CVE-2023-52791

i2c: core: Run atomic i2c xfer when !preemptible

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

i2c: core: Run atomic i2c xfer when !preemptible

Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption (e.g. in wait_for_completion() while waiting for the DMA).

panic() calls preempt_disable_notrace() before calling emergency_restart(). Therefore, if an i2c device is used for the restart, the xfer should be atomic. This avoids warnings like:

[ 12.667612] WARNING: CPU: 1 PID: 1 at kernel/rcu/tree_plugin.h:318 rcu_note_context_switch+0x33c/0x6b0 [ 12.676926] Voluntary context switch within RCU read-side critical section! ... [ 12.742376] schedule_timeout from wait_for_completion_timeout+0x90/0x114 [ 12.749179] wait_for_completion_timeout from tegra_i2c_wait_completion+0x40/0x70 ... [ 12.994527] atomic_notifier_call_chain from machine_restart+0x34/0x58 [ 13.001050] machine_restart from panic+0x2a8/0x32c

Use !preemptible() instead, which is basically the same check as pre-v5.2.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.24%Up 0.2 points since May 22, 2024

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

i2c: core: Run atomic i2c xfer when !preemptible

Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption (e.g. in wait_for_completion() while waiting for the DMA).

panic() calls preempt_disable_notrace() before calling emergency_restart(). Therefore, if an i2c device is used for the restart, the xfer should be atomic. This avoids warnings like:

Use !preemptible() instead, which is basically the same check as pre-v5.2.

Record: CVE-2023-52791
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

CVE List No score

i2c: core: Run atomic i2c xfer when !preemptible

In the Linux kernel, the following vulnerability has been resolved:

i2c: core: Run atomic i2c xfer when !preemptible

Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption (e.g. in wait_for_completion() while waiting for the DMA).

panic() calls preempt_disable_notrace() before calling emergency_restart(). Therefore, if an i2c device is used for the restart, the xfer should be atomic. This avoids warnings like:

Use !preemptible() instead, which is basically the same check as pre-v5.2.

Record: CVE-2023-52791
Updated: 2026-11-02

EUVDEUVD-2023-59508 No score

In the Linux kernel, the following vulnerability has been resolved:

i2c: core: Run atomic i2c xfer when !preemptible

Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption (e.g. in wait_for_completion() while waiting for the DMA).

panic() calls preempt_disable_notrace() before calling emergency_restart(). Therefore, if an i2c device is used for the restart, the xfer should be atomic. This avoids warnings like:

Use !preemptible() instead, which is basically the same check as pre-v5.2.

Record: EUVD-2023-59508
Updated: 2026-11-02

GitHub AdvisoriesGHSA-pcw4-494r-vqvf 5.5

In the Linux kernel, the following vulnerability has been resolved: i2c: core: Run atomic i2c...

In the Linux kernel, the following vulnerability has been resolved:

i2c: core: Run atomic i2c xfer when !preemptible

Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption (e.g. in wait_for_completion() while waiting for the DMA).

panic() calls preempt_disable_notrace() before calling emergency_restart(). Therefore, if an i2c device is used for the restart, the xfer should be atomic. This avoids warnings like:

Use !preemptible() instead, which is basically the same check as pre-v5.2.

Record: GHSA-pcw4-494r-vqvf
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2023-52791 5.5

Record: BELL-CVE-2023-52791
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-52791 5.5

In the Linux kernel, the following vulnerability has been resolved: i2c: core: Run atomic i2c xfer when !preemptible Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption (e.g. in wait_for_completion() while waiting for the DMA). panic() calls preempt_disable_notrace() before calling emergency_restart(). Therefore, if an i2c device is used for the restart, the xfer should be atomic. This avoids warnings like: [ 12.667612] WARNING: CPU: 1 PID: 1 at kernel/rcu/tree_plugin.h:318 rcu_note_context_switch+0x33c/0x6b0 [ 12.676926] Voluntary context switch within RCU read-side critical section! ... [ 12.742376] schedule_timeout from wait_for_completion_timeout+0x90/0x114 [ 12.749179] wait_for_completion_timeout from tegra_i2c_wait_completion+0x40/0x70 ... [ 12.994527] atomic_notifier_call_chain from machine_restart+0x34/0x58 [ 13.001050] machine_restart from panic+0x2a8/0x32c Use !preemptible() instead, which is basically the same check as pre-v5.2.

