CLSA-2024-1727815919CLSA-2025-1738852812CLSA-2025-1738853271
Show 24 moreShow less
CLSA-2025-1738957378CLSA-2025-1738958068CLSA-2026-1783362244DEBIAN-CVE-2023-52478EUVD-2023-57103GHSA-f7hm-xqp4-h2q8RHSA-2024:2394RHSA-2024:7000RHSA-2024:7001RLSA-2024:7000RLSA-2024:7001SUSE-SU-2024:0855-1SUSE-SU-2024:0856-1SUSE-SU-2024:0857-1SUSE-SU-2024:0858-1SUSE-SU-2024:0900-1SUSE-SU-2024:0900-2SUSE-SU-2024:0910-1SUSE-SU-2024:0925-1SUSE-SU-2024:0926-1SUSE-SU-2024:0975-1SUSE-SU-2024:0976-1SUSE-SU-2024:0977-1UBUNTU-CVE-2023-52478

In the Linux kernel, the following vulnerability has been resolved:

HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

hidpp_connect_event() has four time-of-check vs time-of-use (TOCTOU) races when it races with itself.

hidpp_connect_event() primarily runs from a workqueue but it also runs on probe() and if a "device-connected" packet is received by the hw when the thread running hidpp_connect_event() from probe() is waiting on the hw, then a second thread running hidpp_connect_event() will be started from the workqueue.

This opens the following races (note the below code is simplified):

Retrieving + printing the protocol (harmless race):

if (!hidpp->protocol_major) { hidpp_root_get_protocol_version() hidpp->protocol_major = response.rap.params[0]; }

We can actually see this race hit in the dmesg in the abrt output attached to rhbz#2227968:

[ 3064.624215] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected. [ 3064.658184] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected.

Testing with extra logging added has shown that after this the 2 threads take turn grabbing the hw access mutex (send_mutex) so they ping-pong through all the other TOCTOU cases managing to hit all of them:

Updating the name to the HIDPP name (harmless race):

if (hidpp->name == hdev->name) { ... hidpp->name = new_name; }
Initializing the power_supply class for the battery (problematic!):

hidpp_initialize_battery() { if (hidpp->battery.ps) return 0;

probe_battery(); /* Blocks, threads take turns executing this */

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

}

Creating delayed input_device (potentially problematic):

if (hidpp->delayed_input) return;

hidpp->delayed_input = hidpp_allocate_input(hdev);

The really big problem here is 3. Hitting the race leads to the following sequence:

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

...

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

So now we have registered 2 power supplies for the same battery, which looks a bit weird from userspace's pov but this is not even the really big problem.

Notice how:

This is all devm-maganaged
The hidpp->battery.desc struct is shared between the 2 power supplies
hidpp->battery.desc.properties points to the result from the second devm_kmemdup()

This causes a use after free scenario on USB disconnect of the receiver:

The last registered power supply class device gets unregistered
The memory from the last devm_kmemdup() call gets freed, hidpp->battery.desc.properties now points to freed memory
The first registered power supply class device gets unregistered, this involves sending a remove uevent to userspace which invokes power_supply_uevent() to fill the uevent data
power_supply_uevent() uses hidpp->battery.desc.properties which now points to freed memory leading to backtraces like this one:

Sep 22 20:01:35 eric kernel: BUG: unable to handle page fault for address: ffffb2140e017f08 ... Sep 22 20:01:35 eric kernel: Workqueue: usb_hub_wq hub_event Sep 22 20:01:35 eric kernel: RIP: 0010:power_supply_uevent+0xee/0x1d0 ... Sep 22 20:01:35 eric kernel: ? asm_exc_page_fault+0x26/0x30 Sep 22 20:01:35 eric kernel: ? power_supply_uevent+0xee/0x1d0 Sep 22 20:01:35 eric kernel: ? power_supply_uevent+0x10d/0x1d0 Sep 22 20:01:35 eric kernel: dev_uevent+0x10f/0x2d0 Sep 22 20:01:35 eric kernel: kobject_uevent_env+0x291/0x680 Sep 22 20:01:35 eric kernel:
---truncated---

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.25%Up 0.2 points since Feb 29, 2024

What each source reports

CVE List Score used 8.8

HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

In the Linux kernel, the following vulnerability has been resolved:

HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

hidpp_connect_event() has four time-of-check vs time-of-use (TOCTOU) races when it races with itself.

This opens the following races (note the below code is simplified):

Retrieving + printing the protocol (harmless race):

if (!hidpp->protocol_major) { hidpp_root_get_protocol_version() hidpp->protocol_major = response.rap.params[0]; }

We can actually see this race hit in the dmesg in the abrt output attached to rhbz#2227968:

[ 3064.624215] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected. [ 3064.658184] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected.

Updating the name to the HIDPP name (harmless race):

if (hidpp->name == hdev->name) { ... hidpp->name = new_name; }
Initializing the power_supply class for the battery (problematic!):

hidpp_initialize_battery() { if (hidpp->battery.ps) return 0;

probe_battery(); /* Blocks, threads take turns executing this */

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

}

Creating delayed input_device (potentially problematic):

if (hidpp->delayed_input) return;

hidpp->delayed_input = hidpp_allocate_input(hdev);

The really big problem here is 3. Hitting the race leads to the following sequence:

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

...

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

So now we have registered 2 power supplies for the same battery, which looks a bit weird from userspace's pov but this is not even the really big problem.

Notice how:

This is all devm-maganaged
The hidpp->battery.desc struct is shared between the 2 power supplies
hidpp->battery.desc.properties points to the result from the second devm_kmemdup()

This causes a use after free scenario on USB disconnect of the receiver:

The last registered power supply class device gets unregistered
The memory from the last devm_kmemdup() call gets freed, hidpp->battery.desc.properties now points to freed memory
The first registered power supply class device gets unregistered, this involves sending a remove uevent to userspace which invokes power_supply_uevent() to fill the uevent data
power_supply_uevent() uses hidpp->battery.desc.properties which now points to freed memory leading to backtraces like this one:

Record: CVE-2023-52478
CVSS 3.1: 8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2023-57103 8.8

In the Linux kernel, the following vulnerability has been resolved:

HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

hidpp_connect_event() has four time-of-check vs time-of-use (TOCTOU) races when it races with itself.

This opens the following races (note the below code is simplified):

Retrieving + printing the protocol (harmless race):

if (!hidpp->protocol_major) { hidpp_root_get_protocol_version() hidpp->protocol_major = response.rap.params[0]; }

We can actually see this race hit in the dmesg in the abrt output attached to rhbz#2227968:

[ 3064.624215] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected. [ 3064.658184] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected.

Updating the name to the HIDPP name (harmless race):

if (hidpp->name == hdev->name) { ... hidpp->name = new_name; }
Initializing the power_supply class for the battery (problematic!):

hidpp_initialize_battery() { if (hidpp->battery.ps) return 0;

probe_battery(); /* Blocks, threads take turns executing this */

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

}

Creating delayed input_device (potentially problematic):

if (hidpp->delayed_input) return;

hidpp->delayed_input = hidpp_allocate_input(hdev);

The really big problem here is 3. Hitting the race leads to the following sequence:

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

...

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

So now we have registered 2 power supplies for the same battery, which looks a bit weird from userspace's pov but this is not even the really big problem.

Notice how:

This is all devm-maganaged
The hidpp->battery.desc struct is shared between the 2 power supplies
hidpp->battery.desc.properties points to the result from the second devm_kmemdup()

This causes a use after free scenario on USB disconnect of the receiver:

The last registered power supply class device gets unregistered
The memory from the last devm_kmemdup() call gets freed, hidpp->battery.desc.properties now points to freed memory
The first registered power supply class device gets unregistered, this involves sending a remove uevent to userspace which invokes power_supply_uevent() to fill the uevent data
power_supply_uevent() uses hidpp->battery.desc.properties which now points to freed memory leading to backtraces like this one:

Record: EUVD-2023-57103
CVSS 3.1: 8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-f7hm-xqp4-h2q8 4.7

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix...

