Every CVE Search/ Get API key

CVE-2023-52659

x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type

On 64-bit platforms, the pfn_to_kaddr() macro requires that the input value is 64 bits in order to ensure that valid address bits don't get lost when shifting that input by PAGE_SHIFT to calculate the physical address to provide a virtual address for.

One such example is in pvalidate_pages() (used by SEV-SNP guests), where the GFN in the struct used for page-state change requests is a 40-bit bit-field, so attempts to pass this GFN field directly into pfn_to_kaddr() ends up causing guest crashes when dealing with addresses above the 1TB range due to the above.

Fix this issue with SEV-SNP guests, as well as any similar cases that might cause issues in current/future code, by using an inline function, instead of a macro, so that the input is implicitly cast to the expected 64-bit input type prior to performing the shift operation.

While it might be argued that the issue is on the caller side, other archs/macros have taken similar approaches to deal with instances like this, such as ARM explicitly casting the input to phys_addr_t:

e48866647b48 ("ARM: 8396/1: use phys_addr_t in pfn_to_kaddr()")

A C inline function is even better though.

[ mingo: Refined the changelog some more & added __always_inline. ]

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.22%Up 0.2 points since May 18, 2024
90%50%10%1%

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type

On 64-bit platforms, the pfn_to_kaddr() macro requires that the input value is 64 bits in order to ensure that valid address bits don't get lost when shifting that input by PAGE_SHIFT to calculate the physical address to provide a virtual address for.

One such example is in pvalidate_pages() (used by SEV-SNP guests), where the GFN in the struct used for page-state change requests is a 40-bit bit-field, so attempts to pass this GFN field directly into pfn_to_kaddr() ends up causing guest crashes when dealing with addresses above the 1TB range due to the above.

Fix this issue with SEV-SNP guests, as well as any similar cases that might cause issues in current/future code, by using an inline function, instead of a macro, so that the input is implicitly cast to the expected 64-bit input type prior to performing the shift operation.

While it might be argued that the issue is on the caller side, other archs/macros have taken similar approaches to deal with instances like this, such as ARM explicitly casting the input to phys_addr_t:

e48866647b48 ("ARM: 8396/1: use phys_addr_t in pfn_to_kaddr()")

A C inline function is even better though.

[ mingo: Refined the changelog some more & added __always_inline. ]

Record
CVE-2023-52659
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
CVE List No score

x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type

On 64-bit platforms, the pfn_to_kaddr() macro requires that the input value is 64 bits in order to ensure that valid address bits don't get lost when shifting that input by PAGE_SHIFT to calculate the physical address to provide a virtual address for.

One such example is in pvalidate_pages() (used by SEV-SNP guests), where the GFN in the struct used for page-state change requests is a 40-bit bit-field, so attempts to pass this GFN field directly into pfn_to_kaddr() ends up causing guest crashes when dealing with addresses above the 1TB range due to the above.

Fix this issue with SEV-SNP guests, as well as any similar cases that might cause issues in current/future code, by using an inline function, instead of a macro, so that the input is implicitly cast to the expected 64-bit input type prior to performing the shift operation.

While it might be argued that the issue is on the caller side, other archs/macros have taken similar approaches to deal with instances like this, such as ARM explicitly casting the input to phys_addr_t:

e48866647b48 ("ARM: 8396/1: use phys_addr_t in pfn_to_kaddr()")

A C inline function is even better though.

[ mingo: Refined the changelog some more & added __always_inline. ]

Record
CVE-2023-52659
Updated
2026-11-02
EUVDEUVD-2023-57283 No score

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type

On 64-bit platforms, the pfn_to_kaddr() macro requires that the input value is 64 bits in order to ensure that valid address bits don't get lost when shifting that input by PAGE_SHIFT to calculate the physical address to provide a virtual address for.

One such example is in pvalidate_pages() (used by SEV-SNP guests), where the GFN in the struct used for page-state change requests is a 40-bit bit-field, so attempts to pass this GFN field directly into pfn_to_kaddr() ends up causing guest crashes when dealing with addresses above the 1TB range due to the above.

Fix this issue with SEV-SNP guests, as well as any similar cases that might cause issues in current/future code, by using an inline function, instead of a macro, so that the input is implicitly cast to the expected 64-bit input type prior to performing the shift operation.

While it might be argued that the issue is on the caller side, other archs/macros have taken similar approaches to deal with instances like this, such as ARM explicitly casting the input to phys_addr_t:

e48866647b48 ("ARM: 8396/1: use phys_addr_t in pfn_to_kaddr()")

A C inline function is even better though.