Record: DEBIAN-CVE-2023-52791
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 24 moreShow less

OSVOESA-2024-1738 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server

AFS-3 has two data fetch RPC variants, FS.FetchData and FS.FetchData64, and Linux's afs client switches between them when talking to a non-YFS server if the read size, the file position or the sum of the two have the upper 32 bits set of the 64-bit value.

This is a problem, however, since the file position and length fields of FS.FetchData are signed 32-bit values.

Fix this by capturing the capability bits obtained from the fileserver when it's sent an FS.GetCapabilities RPC, rather than just discarding them, and then picking out the VICED_CAPABILITY_64BITFILES flag. This can then be used to decide whether to use FS.FetchData or FS.FetchData64 - and also FS.StoreData or FS.StoreData64 - rather than using upper_32_bits() to switch on the parameter values.

This capabilities flag could also be used to limit the maximum size of the file, but all servers must be checked for that.

Note that the issue does not exist with FS.StoreData - that uses unsigned 32-bit values. It's also not a problem with Auristor servers as its YFS.FetchData64 op uses unsigned 64-bit values.

This can be tested by cloning a git repo through an OpenAFS client to an OpenAFS server and then doing "git status" on it from a Linux afs client[1]. Provided the clone has a pack file that's in the 2G-4G range, the git status will show errors like:

error: packfile .git/objects/pack/pack-5e813c51d12b6847bbc0fcd97c2bca66da50079c.pack does not match index
error: packfile .git/objects/pack/pack-5e813c51d12b6847bbc0fcd97c2bca66da50079c.pack does not match index

This can be observed in the server's FileLog with something like the following appearing:

Sun Aug 29 19:31:39 2021 SRXAFS_FetchData, Fid = 2303380852.491776.3263114, Host 192.168.11.201:7001, Id 1001 Sun Aug 29 19:31:39 2021 CheckRights: len=0, for host=192.168.11.201:7001 Sun Aug 29 19:31:39 2021 FetchData_RXStyle: Pos 18446744071815340032, Len 3154 Sun Aug 29 19:31:39 2021 FetchData_RXStyle: file size 2400758866 ... Sun Aug 29 19:31:40 2021 SRXAFS_FetchData returns 5

Note the file position of 18446744071815340032. This is the requested file position sign-extended.(CVE-2021-47366)

In the Linux kernel, the following vulnerability has been resolved:

net/smc: Fix possible access to freed memory in link clear

After modifying the QP to the Error state, all RX WR would be completed with WC in IB_WC_WR_FLUSH_ERR status. Current implementation does not wait for it is done, but destroy the QP and free the link group directly. So there is a risk that accessing the freed memory in tasklet context.

Here is a crash example:

BUG: unable to handle page fault for address: ffffffff8f220860 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD f7300e067 P4D f7300e067 PUD f7300f063 PMD 8c4e45063 PTE 800ffff08c9df060 Oops: 0002 [#1] SMP PTI CPU: 1 PID: 0 Comm: swapper/1 Kdump: loaded Tainted: G S OE 5.10.0-0607+ #23 Hardware name: Inspur NF5280M4/YZMB-00689-101, BIOS 4.1.20 07/09/2018 RIP: 0010:native_queued_spin_lock_slowpath+0x176/0x1b0 Code: f3 90 48 8b 32 48 85 f6 74 f6 eb d5 c1 ee 12 83 e0 03 83 ee 01 48 c1 e0 05 48 63 f6 48 05 00 c8 02 00 48 03 04 f5 00 09 98 8e <48> 89 10 8b 42 08 85 c0 75 09 f3 90 8b 42 08 85 c0 74 f7 48 8b 32 RSP: 0018:ffffb3b6c001ebd8 EFLAGS: 00010086 RAX: ffffffff8f220860 RBX: 0000000000000246 RCX: 0000000000080000 RDX: ffff91db1f86c800 RSI: 000000000000173c RDI: ffff91db62bace00 RBP: ffff91db62bacc00 R08: 0000000000000000 R09: c00000010000028b R10: 0000000000055198 R11: ffffb3b6c001ea58 R12: ffff91db80e05010 R13: 000000000000000a R14: 0000000000000006 R15: 0000000000000040 FS: 0000000000000000(0000) GS:ffff91db1f840000(0000)…