In the Linux kernel, the following vulnerability has been resolved:

HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

hidpp_connect_event() has four time-of-check vs time-of-use (TOCTOU) races when it races with itself.

This opens the following races (note the below code is simplified):

Retrieving + printing the protocol (harmless race):

if (!hidpp->protocol_major) { hidpp_root_get_protocol_version() hidpp->protocol_major = response.rap.params[0]; }

We can actually see this race hit in the dmesg in the abrt output attached to rhbz#2227968:

[ 3064.624215] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected. [ 3064.658184] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected.

Updating the name to the HIDPP name (harmless race):

if (hidpp->name == hdev->name) { ... hidpp->name = new_name; }
Initializing the power_supply class for the battery (problematic!):

hidpp_initialize_battery() { if (hidpp->battery.ps) return 0;

probe_battery(); /* Blocks, threads take turns executing this */

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

}

Creating delayed input_device (potentially problematic):

if (hidpp->delayed_input) return;

hidpp->delayed_input = hidpp_allocate_input(hdev);

The really big problem here is 3. Hitting the race leads to the following sequence:

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

...

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

So now we have registered 2 power supplies for the same battery, which looks a bit weird from userspace's pov but this is not even the really big problem.

Notice how:

This is all devm-maganaged
The hidpp->battery.desc struct is shared between the 2 power supplies
hidpp->battery.desc.properties points to the result from the second devm_kmemdup()

This causes a use after free scenario on USB disconnect of the receiver:

The last registered power supply class device gets unregistered
The memory from the last devm_kmemdup() call gets freed, hidpp->battery.desc.properties now points to freed memory
The first registered power supply class device gets unregistered, this involves sending a remove uevent to userspace which invokes power_supply_uevent() to fill the uevent data
power_supply_uevent() uses hidpp->battery.desc.properties which now points to freed memory leading to backtraces like this one:

Record: GHSA-f7hm-xqp4-h2q8
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-367
Updated: 2026-11-02

NVD 8.8

In the Linux kernel, the following vulnerability has been resolved:

HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

hidpp_connect_event() has four time-of-check vs time-of-use (TOCTOU) races when it races with itself.

This opens the following races (note the below code is simplified):

Retrieving + printing the protocol (harmless race):

if (!hidpp->protocol_major) { hidpp_root_get_protocol_version() hidpp->protocol_major = response.rap.params[0]; }

We can actually see this race hit in the dmesg in the abrt output attached to rhbz#2227968:

[ 3064.624215] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected. [ 3064.658184] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected.

Updating the name to the HIDPP name (harmless race):

if (hidpp->name == hdev->name) { ... hidpp->name = new_name; }
Initializing the power_supply class for the battery (problematic!):

hidpp_initialize_battery() { if (hidpp->battery.ps) return 0;

probe_battery(); /* Blocks, threads take turns executing this */

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

}

Creating delayed input_device (potentially problematic):

if (hidpp->delayed_input) return;

hidpp->delayed_input = hidpp_allocate_input(hdev);

The really big problem here is 3. Hitting the race leads to the following sequence:

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

...

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

So now we have registered 2 power supplies for the same battery, which looks a bit weird from userspace's pov but this is not even the really big problem.

Notice how:

This is all devm-maganaged
The hidpp->battery.desc struct is shared between the 2 power supplies
hidpp->battery.desc.properties points to the result from the second devm_kmemdup()

This causes a use after free scenario on USB disconnect of the receiver:

The last registered power supply class device gets unregistered
The memory from the last devm_kmemdup() call gets freed, hidpp->battery.desc.properties now points to freed memory
The first registered power supply class device gets unregistered, this involves sending a remove uevent to userspace which invokes power_supply_uevent() to fill the uevent data
power_supply_uevent() uses hidpp->battery.desc.properties which now points to freed memory leading to backtraces like this one:

Record: CVE-2023-52478
CVSS 3.1: 8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-367
Updated: 2026-11-02

OSVBELL-CVE-2023-52478 4.7

Record: BELL-CVE-2023-52478
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 8.8

HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

In the Linux kernel, the following vulnerability has been resolved:

HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect

hidpp_connect_event() has four time-of-check vs time-of-use (TOCTOU) races when it races with itself.

This opens the following races (note the below code is simplified):

Retrieving + printing the protocol (harmless race):

if (!hidpp->protocol_major) { hidpp_root_get_protocol_version() hidpp->protocol_major = response.rap.params[0]; }

We can actually see this race hit in the dmesg in the abrt output attached to rhbz#2227968:

[ 3064.624215] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected. [ 3064.658184] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected.

Updating the name to the HIDPP name (harmless race):

if (hidpp->name == hdev->name) { ... hidpp->name = new_name; }
Initializing the power_supply class for the battery (problematic!):

hidpp_initialize_battery() { if (hidpp->battery.ps) return 0;

probe_battery(); /* Blocks, threads take turns executing this */

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

}

Creating delayed input_device (potentially problematic):

if (hidpp->delayed_input) return;

hidpp->delayed_input = hidpp_allocate_input(hdev);

The really big problem here is 3. Hitting the race leads to the following sequence:

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

...

hidpp->battery.desc.properties =
	devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL);

hidpp->battery.ps =
	devm_power_supply_register(&hidpp->hid_dev->dev,
				   &hidpp->battery.desc, cfg);

So now we have registered 2 power supplies for the same battery, which looks a bit weird from userspace's pov but this is not even the really big problem.

Notice how:

This is all devm-maganaged
The hidpp->battery.desc struct is shared between the 2 power supplies
hidpp->battery.desc.properties points to the result from the second devm_kmemdup()

This causes a use after free scenario on USB disconnect of the receiver:

The last registered power supply class device gets unregistered
The memory from the last devm_kmemdup() call gets freed, hidpp->battery.desc.properties now points to freed memory
The first registered power supply class device gets unregistered, this involves sending a remove uevent to userspace which invokes power_supply_uevent() to fill the uevent data
power_supply_uevent() uses hidpp->battery.desc.properties which now points to freed memory leading to backtraces like this one:

Record: CVE-2023-52478
CVSS 3.1: 8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 29 moreShow less