[ mingo: Refined the changelog some more & added __always_inline. ]

Record
EUVD-2023-57283
Updated
2026-11-02
GitHub AdvisoriesGHSA-jpp4-rwwf-g5qm 5.5

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Ensure input to...

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type

On 64-bit platforms, the pfn_to_kaddr() macro requires that the input value is 64 bits in order to ensure that valid address bits don't get lost when shifting that input by PAGE_SHIFT to calculate the physical address to provide a virtual address for.

One such example is in pvalidate_pages() (used by SEV-SNP guests), where the GFN in the struct used for page-state change requests is a 40-bit bit-field, so attempts to pass this GFN field directly into pfn_to_kaddr() ends up causing guest crashes when dealing with addresses above the 1TB range due to the above.

Fix this issue with SEV-SNP guests, as well as any similar cases that might cause issues in current/future code, by using an inline function, instead of a macro, so that the input is implicitly cast to the expected 64-bit input type prior to performing the shift operation.

While it might be argued that the issue is on the caller side, other archs/macros have taken similar approaches to deal with instances like this, such as ARM explicitly casting the input to phys_addr_t:

e48866647b48 ("ARM: 8396/1: use phys_addr_t in pfn_to_kaddr()")

A C inline function is even better though.

[ mingo: Refined the changelog some more & added __always_inline. ]

Record
GHSA-jpp4-rwwf-g5qm
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2023-52659 5.5
Record
BELL-CVE-2023-52659
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-52659 5.5

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type On 64-bit platforms, the pfn_to_kaddr() macro requires that the input value is 64 bits in order to ensure that valid address bits don't get lost when shifting that input by PAGE_SHIFT to calculate the physical address to provide a virtual address for. One such example is in pvalidate_pages() (used by SEV-SNP guests), where the GFN in the struct used for page-state change requests is a 40-bit bit-field, so attempts to pass this GFN field directly into pfn_to_kaddr() ends up causing guest crashes when dealing with addresses above the 1TB range due to the above. Fix this issue with SEV-SNP guests, as well as any similar cases that might cause issues in current/future code, by using an inline function, instead of a macro, so that the input is implicitly cast to the expected 64-bit input type prior to performing the shift operation. While it might be argued that the issue is on the caller side, other archs/macros have taken similar approaches to deal with instances like this, such as ARM explicitly casting the input to phys_addr_t: e48866647b48 ("ARM: 8396/1: use phys_addr_t in pfn_to_kaddr()") A C inline function is even better though. [ mingo: Refined the changelog some more & added __always_inline. ]

Record
DEBIAN-CVE-2023-52659
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 17 moreShow less
OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:9315
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-52659 5.5

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type On 64-bit platforms, the pfn_to_kaddr() macro requires that the input value is 64 bits in order to ensure that valid address bits don't get lost when shifting that input by PAGE_SHIFT to calculate the physical address to provide a virtual address for. One such example is in pvalidate_pages() (used by SEV-SNP guests), where the GFN in the struct used for page-state change requests is a 40-bit bit-field, so attempts to pass this GFN field directly into pfn_to_kaddr() ends up causing guest crashes when dealing with addresses above the 1TB range due to the above. Fix this issue with SEV-SNP guests, as well as any similar cases that might cause issues in current/future code, by using an inline function, instead of a macro, so that the input is implicitly cast to the expected 64-bit input type prior to performing the shift operation. While it might be argued that the issue is on the caller side, other archs/macros have taken similar approaches to deal with instances like this, such as ARM explicitly casting the input to phys_addr_t: e48866647b48 ("ARM: 8396/1: use phys_addr_t in pfn_to_kaddr()") A C inline function is even better though. [ mingo: Refined the changelog some more & added __always_inline. ]

Record
UBUNTU-CVE-2023-52659
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1783355084 No score