Record: OESA-2024-1738
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1768 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Fix DSP oops stack dump output contents

Fix @buf arg given to hex_dump_to_buffer() and stack address used in dump error output.(CVE-2021-47381)

In the Linux kernel, the following vulnerability has been resolved:

scsi: iscsi: Fix iscsi_task use after free

Commit d39df158518c ("scsi: iscsi: Have abort handler get ref to conn") added iscsi_get_conn()/iscsi_put_conn() calls during abort handling but then also changed the handling of the case where we detect an already completed task where we now end up doing a goto to the common put/cleanup code. This results in a iscsi_task use after free, because the common cleanup code will do a put on the iscsi_task.

This reverts the goto and moves the iscsi_get_conn() to after we've checked if the iscsi_task is valid.(CVE-2021-47427)

In the Linux kernel, the following vulnerability has been resolved:

spi: Fix deadlock when adding SPI controllers on SPI buses

Currently we have a global spi_add_lock which we take when adding new devices so that we can check that we're not trying to reuse a chip select that's already controlled. This means that if the SPI device is itself a SPI controller and triggers the instantiation of further SPI devices we trigger a deadlock as we try to register and instantiate those devices while in the process of doing so for the parent controller and hence already holding the global spi_add_lock. Since we only care about concurrency within a single SPI bus move the lock to be per controller, avoiding the deadlock.

This can be easily triggered in the case of spi-mux.(CVE-2021-47469)

(CVE-2023-39180)

In the Linux kernel, the following vulnerability has been resolved:

powerpc/powernv: Add a null pointer check in opal_powercap_init()

kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.(CVE-2023-52696)

In the Linux kernel, the following vulnerability has been resolved:

i2c: core: Run atomic i2c xfer when !preemptible

Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption (e.g. in wait_for_completion() while waiting for the DMA).

panic() calls preempt_disable_notrace() before calling emergency_restart(). Therefore, if an i2c device is used for the restart, the xfer should be atomic. This avoids warnings like:

Use !preemptible() instead, which is basically the same check as pre-v5.2.(CVE-2023-52791)

In the Linux kernel, the following vulnerability has been resolved:

hid: cp2112: Fix duplicate workqueue initialization

Previously the cp2112 driver called INIT_DELAYED_WORK within cp2112_gpio_irq_startup, resulting in duplicate initilizations of the workqueue on subsequent IRQ startups following an initial request. This resulted in a warning in set_work_data in workqueue.c, as well as a rare NULL dereference within process_one_work in workqueue.c.

Initialize the workqueue within _probe instead.(CVE-2023-52853)

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix UAF issue in ksmbd_tcp_new_connection()

The race is between the handling of a new TCP connection and its disconnection. It leads to UAF on struct tcp_transport in ksmbd_tcp_new_connection() function.(CVE-2024-26592)

In the Linux kernel, the…

Record: OESA-2024-1768
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:5101 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:5101
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:5102 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:5102
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:2270 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:2270
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-52791 5.5

Record: UBUNTU-CVE-2023-52791
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-11

OSVALSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
[almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
[Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
(JIRA:AlmaLinux-31798)
(JIRA:AlmaLinux-10263)
(JIRA:AlmaLinux-40901)
(JIRA:AlmaLinux-43547)
(JIRA:AlmaLinux-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:AlmaLinux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: ALSA-2024:5101
Updated: 2026-11-02

OSVALSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: ALSA-2024:5102
Updated: 2026-11-02