OSVDEBIAN-CVE-2023-52478 4.7

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidpp_connect_event() has four time-of-check vs time-of-use (TOCTOU) races when it races with itself. hidpp_connect_event() primarily runs from a workqueue but it also runs on probe() and if a "device-connected" packet is received by the hw when the thread running hidpp_connect_event() from probe() is waiting on the hw, then a second thread running hidpp_connect_event() will be started from the workqueue. This opens the following races (note the below code is simplified): 1. Retrieving + printing the protocol (harmless race): if (!hidpp->protocol_major) { hidpp_root_get_protocol_version() hidpp->protocol_major = response.rap.params[0]; } We can actually see this race hit in the dmesg in the abrt output attached to rhbz#2227968: [ 3064.624215] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected. [ 3064.658184] logitech-hidpp-device 0003:046D:4071.0049: HID++ 4.5 device connected. Testing with extra logging added has shown that after this the 2 threads take turn grabbing the hw access mutex (send_mutex) so they ping-pong through all the other TOCTOU cases managing to hit all of them: 2. Updating the name to the HIDPP name (harmless race): if (hidpp->name == hdev->name) { ... hidpp->name = new_name; } 3. Initializing the power_supply class for the battery (problematic!): hidpp_initialize_battery() { if (hidpp->battery.ps) return 0; probe_battery(); /* Blocks, threads take turns executing this */ hidpp->battery.desc.properties = devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL); hidpp->battery.ps = devm_power_supply_register(&hidpp->hid_dev->dev, &hidpp->battery.desc, cfg); } 4. Creating delayed input_device (potentially problematic): if (hidpp->delayed_input) return; hidpp->delayed_input = hidpp_allocate_input(hdev); The really big problem here is 3. Hitting the race leads to the following sequence: hidpp->battery.desc.properties = devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL); hidpp->battery.ps = devm_power_supply_register(&hidpp->hid_dev->dev, &hidpp->battery.desc, cfg); ... hidpp->battery.desc.properties = devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL); hidpp->battery.ps = devm_power_supply_register(&hidpp->hid_dev->dev, &hidpp->battery.desc, cfg); So now we have registered 2 power supplies for the same battery, which looks a bit weird from userspace's pov but this is not even the really big problem. Notice how: 1. This is all devm-maganaged 2. The hidpp->battery.desc struct is shared between the 2 power supplies 3. hidpp->battery.desc.properties points to the result from the second devm_kmemdup() This causes a use after free scenario on USB disconnect of the receiver: 1. The last registered power supply class device gets unregistered 2. The memory from the last devm_kmemdup() call gets freed, hidpp->battery.desc.properties now points to freed memory 3. The first registered power supply class device gets unregistered, this involves sending a remove uevent to userspace which invokes power_supply_uevent() to fill the uevent data 4. power_supply_uevent() uses hidpp->battery.desc.properties which now points to freed memory leading to backtraces like this one: Sep 22 20:01:35 eric kernel: BUG: unable to handle page fault for address: ffffb2140e017f08 ... Sep 22 20:01:35 eric kernel: Workqueue: usb_hub_wq hub_event Sep 22 20:01:35 eric kernel: RIP: 0010:power_supply_uevent+0xee/0x1d0 ... Sep 22 20:01:35 eric kernel: ? asm_exc_page_fault+0x26/0x30 Sep 22 20:01:35 eric kernel: ? power_supply_uevent+0xee/0x1d0 Sep 22 20:01:35 eric kernel: ? power_supply_uevent+0x10d/0x1d0 Sep 22 20:01:35 eric kernel: dev_uevent+0x10f/0x2d0 Sep 22 20:01:35 eric kernel: kobject_uevent_env+0x291/0x680 Sep 22 20:01:35 eric kernel: ---truncated---

Record: DEBIAN-CVE-2023-52478
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2024:2394 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2024:2394
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:7000 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:7000
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:7001 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:7001
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2024:7000 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26638 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26846 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52798 CVE-2023-52809 CVE-2023-52817 CVE-2023-52840 CVE-2023-52800 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36922 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36919 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38579 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41023 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41064 CVE-2024-41065 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42094 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42225 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43830 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2024:7000
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-52478 5.4

Record: UBUNTU-CVE-2023-52478
CVSS 4.0: 5.4 MediumCVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVALSA-2024:7000 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

Record: ALSA-2024:7000
Updated: 2026-11-02

OSVALSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52817 CVE-2023-52840 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:7001
Updated: 2026-11-02

OSVCLSA-2024-1727690025 No score

kernel: Fix of 80 CVEs

sch/netem: fix use after free in netem_dequeue {CVE-2024-46800}
VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725}
drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724}
drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723}
drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}
scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673}
ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987}
exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882}
dev/parport: fix the array out-of-bounds risk {CVE-2024-42301}
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285}
tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284}
mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280}
nvme: avoid double free special payload {CVE-2024-41073}
wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071}
xfs: don't walk off the end of a directory data block {CVE-2024-41013}
tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665}
KVM: x86/mmu: make apf token non-zero to fix bug {CVE-2022-48943}
cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
netfilter: fix use-after-free in __nf_register_net_hook() {CVE-2022-48912}
rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() {CVE-2022-48742}
selinux: fix double free of cond_list on error paths {CVE-2022-48740}
ALSA: hda: Fix UAF of leds class devs at unbinding {CVE-2022-48735}
drm/nouveau: fix off by one in BIOS boundary checking {CVE-2022-48732}
mm, slub: fix potential memoryleak in kmem_cache_open() {CVE-2021-47466}
x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25744}
x86: Make IA32_EMULATION boot time configurable {CVE-2024-25744}
x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() {CVE-2024-25744}
x86/elf: Make loading of 32bit processes depend on ia32_enabled() {CVE-2024-25744}
x86/entry: Rename ignore_sysret() {CVE-2024-25744}
x86/cpu: Don't write CSTAR MSR on Intel CPUs {CVE-2024-25744}
x86: Introduce ia32_enabled() {CVE-2024-25744}
scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124}
ftruncate: pass a signed offset {CVE-2024-42084}
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035}
xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683}
ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605}
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
phylib: fix potential use-after-free {CVE-2022-48754}
serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527}
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
mlxsw: thermal: Fix out-of-bounds memory accesses {CVE-2021-47441}
hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs {CVE-2021-47393}
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386}
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385}
hwmon: (w83793) Fix NULL pointer…

Record: CLSA-2024-1727690025
Updated: 2026-11-02

OSVCLSA-2024-1727690947 No score

kernel: Fix of 80 CVEs

sch/netem: fix use after free in netem_dequeue {CVE-2024-46800}
VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725}
drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724}
drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723}
drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722}
scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673}
ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987}
exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882}
dev/parport: fix the array out-of-bounds risk {CVE-2024-42301}
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285}
tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284}
mISDN: Fix a use after free in hfcmulti_tx() {CVE-2024-42280}
nvme: avoid double free special payload {CVE-2024-41073}
wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071}
xfs: don't walk off the end of a directory data block {CVE-2024-41013}
tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665}
KVM: x86/mmu: make apf token non-zero to fix bug {CVE-2022-48943}
cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
netfilter: fix use-after-free in __nf_register_net_hook() {CVE-2022-48912}
rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() {CVE-2022-48742}
selinux: fix double free of cond_list on error paths {CVE-2022-48740}
ALSA: hda: Fix UAF of leds class devs at unbinding {CVE-2022-48735}
drm/nouveau: fix off by one in BIOS boundary checking {CVE-2022-48732}
mm, slub: fix potential memoryleak in kmem_cache_open() {CVE-2021-47466}
x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25744}
x86: Make IA32_EMULATION boot time configurable {CVE-2024-25744}
x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() {CVE-2024-25744}
x86/elf: Make loading of 32bit processes depend on ia32_enabled() {CVE-2024-25744}
x86/entry: Rename ignore_sysret() {CVE-2024-25744}
x86/cpu: Don't write CSTAR MSR on Intel CPUs {CVE-2024-25744}
x86: Introduce ia32_enabled() {CVE-2024-25744}
x86/asm/64: Change all ENTRY+END to SYM_CODE_* {CVE-2024-25744}
x86/head/64: Annotate start_cpu0() as non-callable {CVE-2024-25744}
x86/asm: Do not annotate functions with GLOBAL {CVE-2024-25744}
kprobes/x86/xen: blacklist non-attachable xen interrupt functions {CVE-2024-25744}
x86/asm/64: Add ENDs to some functions and relabel with SYM_CODE_* {CVE-2024-25744}
x86/asm: Use SYM_INNER_LABEL instead of GLOBAL {CVE-2024-25744}
x86/asm: Annotate aliases {CVE-2024-25744}
x86/asm/crypto: Annotate local functions {CVE-2024-25744}
scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124}
ftruncate: pass a signed offset {CVE-2024-42084}
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035}
xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683}
ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605}
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
phylib: fix potential use-after-free {CVE-2022-48754}
serial: core: fix transmit-buffer…