kernel: Fix of 60 CVEs

  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • unshare: fix unshare_fs() handling {CVE-2026-43472}
  • net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() {CVE-2026-31423}
  • net/sched: cls_flow: fix NULL pointer dereference on shared blocks {CVE-2026-31422}
  • net/sched: cls_fw: fix NULL pointer dereference on shared blocks {CVE-2026-31421}
  • dm: fix queue start/stop imbalance under suspend/load/resume races {CVE-2025-40134}
  • ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
  • ext4: fix i_data_sem unlock order in ext4_ind_migrate() {CVE-2024-50006}
  • xen: Fix the issue of resource not being properly released in xenbus_dev_probe() {CVE-2024-53198}
  • HID: pidff: Fix null pointer dereference in pidff_find_fields {CVE-2025-37862}
  • crypto: af_alg - Set merge to zero early in af_alg_sendmsg {CVE-2025-39931}
  • x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper {CVE-2025-39681}
  • can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061}
  • bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change {CVE-2023-53103}
  • NFS: Fix a potential data corruption {CVE-2023-53711}
  • NFS: Fix a use after free in nfs_direct_join_group() {CVE-2023-53711}
  • hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386}
  • scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload {CVE-2024-36919}
  • x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type {CVE-2023-52659}
  • Input: uinput - reject requests with unreasonable number of slots {CVE-2024-46745}
  • afs: Fix the maximum cell name length {CVE-2025-21646}
  • drm/i915: Avoid potential vm use-after-free {CVE-2023-52931}
  • interconnect: fix mem leak when freeing nodes {CVE-2023-53096}
  • drm/vkms: Fix memory leak in vkms_init() {CVE-2022-50269}
  • USB: dwc3: fix memory leak with using debugfs_lookup() {CVE-2023-53415}
  • mm/uffd: fix pte marker when fork() without fork event {CVE-2022-49744}
  • scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() {CVE-2023-53696}
  • ipmi_si: fix a memleak in try_smi_init() {CVE-2023-53611}
  • KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() {CVE-2024-58083}
  • scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() {CVE-2024-36924}
  • firmware: cs_dsp: Validate payload length before processing block {CVE-2024-42237}
  • hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385}
  • ftrace: Avoid potential division by zero in function_stat_show() {CVE-2025-21898}
  • IB/core: Implement a limit on UMAD receive List {CVE-2024-42145}
  • vfio/pci: Disable auto-enable of exclusive INTx IRQ {CVE-2024-27437}
  • netfilter: nf_tables: reject duplicate device on updates {CVE-2025-38678}
  • PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type {CVE-2025-23161}
  • net: nexthop: Initialize all fields in dumped nexthops {CVE-2024-42283}
  • tracing: Make sure trace_printk() can output as soon as it can be used {CVE-2023-53007}
  • net: tls: explicitly disallow disconnect {CVE-2025-37756}
  • KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel {CVE-2025-21779}
  • ext4: turn quotas off if mount failed after enabling quotas {CVE-2023-54153}
  • NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622}
  • block: fix overflow in blk_ioctl_discard() {CVE-2024-36917}
  • usb: xhci: Check endpoint is valid before dereferencing it {CVE-2023-52901}
  • iio: core: fix memleak in iio_device_register_sysfs {CVE-2023-52643}
  • platform/x86/amd/pmc: Detect when STB is not available {CVE-2024-53072}
  • mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() {CVE-2023-52939}
  • dm thin: make get_first_thin use rcu-safe list first function {CVE-2025-21664}
  • bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock {CVE-2025-21951}
  • bonding: provide a net pointer to…
Record
CLSA-2026-1783355084
Updated
2026-11-02
OSV No score

x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type

On 64-bit platforms, the pfn_to_kaddr() macro requires that the input value is 64 bits in order to ensure that valid address bits don't get lost when shifting that input by PAGE_SHIFT to calculate the physical address to provide a virtual address for.

One such example is in pvalidate_pages() (used by SEV-SNP guests), where the GFN in the struct used for page-state change requests is a 40-bit bit-field, so attempts to pass this GFN field directly into pfn_to_kaddr() ends up causing guest crashes when dealing with addresses above the 1TB range due to the above.

Fix this issue with SEV-SNP guests, as well as any similar cases that might cause issues in current/future code, by using an inline function, instead of a macro, so that the input is implicitly cast to the expected 64-bit input type prior to performing the shift operation.

While it might be argued that the issue is on the caller side, other archs/macros have taken similar approaches to deal with instances like this, such as ARM explicitly casting the input to phys_addr_t:

e48866647b48 ("ARM: 8396/1: use phys_addr_t in pfn_to_kaddr()")

A C inline function is even better though.

[ mingo: Refined the changelog some more & added __always_inline. ]