OSVCLSA-2026-1779987841 No score

kernel: Fix of 110 CVEs

smb: client: reject userspace cifs.spnego descriptions
mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash {CVE-2024-35854}
cifs: Fix memory leak when build ntlmssp negotiate blob failed {CVE-2022-50372}
scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() {CVE-2023-53038}
drm/amd/display: Do not set DRR on pipe Commit {CVE-2023-53042}
tcp: fix skb_copy_ubufs() vs BIG TCP {CVE-2023-53669}
clk: Fix clk_core_get NULL dereference {CVE-2024-27038}
drm/amd/display: Check null pointers before using dc->clk_mgr {CVE-2024-49907}
bpf: reject unhashed sockets in bpf_sk_assign {CVE-2023-53585}
driver core: fix resource leak in device_add() {CVE-2023-53594}
wifi: ath9k: hif_usb: fix memory leak of remain_skbs {CVE-2023-53641}
wifi: ath9k: verify the expected usb_endpoints are present {CVE-2022-50297}
drm/amd/display: Fix potential null-deref in dm_resume {CVE-2022-50535}
ext4: don't allow journal inode to have encrypt flag {CVE-2022-50277}
tls: get psock ref after taking rxlock to avoid leak {CVE-2024-35908}
cpumap: Zero-initialise xdp_rxq_info struct before running XDP program {CVE-2024-27431}
bpf: Guard stack limits against 32bit overflow {CVE-2023-52676}
can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() {CVE-2021-47457}
serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527}
cpufreq: exit() callback is optional {CVE-2024-38615}
ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() {CVE-2024-39276}
tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets {CVE-2024-36905}
wifi: nl80211: reject iftype change with mesh ID change {CVE-2024-27410}
tcp: do not accept ACK of bytes we never sent {CVE-2023-52881}
crypto: pcrypt - Fix hungtask for PADATA_RESET {CVE-2023-52813}
net/mlx5: Properly link new fs rules into the tree {CVE-2024-35960}
usb: ulpi: fix memory leak on ulpi_register() error paths
usb: ulpi: fix double free in ulpi_register_interface() error path {CVE-2026-31759}
wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute {CVE-2025-21653}
calipso: fix memory leak in netlbl_calipso_add_pass() {CVE-2023-52698}
wifi: iwlwifi: mvm: avoid NULL pointer dereference {CVE-2024-49929}
ext4: update orig_path in ext4_find_extent() {CVE-2024-49881}
drm/vmwgfx: Fix a deadlock in dma buf fence polling {CVE-2024-43863}
RDMA/restrack: Fix potential invalid address access {CVE-2024-42080}
net: can: j1939: Initialize unused data in j1939_send_one() {CVE-2024-42076}
nfsd: clear acl_access/acl_default after releasing them {CVE-2025-21796}
rtc: pl031: fix rtc features null pointer dereference {CVE-2022-49273}
net: veth: clear GRO when clearing XDP even when down {CVE-2024-26803}
coresight: cti: Fix hang in cti_disable_hw() {CVE-2022-50491}
scsi: qla2xxx: Fix deletion race condition {CVE-2023-53615}
iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() {CVE-2023-53476}
scsi: qla2xxx: Fix potential NULL pointer dereference {CVE-2023-53451}
usb: ucsi_acpi: Increase the command completion timeout {CVE-2023-53168}
drivers: base: dd: fix memory leak with using debugfs_lookup() {CVE-2023-53390}
USB: fix memory leak with using debugfs_lookup() {CVE-2023-53359}
PM: domains: fix memory leak with using debugfs_lookup() {CVE-2023-53202}
drm/client: Fix memory leak in drm_client_modeset_probe {CVE-2023-53288}
drivers: base: component: fix memory leak with using debugfs_lookup() {CVE-2023-53409}
USB: uhci: fix memory leak with using debugfs_lookup() {CVE-2023-53197}
media: uvcvideo: Handle cameras with invalid descriptors {CVE-2023-53437}
arm64: csum: Fix OoB access in IP checksum code for negative lengths {CVE-2023-53726}
bnxt: Do not read past the end of test names {CVE-2023-53010}
dax: make sure inodes are flushed before destroy cache {CVE-2022-49220}
cifs: Fix oops due to uncleared server->smbd_conn…