Record: CLSA-2024-1727690947
Updated: 2026-11-02

OSVCLSA-2024-1727815919 No score

kernel: Fix of 73 CVEs

firmware: cs_dsp: Return error if block header overflows file {CVE-2024-42238}
scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124}
ftruncate: pass a signed offset {CVE-2024-42084}
firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files {CVE-2024-41056}
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035}
xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005}
drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
scsi: mpi3mr: Avoid memcpy field-spanning write WARNING {CVE-2024-36920}
dmaengine: idxd: Fix oops during rmmod on single-CPU platforms {CVE-2024-35989}
udp: do not accept non-tunnel GSO skbs landing in a tunnel {CVE-2024-35884}
nvme-fc: do not wait in vain when unloading module {CVE-2024-26846}
drm/amdgpu: Fix the null pointer when load rlc firmware {CVE-2024-26649}
Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683}
ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605}
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
phylib: fix potential use-after-free {CVE-2022-48754}
serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527}
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
mlxsw: thermal: Fix out-of-bounds memory accesses {CVE-2021-47441}
hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs {CVE-2021-47393}
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386}
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385}
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47384}
virtio-net: Add validation for used length {CVE-2021-47352}
fbmem: Do not delete the mode that is still in use {CVE-2021-47338}
watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
ACPI: fix NULL pointer dereference {CVE-2021-47289}
driver core: auxiliary bus: Fix memory leak when driver_register() fail {CVE-2021-47287}
Input: elantech - fix stack out of bound access in elantech_change_report_id() {CVE-2021-47097}
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts {CVE-2022-48866}
ipv6: prevent possible NULL dereference in rt6_probe() {CVE-2024-40960}
xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() {CVE-2024-40959}
wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941}
wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912}
wifi: cfg80211: Lock wiphy in cfg80211_get_station {CVE-2024-40911}
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages {CVE-2024-40904}
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet {CVE-2024-39506}
vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
crypto: bcm - Fix pointer arithmetic {CVE-2024-38579}
scsi: qedf: Ensure the copied buf is NUL terminated {CVE-2024-38559}
net: openvswitch: fix overwriting ct original tuple for ICMPv6…

Record: CLSA-2024-1727815919
Updated: 2026-11-02

OSVCLSA-2025-1738852812 No score

Fix of 54 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26595
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
CVE-url: https://ubuntu.com/security/CVE-2024-38553/CVE-2024-38597
- netpoll: make ndo_poll_controller() optional
- bonding: use netpoll_poll_dev() helper
- netpoll: do not test NAPI_STATE_SCHED in poll_one_napi()
CVE-url: https://ubuntu.com/security/CVE-2024-38597
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
CVE-url: https://ubuntu.com/security/CVE-2024-38553
- net: fec: remove .ndo_poll_controller to avoid deadlocks
CVE-url: https://ubuntu.com/security/CVE-2024-42252
- closures: Change BUG_ON() to WARN_ON()
CVE-url: https://ubuntu.com/security/CVE-2024-41066
- ibmvnic: Add tx check to prevent skb leak
CVE-url: https://ubuntu.com/security/CVE-2024-40982
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
CVE-url: https://ubuntu.com/security/CVE-2024-26689
- ceph: prevent use-after-free in encode_cap_msg()
- fixup! ceph: prevent use-after-free in encode_cap_msg()
CVE-url: https://ubuntu.com/security/CVE-2024-56595
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
CVE-url: https://ubuntu.com/security/CVE-2024-57892
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
CVE-url: https://ubuntu.com/security/CVE-2024-57896
- btrfs: fix hang during unmount when stopping a space reclaim worker
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
CVE-url: https://ubuntu.com/security/CVE-2024-56598
- jfs: array-index-out-of-bounds fix in dtReadFirst
CVE-url: https://ubuntu.com/security/CVE-2024-56551
- drm/amdgpu: fix usage slab after free
CVE-url: https://ubuntu.com/security/CVE-2024-56596
- jfs: fix array-index-out-of-bounds in jfs_readdir
CVE-url: https://ubuntu.com/security/CVE-2024-56615
- bpf: fix OOB devmap writes when deleting elements
CVE-url: https://ubuntu.com/security/CVE-2024-57887
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
CVE-url: https://ubuntu.com/security/CVE-2024-50154
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
CVE-url: https://ubuntu.com/security/CVE-2024-56775
- drm/amd/display: Fix handling of plane refcount
CVE-url: https://ubuntu.com/security/CVE-2024-57900
- ila: serialize calls to nf_register_net_hooks()
CVE-url: https://ubuntu.com/security/CVE-2024-35887
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
CVE-url: https://ubuntu.com/security/CVE-2022-48739
- ASoC: hdmi-codec: Fix OOB memory accesses
CVE-url: https://ubuntu.com/security/CVE-2024-56704
- 9p/xen: fix release of IRQ
CVE-url: https://ubuntu.com/security/CVE-2024-56606
- af_packet: avoid erroring out after sock_init_data() in packet_create()
CVE-url: https://ubuntu.com/security/CVE-2024-53141
- netfilter: ipset: add missing range check in bitmap_ip_uadt
CVE-url: https://ubuntu.com/security/CVE-2023-52691
- drm/amd/pm: fix a double-free in si_dpm_init
CVE-url: https://ubuntu.com/security/CVE-2024-53165
- sh: intc: Fix use-after-free bug in register_intc_controller()
CVE-url: https://ubuntu.com/security/CVE-2023-52818
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
CVE-url: https://ubuntu.com/security/CVE-2024-56603
- net: af_can: do not leave a dangling sk pointer in can_create()
CVE-url: https://ubuntu.com/security/CVE-2024-53173
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
CVE-url: https://ubuntu.com/security/CVE-2024-56602
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
CVE-url: https://ubuntu.com/security/CVE-2024-26996 …

Record: CLSA-2025-1738852812
Updated: 2026-11-02

OSVCLSA-2025-1738853271 No score

Fix of 54 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26595
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
CVE-url: https://ubuntu.com/security/CVE-2024-38553/CVE-2024-38597
- netpoll: make ndo_poll_controller() optional
- bonding: use netpoll_poll_dev() helper
- netpoll: do not test NAPI_STATE_SCHED in poll_one_napi()
CVE-url: https://ubuntu.com/security/CVE-2024-38597
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
CVE-url: https://ubuntu.com/security/CVE-2024-38553
- net: fec: remove .ndo_poll_controller to avoid deadlocks
CVE-url: https://ubuntu.com/security/CVE-2024-42252
- closures: Change BUG_ON() to WARN_ON()
CVE-url: https://ubuntu.com/security/CVE-2024-41066
- ibmvnic: Add tx check to prevent skb leak
CVE-url: https://ubuntu.com/security/CVE-2024-40982
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
CVE-url: https://ubuntu.com/security/CVE-2024-26689
- ceph: prevent use-after-free in encode_cap_msg()
- fixup! ceph: prevent use-after-free in encode_cap_msg()
CVE-url: https://ubuntu.com/security/CVE-2024-56595
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
CVE-url: https://ubuntu.com/security/CVE-2024-57892
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
CVE-url: https://ubuntu.com/security/CVE-2024-57896
- btrfs: fix hang during unmount when stopping a space reclaim worker
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
CVE-url: https://ubuntu.com/security/CVE-2024-56598
- jfs: array-index-out-of-bounds fix in dtReadFirst
CVE-url: https://ubuntu.com/security/CVE-2024-56551
- drm/amdgpu: fix usage slab after free
CVE-url: https://ubuntu.com/security/CVE-2024-56596
- jfs: fix array-index-out-of-bounds in jfs_readdir
CVE-url: https://ubuntu.com/security/CVE-2024-56615
- bpf: fix OOB devmap writes when deleting elements
CVE-url: https://ubuntu.com/security/CVE-2024-57887
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
CVE-url: https://ubuntu.com/security/CVE-2024-50154
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
CVE-url: https://ubuntu.com/security/CVE-2024-56775
- drm/amd/display: Fix handling of plane refcount
CVE-url: https://ubuntu.com/security/CVE-2024-57900
- ila: serialize calls to nf_register_net_hooks()
CVE-url: https://ubuntu.com/security/CVE-2024-35887
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
CVE-url: https://ubuntu.com/security/CVE-2022-48739
- ASoC: hdmi-codec: Fix OOB memory accesses
CVE-url: https://ubuntu.com/security/CVE-2024-56704
- 9p/xen: fix release of IRQ
CVE-url: https://ubuntu.com/security/CVE-2024-56606
- af_packet: avoid erroring out after sock_init_data() in packet_create()
CVE-url: https://ubuntu.com/security/CVE-2024-53141
- netfilter: ipset: add missing range check in bitmap_ip_uadt
CVE-url: https://ubuntu.com/security/CVE-2023-52691
- drm/amd/pm: fix a double-free in si_dpm_init
CVE-url: https://ubuntu.com/security/CVE-2024-53165
- sh: intc: Fix use-after-free bug in register_intc_controller()
CVE-url: https://ubuntu.com/security/CVE-2023-52818
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
CVE-url: https://ubuntu.com/security/CVE-2024-56603
- net: af_can: do not leave a dangling sk pointer in can_create()
CVE-url: https://ubuntu.com/security/CVE-2024-53173
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
CVE-url: https://ubuntu.com/security/CVE-2024-56602
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
CVE-url: https://ubuntu.com/security/CVE-2024-26996 …