Record
CVE-2023-52659
Updated
2026-11-02
OSVSUSE-SU-2024:2008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
  • CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
  • CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
  • CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
  • CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
  • CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
  • CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
  • CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
  • CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
  • CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
  • CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
  • CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
  • CVE-2024-27417: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721)
  • CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
  • CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
  • CVE-2024-35791: Flush pages under…
Record
SUSE-SU-2024:2008-1
Updated
2026-11-02
OSVSUSE-SU-2024:2019-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
  • CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
  • CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
  • CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-35869: Guarantee refcounted children from parent session (bsc#1224679).
  • CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2024-35964: Fixed not validating setsockopt user input (bsc#1224581).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
  • CVE-2024-35860: struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
  • CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
  • CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
  • CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
  • CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios (bsc#1224530).
  • CVE-2024-35852: Fixed memory leak when canceling rehash work (bsc#1224502).
  • CVE-2024-36006: Fixed incorrect list API usage (bsc#1224541).
  • CVE-2024-36007: Fixed warning during rehash (bsc#1224543).
  • CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
  • CVE-2024-35907: Call request_irq() after NAPI initialized (bsc#1224492).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure…
Record
SUSE-SU-2024:2019-1
Updated
2026-11-02
OSVSUSE-SU-2024:2135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
  • CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
  • CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
  • CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
  • CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
  • CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
  • CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
  • CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
  • CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
  • CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
  • CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
  • CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
  • CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
  • CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
  • CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
  • CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
  • CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
  • CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
  • CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
  • CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
  • CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
  • CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
  • CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2023-6270: Fixed a use-after-free issue in…
Record
SUSE-SU-2024:2135-1
Updated
2026-11-02
OSVSUSE-SU-2024:2190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
  • CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
  • CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26700: Fixed drm/amd/display: Fix MST Null Ptr for RV (bsc#1222870)
  • CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
  • CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
  • CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
  • CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)
  • CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)
  • CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)
  • CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
  • CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
  • CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).
  • CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
  • CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
  • CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
  • CVE-2024-27042: Fixed potential out-of-bounds access in…
Record
SUSE-SU-2024:2190-1
Updated
2026-11-02
OSVSUSE-SU-2024:2203-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
  • CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
  • CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
  • CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
  • CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
  • CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
  • CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
  • CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
  • CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-26632: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635).
  • CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
  • CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
  • CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
  • CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
  • CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
  • CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
  • CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26704: Fixed a…
Record
SUSE-SU-2024:2203-1
Updated
2026-11-02
OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
  • CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
  • CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
  • CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
  • CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
  • CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
  • CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
  • CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
  • CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
  • CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
  • CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
  • CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
  • CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
  • CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
  • CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
  • CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
  • CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
  • CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
  • CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
  • CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…
Record
SUSE-SU-2024:2973-1
Updated
2026-11-02
OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
  • CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
  • CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
  • CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
  • CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
  • CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
  • CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
  • CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
  • CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
  • CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
  • CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
  • CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
  • CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
  • CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
  • CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
  • CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
  • CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
  • CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
  • CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
  • CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
  • CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
  • CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
  • CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
  • CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
  • CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
  • CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
  • CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
  • CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
  • CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
  • CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
  • CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
  • CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
  • CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
  • CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
  • CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
  • CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
  • CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
  • CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
  • CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
  • CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
  • CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
  • CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
  • CVE-2024-35890:…
Record
SUSE-SU-2025:20008-1
Updated
2026-11-02
OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
  • CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
  • CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
  • CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
  • CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
  • CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
  • CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
  • CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
  • CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
  • CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
  • CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
  • CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
  • CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
  • CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
  • CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
  • CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
  • CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
  • CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
  • CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
  • CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
  • CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
  • CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
  • CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
  • CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
  • CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
  • CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
  • CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
  • CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
  • CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
  • CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
  • CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
  • CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
  • CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
  • CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
  • CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
  • CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
  • CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
  • CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
  • CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
  • CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
  • CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
  • CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…
Record
SUSE-SU-2025:20028-1
Updated
2026-11-02
OSVUSN-6816-1 No score

linux, linux-ibm, linux-lowlatency, linux-raspi vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • DPLL subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Powercap sysfs driver;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • VFIO drivers;
  • Backlight driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • debug file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • Network file system client;
  • NILFS2 file system;
  • Overlay file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Packet sockets;
  • Network…
Record
USN-6816-1
Updated
2026-11-02
OSVUSN-6817-1 No score

linux-aws, linux-gcp vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • DPLL subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Powercap sysfs driver;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • VFIO drivers;
  • Backlight driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • debug file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • Network file system client;
  • NILFS2 file system;
  • Overlay file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Packet sockets;
  • Network traffic control;
  • Sun RPC protocol;
  • ALSA SH drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…
Record
USN-6817-1
Updated
2026-11-02
OSVUSN-6817-2 No score

linux-oem-6.8 vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • DPLL subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Powercap sysfs driver;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • VFIO drivers;
  • Backlight driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • debug file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • Network file system client;
  • NILFS2 file system;
  • Overlay file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Packet sockets;
  • Network traffic control;
  • Sun RPC protocol;
  • ALSA SH drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…
Record
USN-6817-2
Updated
2026-11-02
OSVUSN-6817-3 No score