Record: CLSA-2026-1779987841
Updated: 2026-11-02

OSV No score

i2c: core: Run atomic i2c xfer when !preemptible

In the Linux kernel, the following vulnerability has been resolved:

i2c: core: Run atomic i2c xfer when !preemptible

Since bae1d3a05a8b, i2c transfers are non-atomic if preemption is disabled. However, non-atomic i2c transfers require preemption (e.g. in wait_for_completion() while waiting for the DMA).

panic() calls preempt_disable_notrace() before calling emergency_restart(). Therefore, if an i2c device is used for the restart, the xfer should be atomic. This avoids warnings like:

Use !preemptible() instead, which is basically the same check as pre-v5.2.

Record: CVE-2023-52791
Updated: 2026-11-02

OSVRLSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

Rocky Linux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux-23841)
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux-33437)
[Hyper-V][Rocky Linux-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux-40939)
(JIRA:Rocky Linux-31798)
(JIRA:Rocky Linux-10263)
(JIRA:Rocky Linux-40901)
(JIRA:Rocky Linux-43547)
(JIRA:Rocky Linux-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RLSA-2024:5101
Updated: 2026-11-02

OSVRLSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RLSA-2024:5102
Updated: 2026-11-02

OSVRXSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

Rocky Linux SIG Cloud8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux SIG Cloud-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux SIG Cloud-23841)
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux SIG Cloud-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux SIG Cloud-33437)
[Hyper-V][Rocky Linux SIG Cloud-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux SIG Cloud-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux SIG Cloud-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-40939)
(JIRA:Rocky Linux SIG Cloud-31798)
(JIRA:Rocky Linux SIG Cloud-10263)
(JIRA:Rocky Linux SIG Cloud-40901)
(JIRA:Rocky Linux SIG Cloud-43547)
(JIRA:Rocky Linux SIG Cloud-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux SIG Cloud-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RXSA-2024:5101
Updated: 2026-11-02

OSVSUSE-SU-2024:2008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
CVE-2024-27417: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721)
CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
CVE-2024-35791: Flush pages under…

Record: SUSE-SU-2024:2008-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2011-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
CVE-2024-35904: Fixed dereference of garbage after mount failure (bsc#1224494).
CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).

The following non-security bugs were fixed:

af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
filemap: remove use of wait bookmarks (bsc#1224085).
idpf: extend tx watchdog timeout (bsc#1224137).
ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
powerpc: Refactor verification of MSR_RI (bsc#1223191).
supported.conf: support tcp_dctcp module (jsc#PED-8111)

Record: SUSE-SU-2024:2011-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2019-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-35869: Guarantee refcounted children from parent session (bsc#1224679).
CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2024-35964: Fixed not validating setsockopt user input (bsc#1224581).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
CVE-2024-35860: struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios (bsc#1224530).
CVE-2024-35852: Fixed memory leak when canceling rehash work (bsc#1224502).
CVE-2024-36006: Fixed incorrect list API usage (bsc#1224541).
CVE-2024-36007: Fixed warning during rehash (bsc#1224543).
CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
CVE-2024-35907: Call request_irq() after NAPI initialized (bsc#1224492).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure…

Record: SUSE-SU-2024:2019-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2189-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-35863: Fix potential UAF in is_valid_oplock_break() (bsc#1224763).
CVE-2024-35867: Fix potential UAF in cifs_stats_proc_show() (bsc#1224664).
CVE-2024-35868: Fix potential UAF in cifs_stats_proc_write() (bsc#1224678).
CVE-2024-26928: Fix potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
CVE-2024-35904: Avoid dereference of garbage after mount failure (bsc#1224494).
CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).

The following non-security bugs were fixed:

af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
filemap: remove use of wait bookmarks (bsc#1224085).
idpf: extend tx watchdog timeout (bsc#1224137).
ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
powerpc: Refactor verification of MSR_RI (bsc#1223191).