Record: CLSA-2025-1738853271
Updated: 2026-11-02

OSVCLSA-2025-1738957378 No score

Fix of 49 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-38553/CVE-2024-38597
- netpoll: make ndo_poll_controller() optional
- bonding: use netpoll_poll_dev() helper
- netpoll: do not test NAPI_STATE_SCHED in poll_one_napi()
CVE-url: https://ubuntu.com/security/CVE-2024-38597
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
CVE-url: https://ubuntu.com/security/CVE-2024-38553
- net: fec: remove .ndo_poll_controller to avoid deadlocks
CVE-url: https://ubuntu.com/security/CVE-2024-41066
- ibmvnic: Add tx check to prevent skb leak
CVE-url: https://ubuntu.com/security/CVE-2024-40982
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
CVE-url: https://ubuntu.com/security/CVE-2024-50154
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
CVE-url: https://ubuntu.com/security/CVE-2024-56595
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
CVE-url: https://ubuntu.com/security/CVE-2024-57896
- btrfs: fix hang during unmount when stopping a space reclaim worker
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
CVE-url: https://ubuntu.com/security/CVE-2024-56598
- jfs: array-index-out-of-bounds fix in dtReadFirst
CVE-url: https://ubuntu.com/security/CVE-2024-56596
- jfs: fix array-index-out-of-bounds in jfs_readdir
Bionic update: upstream stable patchset 2022-01-25 (LP: #1959033) // CVE- url: https://ubuntu.com/security/CVE-2021-47485
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
CVE-url: https://ubuntu.com/security/CVE-2024-56602
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
CVE-url: https://ubuntu.com/security/CVE-2024-56601
- net: inet: do not leave a dangling sk pointer in inet_create()
CVE-url: https://ubuntu.com/security/CVE-2024-56600
- sock: struct proto hash function may error
- net: inet6: do not leave a dangling sk pointer in inet6_create()
CVE-url: https://ubuntu.com/security/CVE-2023-52818
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
CVE-url: https://ubuntu.com/security/CVE-2024-35887
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) // CVE- url: https://ubuntu.com/security/CVE-2021-47404
- HID: betop: fix slab-out-of-bounds Write in betop_probe
Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47254
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan
Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47506
- nfsd: fix use-after-free due to delegation race
CVE-url: https://ubuntu.com/security/CVE-2024-56606
- af_packet: avoid erroring out after sock_init_data() in packet_create()
CVE-url: https://ubuntu.com/security/CVE-2024-53141
- netfilter: ipset: add missing range check in bitmap_ip_uadt
Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47280
- drm: Fix use-after-free read in drm_getunique()
Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47235
- net: ethernet: fix potential use-after-free in ec_bhf_remove
Bionic update: upstream stable patchset 2021-08-13 (LP: #1939913) // CVE- url: https://ubuntu.com/security/CVE-2021-47309
- net: validate lwtstate->data before returning from skb_tunnel_info()
Bionic update: upstream stable patchset 2022-01-06 (LP: #1956614) // CVE- url: https://ubuntu.com/security/CVE-2021-47549
- sata_fsl: fix UAF in…

Record: CLSA-2025-1738957378
Updated: 2026-11-02

OSVCLSA-2025-1738958068 No score

Fix of 49 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-38553/CVE-2024-38597
- netpoll: make ndo_poll_controller() optional
- bonding: use netpoll_poll_dev() helper
- netpoll: do not test NAPI_STATE_SCHED in poll_one_napi()
CVE-url: https://ubuntu.com/security/CVE-2024-38597
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
CVE-url: https://ubuntu.com/security/CVE-2024-38553
- net: fec: remove .ndo_poll_controller to avoid deadlocks
CVE-url: https://ubuntu.com/security/CVE-2024-41066
- ibmvnic: Add tx check to prevent skb leak
CVE-url: https://ubuntu.com/security/CVE-2024-40982
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
CVE-url: https://ubuntu.com/security/CVE-2024-50154
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
CVE-url: https://ubuntu.com/security/CVE-2024-56595
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
CVE-url: https://ubuntu.com/security/CVE-2024-57896
- btrfs: fix hang during unmount when stopping a space reclaim worker
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
CVE-url: https://ubuntu.com/security/CVE-2024-56598
- jfs: array-index-out-of-bounds fix in dtReadFirst
CVE-url: https://ubuntu.com/security/CVE-2024-56596
- jfs: fix array-index-out-of-bounds in jfs_readdir
Bionic update: upstream stable patchset 2022-01-25 (LP: #1959033) // CVE- url: https://ubuntu.com/security/CVE-2021-47485
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
CVE-url: https://ubuntu.com/security/CVE-2024-56602
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
CVE-url: https://ubuntu.com/security/CVE-2024-56601
- net: inet: do not leave a dangling sk pointer in inet_create()
CVE-url: https://ubuntu.com/security/CVE-2024-56600
- sock: struct proto hash function may error
- net: inet6: do not leave a dangling sk pointer in inet6_create()
CVE-url: https://ubuntu.com/security/CVE-2023-52818
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
CVE-url: https://ubuntu.com/security/CVE-2024-35887
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) // CVE- url: https://ubuntu.com/security/CVE-2021-47404
- HID: betop: fix slab-out-of-bounds Write in betop_probe
Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47254
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan
Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47506
- nfsd: fix use-after-free due to delegation race
CVE-url: https://ubuntu.com/security/CVE-2024-56606
- af_packet: avoid erroring out after sock_init_data() in packet_create()
CVE-url: https://ubuntu.com/security/CVE-2024-53141
- netfilter: ipset: add missing range check in bitmap_ip_uadt
Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47280
- drm: Fix use-after-free read in drm_getunique()
Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47235
- net: ethernet: fix potential use-after-free in ec_bhf_remove
Bionic update: upstream stable patchset 2021-08-13 (LP: #1939913) // CVE- url: https://ubuntu.com/security/CVE-2021-47309
- net: validate lwtstate->data before returning from skb_tunnel_info()
Bionic update: upstream stable patchset 2022-01-06 (LP: #1956614) // CVE- url: https://ubuntu.com/security/CVE-2021-47549
- sata_fsl: fix UAF in…