linux-azure, linux-gke vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • DPLL subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Powercap sysfs driver;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • VFIO drivers;
  • Backlight driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • debug file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • Network file system client;
  • NILFS2 file system;
  • Overlay file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Packet sockets;
  • Network traffic control;
  • Sun RPC protocol;
  • ALSA SH drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…
Record
USN-6817-3
Updated
2026-11-02
OSVUSN-6878-1 No score

linux-oracle vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • DPLL subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Powercap sysfs driver;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • VFIO drivers;
  • Backlight driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • debug file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • Network file system client;
  • NILFS2 file system;
  • Overlay file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • PCI iomap interfaces;
  • Memory management;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Packet sockets;
  • Network traffic control;
  • Sun RPC protocol;
  • ALSA SH drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-27032, CVE-2024-26868, CVE-2024-26879, CVE-2024-27033, CVE-2024-26943, CVE-2024-27040, CVE-2024-26950, CVE-2023-52650,…
Record
USN-6878-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els6
7.0.0-284.1101.el9_2.tuxcare.11.els6
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els6
2:1.0.0-2.el9_2.tuxcare.11.els6
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els6
2:1.0.0-2.el9_2.tuxcare.11.els6
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.11.els6
2:1.0.0-2.el9_2.tuxcare.11.els6
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 61 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els6
5.14.0-284.1101.el9_2.tuxcare.11.els6
Kernel
Linux
 6.5.0 up to 6.6.23, 6.7.0 up to 6.7.11, 6.8.0 up to 6.8.2
6.6.236.7.116.8.2
linux
Debian:13
 before 6.7.12-1
6.7.12-1
linux
Debian:14
 before 6.7.12-1
6.7.12-1
bpftool-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:7.4.0-503.11.1.el9_5
0:7.4.0-503.11.1.el9_5
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
bpftool
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:7.4.0-503.11.1.el9_5
0:7.4.0-503.11.1.el9_5
bpftool-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:7.4.0-503.11.1.el9_5
0:7.4.0-503.11.1.el9_5
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-tools
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-tools-libs
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-uki-virt-addons
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-livepatch-SLE15-SP5-RT_Update_16
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 561 CVEs
 before 1-150500.11.3.1
1-150500.11.3.1
kernel-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt_debug
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-syms-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1.150500.6.31.1
5.14.21-150500.55.68.1.150500.6.31.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1.150500.6.31.1
5.14.21-150500.55.68.1.150500.6.31.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-livepatch-SLE15-SP5_Update_15
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 557 CVEs
 before 1-150500.11.3.1
1-150500.11.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
dtb-aarch64
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-64kb
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-debug
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default-base
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1.150500.6.31.1
5.14.21-150500.55.68.1.150500.6.31.1
kernel-docs
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-kvmsmall
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-obs-build
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-obs-qa
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-source
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-syms
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-zfcpdump
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3.150600.12.2.7
6.4.0-150600.23.7.3.150600.12.2.7
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.4
6.4.0-150600.23.7.4
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-livepatch-SLE15-SP6_Update_1
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 408 CVEs
 before 1-150600.13.3.7
1-150600.13.3.7
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3.150600.12.2.7
6.4.0-150600.23.7.3.150600.12.2.7
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.4
6.4.0-150600.23.7.4
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-livepatch-SLE15-SP6-RT_Update_1
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 783 CVEs
 before 1-150600.1.5.1
1-150600.1.5.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-18.1
6.4.0-18.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-17.1.1.51
6.4.0-17.1.1.51
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-18.1
6.4.0-18.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-18.1
6.4.0-18.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 826 CVEs
 before 6.4.0-9.1
6.4.0-9.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 826 CVEs
 before 6.4.0-9.1
6.4.0-9.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-gcp-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
 None known
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
 None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-lowlatency-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1
Show 8 moreShow less
6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-nvidia-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
 None known
linux-nvidia-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15
Show 6 moreShow less
6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25
 None known
linux-oem-5.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
 None known
linux-oem-6.0
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
 None known
linux-oem-6.1
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
 None known
linux-oem-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8
Show 14 moreShow less
6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28
 None known
linux-oracle-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1
Show 8 moreShow less
6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-riscv-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
 None known
linux-riscv-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1
Show 5 moreShow less
6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-starfive-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
 None known
linux-starfive-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1
 None known

History

History
RecordedChangedSources
affected
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-52659 is a medium vulnerability (CVSS 5.5) in Linux, published May 17, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in linux-lts 6.12.41-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 94 package rows, 1 version, 5,542 references and the rest of 14 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open