Record: SUSE-SU-2024:2189-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26700: Fixed drm/amd/display: Fix MST Null Ptr for RV (bsc#1222870)
CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)
CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)
CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)
CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).
CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
CVE-2024-27042: Fixed potential out-of-bounds access in…

Record: SUSE-SU-2024:2190-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2571-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758).
CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52865: Add check for mtk_alloc_clk_data (bsc#1225086).
CVE-2023-52821: Fixed a possible null pointer dereference (bsc#1225022).
CVE-2023-52867: Fixed possible buffer overflow (bsc#1225009).
CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,).
CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
CVE-2023-52759: Ignore negated quota changes (bsc#1225560).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52864: Fixed opening of char device (bsc#1225132).
CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
CVE-2024-35843: iommu/vt-d: Use device rbtree in iopf reporting path (bsc#1224751).
CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799).
CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841).
CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879).
CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789).
CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
CVE-2024-38556:…

Record: SUSE-SU-2024:2571-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2896-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). -…

Record: SUSE-SU-2024:2896-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…

Record: SUSE-SU-2024:2973-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
CVE-2024-35890:…

Record: SUSE-SU-2025:20008-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…

Record: SUSE-SU-2025:20028-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-rt` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-kvm` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`linux-lts` Alpaquita:23	6.1.62-r0 up to 6.1.68-r0	6.1.68-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.11.els2	7.0.0-284.1101.el9_2.tuxcare.11.els2
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-core` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els2	2:1.0.0-2.el9_2.tuxcare.11.els2
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els2	2:1.0.0-2.el9_2.tuxcare.11.els2
`libbpf-static` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els2	2:1.0.0-2.el9_2.tuxcare.11.els2
`perf` TuxCare:AlmaLinux:9.2 From an advisory covering 109 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els2	5.14.0-284.1101.el9_2.tuxcare.11.els2
`Kernel` Linux	5.2.0 up to 5.4.262, 5.5.0 up to 5.10.202, 5.11.0 up to 5.15.140, 5.16.0 up to 6.1.64, 6.2.0 up to 6.5.13, 6.6.0 up to 6.6.3	5.4.2625.10.2025.15.1406.1.646.5.136.6.3
`linux` Debian:12	before 6.1.64-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 6 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+1	6.1.64-1
`linux` Debian:13	before 6.6.8-1	6.6.8-1
`linux` Debian:14	before 6.6.8-1	6.6.8-1
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 42 CVEs	before 5.10.0-209.0.0.117.oe2203sp3	5.10.0-209.0.0.117.oe2203sp3
`kernel` openEuler:22.03-LTS-SP1 From an advisory covering 34 CVEs	before 5.10.0-136.82.0.163.oe2203sp1	5.10.0-136.82.0.163.oe2203sp1
`bpftool` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel` Rocky Linux:8 From an advisory covering 160 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel` Rocky Linux:8 From an advisory covering 160 CVEs	before 0:4.18.0-553.16.1.el8_10.cloud.0.1	0:4.18.0-553.16.1.el8_10.cloud.0.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-livepatch-SLE15-SP5-RT_Update_16` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 561 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-rt` openSUSE:Leap Micro 5.3 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-rt` openSUSE:Leap Micro 5.4 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-default` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-default` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-livepatch-SLE15-SP4_Update_27` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 320 CVEs	before 1-150400.9.3.2	1-150400.9.3.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-docs` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-source` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-default` SUSE:Manager Proxy 4.3 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Manager Proxy 4.3 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-source` SUSE:Manager Proxy 4.3 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-default` openSUSE:Leap Micro 5.3 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` openSUSE:Leap Micro 5.3 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-default` openSUSE:Leap Micro 5.4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` openSUSE:Leap Micro 5.4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1.150500.6.31.1	5.14.21-150500.55.68.1.150500.6.31.1
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2.150600.12.4.3	6.4.0-150600.23.14.2.150600.12.4.3