Record: CLSA-2025-1738958068
Updated: 2026-11-02

OSVCLSA-2026-1783362244 No score

kernel: Fix of 122 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113}
KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113}
Bluetooth: bcsp: receive data only if registered {CVE-2025-40308}
xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788}
xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts {CVE-2026-43429}
net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708}
net: usb: kaweth: validate USB endpoints {CVE-2026-23312}
net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
net: usb: pegasus: validate USB endpoints {CVE-2026-23290}
net: usb: pegasus: enable basic endpoint checking {CVE-2026-43156}
USB: usbcore: Introduce usb_bulk_msg_killable() {CVE-2026-43429}
USB: core: Add routines for endpoint checks in old drivers {CVE-2026-43156}
nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399}
tpm: Cap the number of PCR banks {CVE-2025-71077}
clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() {CVE-2023-53704}
dm: fix a race condition in retrieve_deps {CVE-2023-54324}
ice: fix Tx scheduler error handling in XDP callback {CVE-2025-38127}
mlx5: fix skb leak while fifo resync and push {CVE-2023-54238}
mmc: vub300: fix return value check of mmc_add_host() {CVE-2022-50251}
bonding: annotate data-races around slave->last_rx {CVE-2026-23212}
RDMA/irdma: Fix data race on CQP completion stats {CVE-2023-54302}
bpf: cpumap: Fix memory leak in cpu_map_update_elem {CVE-2023-53441}
fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215}
trace/fgraph: Fix the warning caused by missing unregister notifier {CVE-2025-39829}
vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects {CVE-2025-39850}
team: prevent adding a device which is already a team device lower {CVE-2024-58071}
net: stmmac: move the EST lock to struct stmmac_priv {CVE-2024-38594}
drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too {CVE-2024-50108}
rxrpc: Fix handling of received connection abort {CVE-2024-58053}
bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911}
scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690}
net: atlantic: Fix DMA mapping for PTP hwts ring {CVE-2024-26680}
wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() {CVE-2024-47713}
drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) {CVE-2024-49905}
dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134}
smb: client: validate the whole DACL before rewriting it in cifsacl {CVE-2026-31709}
PM: runtime: Fix a race condition related to device removal {CVE-2026-23452}
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436}
nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448}
sctp: add mutual exclusion in proc_sctp_do_udp_port() {CVE-2025-22062}
cachefiles: fix dentry leak in cachefiles_open_file() {CVE-2024-49870}
mm: revert "mm: shmem: fix data-race in shmem_getattr()" {CVE-2024-53136}
memcg: fix soft lockup in the OOM process {CVE-2024-57977}
resource: fix region_intersects() vs add_memory_driver_managed() {CVE-2024-49878}
r8169: add tally counter fields added with RTL8125 {CVE-2024-49973}
svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() {CVE-2024-53215}
ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths {CVE-2026-43066}
wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() {CVE-2025-71273}
net: netlink: af_netlink: Prevent empty skb by adding a check on len. {CVE-2021-47606}
extcon: Modify extcon device to be created after driver data is set {CVE-2022-49308}
tick/nohz: unexport __init-annotated tick_nohz_full_setup() {CVE-2022-49675}
bridge:…

Record: CLSA-2026-1783362244
Updated: 2026-11-02

OSVRLSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

Record: RLSA-2024:7001
Updated: 2026-11-02

OSVSUSE-SU-2024:0855-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-6270: Fixed a use-after-free bug in aoecmd_cfg_pkts (bsc#1218562).
CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
CVE-2023-52462: Fixed a security check for attempt to corrupt spilled pointer (bsc#1220325).
CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).
CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach (bsc#1220254).
CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
CVE-2023-52457: Fixed skipped resource freeing if pm_runtime_resume_and_get() failed (bsc#1220350).
CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
CVE-2024-26598: Fixed potential UAF in LPI translation cache (bsc#1220326).
CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
CVE-2024-26586: Fixed stack corruption (bsc#1220243).
CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253).
CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).

The following non-security bugs were fixed:

ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events (git-fixes).
ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A (git-fixes).
ACPI: extlog: fix NULL pointer dereference check (git-fixes).
ACPI: resource: Add ASUS model S5402ZA to quirks (git-fixes).
ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA (git-fixes).
ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA (git-fixes).
ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3 (git-fixes).
ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2 (git-fixes).
ACPI: video: Add backlight=native DMI quirk for…

Record: SUSE-SU-2024:0855-1
Updated: 2026-11-02

OSVSUSE-SU-2024:0856-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
CVE-2021-47005: Fixed a NULL pointer dereference for ->get_features() (bsc#1220660).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
CVE-2021-47012: Fixed a use after free in siw_alloc_mr (bsc#1220627).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
CVE-2021-46989: Fixed a bug by preventing corruption in shrinking truncate in hfsplus (bsc#1220737).
CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343).
CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).…

Record: SUSE-SU-2024:0856-1
Updated: 2026-11-02

OSVSUSE-SU-2024:0857-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343).
CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
CVE-2024-26586: Fixed stack corruption (bsc#1220243).
CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253).
CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689).
CVE-2023-51042: Fixed use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (bsc#1219128).
CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
CVE-2023-52482: Fixex a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
CVE-2021-47083: Fixed a…

Record: SUSE-SU-2024:0857-1
Updated: 2026-11-02

OSVSUSE-SU-2024:0858-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
CVE-2023-52457: Fixed skipped resource freeing if pm_runtime_resume_and_get() failed (bsc#1220350).
CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).
CVE-2024-25744: Fixed Security issue with int 80 interrupt vector (bsc#1217927).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2024-26586: Fixed stack corruption (bsc#1220243).
CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach (bsc#1220254).
CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
CVE-2024-26598: Fixed potential UAF in LPI translation cache (bsc#1220326).
CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).

The following non-security bugs were fixed:

acpi: apei: set memory failure flags as mf_action_required on synchronous events (git-fixes).
acpi: button: add lid disable dmi quirk for nextbook ares 8a (git-fixes).
acpi: extlog: fix null pointer dereference check (git-fixes).
acpi: resource: add asus model s5402za to quirks (git-fixes).
acpi: resource: skip irq override on asus expertbook b1502cba (git-fixes).
acpi: resource: skip irq override on asus expertbook b2402cba (git-fixes).
acpi: video: add backlight=native dmi quirk for apple imac11,3 (git-fixes).
acpi: video: add…

Record: SUSE-SU-2024:0858-1
Updated: 2026-11-02

OSVSUSE-SU-2024:0900-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).
CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach (bsc#1220254).
CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
CVE-2023-52484: Fixed a soft lockup triggered by arm_smmu_mm_invalidate_range (bsc#1220797).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
CVE-2023-52457: Fixed skipped resource freeing if pm_runtime_resume_and_get() failed (bsc#1220350).
CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2024-26598: Fixed potential UAF in LPI translation cache (bsc#1220326).
CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
CVE-2024-26586: Fixed stack corruption (bsc#1220243).
CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253).
CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).

The following non-security bugs were fixed:

bpf: Fix verification of indirect var-off stack access (git-fixes).
bpf: Guard stack limits against 32bit overflow (git-fixes).
KVM: VMX: Move VERW closer to VMentry for MDS mitigation (git-fixes).
KVM: VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (git-fixes).
NFS: avoid infinite loop in pnfs_update_layout (bsc#1219633).
nvme: move nvme_stop_keep_alive() back to original position (bsc#1211515).
nvme: remove nvme_alloc_request and nvme_alloc_request_qid (bsc#1214064).
nvme: start keep-alive after…

Record: SUSE-SU-2024:0900-1
Updated: 2026-11-02

OSVSUSE-SU-2024:0900-2 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).
CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach (bsc#1220254).
CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
CVE-2023-52484: Fixed a soft lockup triggered by arm_smmu_mm_invalidate_range (bsc#1220797).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
CVE-2023-52457: Fixed skipped resource freeing if pm_runtime_resume_and_get() failed (bsc#1220350).
CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2024-26598: Fixed potential UAF in LPI translation cache (bsc#1220326).
CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
CVE-2024-26586: Fixed stack corruption (bsc#1220243).
CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253).
CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).

The following non-security bugs were fixed:

bpf: Fix verification of indirect var-off stack access (git-fixes).
bpf: Guard stack limits against 32bit overflow (git-fixes).
KVM: VMX: Move VERW closer to VMentry for MDS mitigation (git-fixes).
KVM: VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (git-fixes).
NFS: avoid infinite loop in pnfs_update_layout (bsc#1219633).
nvme: move nvme_stop_keep_alive() back to original position (bsc#1211515).
nvme: remove nvme_alloc_request and nvme_alloc_request_qid (bsc#1214064).
nvme: start keep-alive after…

Record: SUSE-SU-2024:0900-2
Updated: 2026-11-02

OSVSUSE-SU-2024:0910-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
CVE-2023-52457: Fixed skipped resource freeing if pm_runtime_resume_and_get() failed (bsc#1220350).
CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).
CVE-2024-25744: Fixed Security issue with int 80 interrupt vector (bsc#1217927).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2024-26586: Fixed stack corruption (bsc#1220243).
CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach (bsc#1220254).
CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
CVE-2024-26598: Fixed potential UAF in LPI translation cache (bsc#1220326).
CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).

The following non-security bugs were fixed:

acpi: apei: set memory failure flags as mf_action_required on synchronous events (git-fixes).
acpi: button: add lid disable dmi quirk for nextbook ares 8a (git-fixes).
acpi: extlog: fix null pointer dereference check (git-fixes).
acpi: resource: add asus model s5402za to quirks (git-fixes).
acpi: resource: skip irq override on asus expertbook b1502cba (git-fixes).
acpi: resource: skip irq override on asus expertbook b2402cba (git-fixes).
acpi: video: add backlight=native dmi quirk for apple imac11,3 (git-fixes).
acpi: video: add…

Record: SUSE-SU-2024:0910-1
Updated: 2026-11-02

OSVSUSE-SU-2024:0925-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2021-47077: Fixed a NULL pointer dereference when in shost_data (bsc#1220861).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work (bsc#1212514).
CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get and nfc_llcp_sock_get_sn (bsc#1220831).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval (bsc#1218915).
CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control (bsc#1220825).
CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2021-46953: Fixed a corruption in interrupt mappings on watchdow probe failure (bsc#1220599).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
CVE-2021-47054: Fixed a bug to put child node before return (bsc#1220767).
CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
CVE-2021-46906: Fixed an info leak in hid_submit_ctrl (bsc#1220421).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2020-36777: Fixed a memory leak in dvb_media_device_free (bsc#1220526).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge (CVE-2023-46343).
CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
CVE-2024-26600: Fixed NULL pointer dereference for SRP in phy-omap-usb2 (bsc#1220340).

The following non-security bugs were fixed:

ASN.1: Fix check for strdup() success (git-fixes).
audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
Bluetooth: hci_bcsp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
Bluetooth: hci_h5: do…

Record: SUSE-SU-2024:0925-1
Updated: 2026-11-02

OSVSUSE-SU-2024:0926-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
CVE-2023-52569: Fixed a bug in btrfs by remoning BUG() after failure to insert delayed dir index item (bsc#1220918).
CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
CVE-2021-47005: Fixed a NULL pointer dereference for ->get_features() (bsc#1220660).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
CVE-2021-47012: Fixed a use after free in siw_alloc_mr (bsc#1220627).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
CVE-2021-46989: Fixed a bug by preventing corruption in shrinking truncate in hfsplus (bsc#1220737).
CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343).
CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
CVE-2024-26586: Fixed stack corruption (bsc#1220243).
CVE-2024-26595:…

Record: SUSE-SU-2024:0926-1
Updated: 2026-11-02

OSVSUSE-SU-2024:0975-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26600: Fixed NULL pointer dereference for SRP (bsc#1220340).
CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2021-47077: Fixed a NULL pointer dereference when in shost_data (bsc#1220861).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
CVE-2021-33200: Fixed a leakage of uninitialized bpf stack under speculation. (bsc#1186484)
CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).
CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2021-46953: Fixed a corruption in interrupt mappings on watchdow probe failure (bsc#1220599).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
CVE-2021-47054: Fixed a bug to put child node before return (bsc#1220767).
CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
CVE-2021-46906: Fixed an info leak in hid_submit_ctrl (bsc#1220421).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2020-36777: Fixed a memory leak in dvb_media_device_free (bsc#1220526).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343).
CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).

The following non-security bugs were fixed:

ASN.1: Fix check for strdup() success (git-fixes).
audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
Bluetooth:…

Record: SUSE-SU-2024:0975-1
Updated: 2026-11-02

OSVSUSE-SU-2024:0976-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise SLE12SP5 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
CVE-2020-36777: Fixed a memory leak in dvb_media_device_free() (bsc#1220526).
CVE-2020-36784: Fixed reference leak when pm_runtime_get_sync fails (bsc#1220570).
CVE-2021-46906: Fixed an info leak in hid_submit_ctrl (bsc#1220421).
CVE-2021-46915: Fixed a bug to avoid possible divide error in nft_limit_init (bsc#1220436).
CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
CVE-2021-46953: Fixed a corruption in interrupt mappings on watchdow probe failure (bsc#1220599).
CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
CVE-2021-47054: Fixed a bug to put child node before return (bsc#1220767).
CVE-2021-47076: Fixed a bug by returning CQE error if invalid lkey was supplied (bsc#1220860)
CVE-2021-47077: Fixed a NULL pointer dereference when in shost_data (bsc#1220861).
CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863)
CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-46343: Fixed a NULL pointer dereference in send_acknowledge() (CVE-2023-46343).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220831).
CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
CVE-2023-52532: Fixed a bug in TX CQE error handling (bsc#1220932).
CVE-2023-52574: Fixed a bug by hiding new member header_ops (bsc#1220870).
CVE-2023-52597: Fixed a setting of fpc register in KVM (bsc#1221040).
CVE-2023-52605: Fixed a NULL pointer dereference check (bsc#1221039)
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
CVE-2024-26600: Fixed NULL pointer dereference for SRP in phy-omap-usb2 (bsc#1220340).
CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).

The following non-security bugs were fixed:

[media] coda:…

Record: SUSE-SU-2024:0976-1
Updated: 2026-11-02

OSVSUSE-SU-2024:0977-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25162: Fixed a potential use after free (bsc#1220409).
CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)
CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)
CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).
CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump (bsc#1220253).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
CVE-2023-52457: Fixed skipped resource freeing if pm_runtime_resume_and_get() failed (bsc#1220350).
CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).
CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)
CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)
CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).
CVE-2023-52484: Fixed a soft lockup triggered by arm_smmu_mm_invalidate_range (bsc#1220797).
CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).
CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).
CVE-2024-0607: Fixed 64-bit load issue in nft_byteorder_eval() (bsc#1218915).
CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).
CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).
CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
CVE-2024-26586: Fixed stack corruption (bsc#1220243).
CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).
CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach (bsc#1220254).
CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
CVE-2024-26598: Fixed potential UAF in LPI translation cache (bsc#1220326).
CVE-2024-26602: Fixed overall slowdowns with…

Record: SUSE-SU-2024:0977-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-rt` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-kvm` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`linux-lts` Alpaquita:23	6.1.56-r0 up to 6.1.62-r0	6.1.62-r0
`linux-lts` Alpaquita:stream	6.1.112-r0 up to 6.6.58-r0	6.6.58-r0
`bpftool` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-core` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-cross-headers` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug-core` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug-devel` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug-modules` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug-modules-extra` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-debug-modules-internal` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-devel` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-headers` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-ipaclones-internal` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-modules` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-modules-extra` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-modules-internal` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-selftests-internal` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-tools` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-tools-libs` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`kernel-tools-libs-devel` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`perf` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`python3-perf` TuxCare:CentOS:8.5 From an advisory covering 80 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els20	4.18.0-348.7.1.el8_5.tuxcare.els20
`bpftool` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-core` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-cross-headers` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug-core` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug-devel` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug-modules` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug-modules-extra` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-debug-modules-internal` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-devel` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-headers` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-ipaclones-internal` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-modules` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-modules-extra` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-modules-internal` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-selftests-internal` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-tools` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-tools-libs` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`kernel-tools-libs-devel` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`perf` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`python3-perf` TuxCare:CentOS:8.4 From an advisory covering 80 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els20	4.18.0-305.25.1.el8_4.tuxcare.els20
`bpftool` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-core` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-cross-headers` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-core` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-devel` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-modules` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-devel` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-headers` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-ipaclones-internal` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-modules` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`Kernel` Linux	3.19.0 up to 4.14.328, 4.15.0 up to 4.19.297, 4.20.0 up to 5.4.259, 5.5.0 up to 5.10.199, 5.11.0 up to 5.15.136, 5.16.0 up to 6.1.59, 6.2.0 up to 6.5.8	4.14.3284.19.2975.4.2595.10.1995.15.1366.1.596.5.8
`linux` Debian:12	before 6.1.64-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 6 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+1	6.1.64-1
`linux` Debian:13	before 6.5.8-1	6.5.8-1
`linux` Debian:14	before 6.5.8-1	6.5.8-1
`bpftool-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:7.3.0-427.13.1.el9_4	0:7.3.0-427.13.1.el9_4
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`bpftool` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:7.3.0-427.13.1.el9_4	0:7.3.0-427.13.1.el9_4
`bpftool-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:7.3.0-427.13.1.el9_4	0:7.3.0-427.13.1.el9_4
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel` Rocky Linux:8 From an advisory covering 147 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 50 CVEs	before 5.14.21-150500.33.37.1	5.14.21-150500.33.37.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 50 CVEs	before 5.14.21-150500.33.37.1	5.14.21-150500.33.37.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 50 CVEs	before 5.14.21-150500.33.37.1	5.14.21-150500.33.37.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 50 CVEs	before 5.14.21-150500.33.37.1	5.14.21-150500.33.37.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 50 CVEs	before 5.14.21-150500.33.37.1	5.14.21-150500.33.37.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 50 CVEs	before 5.14.21-150500.33.37.1	5.14.21-150500.33.37.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 67 CVEs	before 5.3.18-150300.161.1	5.3.18-150300.161.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 67 CVEs	before 5.3.18-150300.161.1	5.3.18-150300.161.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 67 CVEs	before 5.3.18-150300.161.1	5.3.18-150300.161.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 67 CVEs	before 5.3.18-150300.161.1	5.3.18-150300.161.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-livepatch-SLE15-SP3_Update_42` SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 67 CVEs	before 1-150300.7.3.2	1-150300.7.3.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP3 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2.150300.18.90.2	5.3.18-150300.59.153.2.150300.18.90.2
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-preempt` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.1	5.3.18-150300.59.153.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-default` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2.150300.18.90.2	5.3.18-150300.59.153.2.150300.18.90.2
`kernel-docs` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-preempt` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-source` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-syms` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.1	5.3.18-150300.59.153.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2.150300.18.90.2	5.3.18-150300.59.153.2.150300.18.90.2
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-preempt` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.1	5.3.18-150300.59.153.1
`kernel-default` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-default-base` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2.150300.18.90.2	5.3.18-150300.59.153.2.150300.18.90.2
`kernel-default` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-default-base` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2.150300.18.90.2	5.3.18-150300.59.153.2.150300.18.90.2
`kernel-64kb` SUSE:Enterprise Storage 7.1 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-default` SUSE:Enterprise Storage 7.1 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-default-base` SUSE:Enterprise Storage 7.1 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2.150300.18.90.2	5.3.18-150300.59.153.2.150300.18.90.2
`kernel-docs` SUSE:Enterprise Storage 7.1 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-obs-build` SUSE:Enterprise Storage 7.1 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-preempt` SUSE:Enterprise Storage 7.1 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-source` SUSE:Enterprise Storage 7.1 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.2	5.3.18-150300.59.153.2
`kernel-syms` SUSE:Enterprise Storage 7.1 From an advisory covering 67 CVEs	before 5.3.18-150300.59.153.1	5.3.18-150300.59.153.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1.150500.6.23.1	5.14.21-150500.55.52.1.150500.6.23.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1.150500.6.23.1	5.14.21-150500.55.52.1.150500.6.23.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1.150500.6.23.1	5.14.21-150500.55.52.1.150500.6.23.1
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.55.52.1	5.14.21-150500.55.52.1
`kernel-default` openSUSE:Leap Micro 5.3 From an advisory covering 49 CVEs	before 5.14.21-150400.24.111.2	5.14.21-150400.24.111.2
`kernel-default-base` openSUSE:Leap Micro 5.3 From an advisory covering 49 CVEs	before 5.14.21-150400.24.111.2.150400.24.52.1	5.14.21-150400.24.111.2.150400.24.52.1
`kernel-default` openSUSE:Leap Micro 5.4 From an advisory covering 49 CVEs	before 5.14.21-150400.24.111.2	5.14.21-150400.24.111.2
`kernel-default-base` openSUSE:Leap Micro 5.4 From an advisory covering 49 CVEs	before 5.14.21-150400.24.111.2.150400.24.52.1	5.14.21-150400.24.111.2.150400.24.52.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.13.38.1	5.14.21-150500.13.38.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.13.38.1	5.14.21-150500.13.38.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.13.38.1	5.14.21-150500.13.38.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 39 CVEs	before 5.14.21-150500.13.38.1	5.14.21-150500.13.38.1
`kernel-rt` openSUSE:Leap Micro 5.3 From an advisory covering 49 CVEs	before 5.14.21-150400.15.71.1	5.14.21-150400.15.71.1
`kernel-rt` openSUSE:Leap Micro 5.4 From an advisory covering 49 CVEs	before 5.14.21-150400.15.71.1	5.14.21-150400.15.71.1
`linux-aws` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	None known
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	None known
`linux` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	None known
`linux-aws` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-kvm` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	None known
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1118.128~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1118.128~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1123.130~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1123.130~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1122.131~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1122.131~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-171.189~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-171.189~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1065.70~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 36 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.1	5.4.0-1065.70~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1117.126~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1117.126~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1102.114~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1102.114~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-171.189, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-171.189
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1118.128, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1118.128
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1053.58~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 26 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.1	5.15.0-1053.58~20.04.1
`linux-azure` Ubuntu:20.04:LTS	before 5.4.0-1123.130, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	5.4.0-1123.130
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1056.64~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 28 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.1	5.15.0-1056.64~20.04.1
`linux-bluefield` Ubuntu:20.04:LTS	before 5.4.0-1078.84, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 37 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.83	5.4.0-1078.84
`linux-gcp` Ubuntu:20.04:LTS	before 5.4.0-1122.131, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	5.4.0-1122.131

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-52478 is a high vulnerability (CVSS 8.8) in Linux, published February 29, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in linux-lts 6.1.62-r0.