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.1	6.4.0-150600.8.8.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1120.130~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1120.130~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1126.133~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1126.133~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1124.133~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1124.133~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-173.191~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-173.191~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1067.72~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 38 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.1	5.4.0-1067.72~18.04.1
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1119.128~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1119.128~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1104.116~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1104.116~18.04.1
`linux` Ubuntu:20.04:LTS	before 5.4.0-173.191, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-173.191
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1120.130, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1120.130
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1056.61~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 28 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.1	5.15.0-1056.61~20.04.1
`linux-azure` Ubuntu:20.04:LTS	before 5.4.0-1126.133, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	5.4.0-1126.133
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1058.66~20.04.2, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 30 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.1	5.15.0-1058.66~20.04.2
`linux-bluefield` Ubuntu:20.04:LTS	before 5.4.0-1080.87, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 39 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.85	5.4.0-1080.87
`linux-gcp` Ubuntu:20.04:LTS	before 5.4.0-1124.133, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	5.4.0-1124.133
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1053.61~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 28 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.1	5.15.0-1053.61~20.04.1
`linux-gkeop` Ubuntu:20.04:LTS	before 5.4.0-1087.91, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	5.4.0-1087.91
`linux-gkeop-5.15` Ubuntu:20.04:LTS	before 5.15.0-1038.44~20.04.1, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 24 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.1	5.15.0-1038.44~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-100.110~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 28 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.1	5.15.0-100.110~20.04.1
`linux-ibm` Ubuntu:20.04:LTS	before 5.4.0-1067.72, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 45 moreShow less 5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71	5.4.0-1067.72
`linux-ibm-5.15` Ubuntu:20.04:LTS	before 5.15.0-1048.51~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 9 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.1	5.15.0-1048.51~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1050.56~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 20 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.1	5.15.0-1050.56~20.04.1
`linux-iot` Ubuntu:20.04:LTS	before 5.4.0-1032.33, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 18 moreShow less 5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.32	5.4.0-1032.33
`linux-kvm` Ubuntu:20.04:LTS	before 5.4.0-1108.115, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78	5.4.0-1108.115
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-100.110~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 27 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.1	5.15.0-100.110~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:20.04:LTS	before 5.15.0-1025.25~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 6 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.1	5.15.0-1025.25~20.04.1
`linux-oracle` Ubuntu:20.04:LTS	before 5.4.0-1119.128, plus listed versions 5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1061.655.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1066.715.4.0-1067.725.4.0-1069.755.4.0-1070.765.4.0-1071.775.4.0-1073.795.4.0-1076.83	5.4.0-1119.128
`linux-oracle-5.15` Ubuntu:20.04:LTS	before 5.15.0-1053.59~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 27 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.1	5.15.0-1053.59~20.04.1
`linux-raspi` Ubuntu:20.04:LTS	before 5.4.0-1104.116, plus listed versions 5.4.0-1007.75.4.0-1008.85.4.0-1011.115.4.0-1012.125.4.0-1013.13 Show 45 moreShow less 5.4.0-1015.155.4.0-1016.175.4.0-1018.205.4.0-1019.215.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1029.325.4.0-1030.335.4.0-1032.355.4.0-1033.365.4.0-1034.375.4.0-1035.385.4.0-1036.395.4.0-1038.415.4.0-1041.455.4.0-1042.465.4.0-1043.475.4.0-1044.485.4.0-1045.495.4.0-1046.505.4.0-1047.525.4.0-1048.535.4.0-1050.565.4.0-1052.585.4.0-1053.605.4.0-1055.625.4.0-1056.635.4.0-1058.655.4.0-1059.675.4.0-1060.685.4.0-1062.705.4.0-1065.755.4.0-1066.765.4.0-1068.785.4.0-1069.795.4.0-1070.805.4.0-1071.815.4.0-1073.845.4.0-1074.855.4.0-1077.885.4.0-1078.89	5.4.0-1104.116
`linux-riscv-5.15` Ubuntu:20.04:LTS	before 5.15.0-1051.55~20.04.1, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 25 moreShow less 5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.1	5.15.0-1051.55~20.04.1
`linux-xilinx-zynqmp` Ubuntu:20.04:LTS	before 5.4.0-1039.43, plus listed versions 5.4.0-1020.245.4.0-1021.255.4.0-1022.265.4.0-1023.275.4.0-1024.28 Show 14 moreShow less 5.4.0-1025.295.4.0-1026.305.4.0-1027.315.4.0-1028.325.4.0-1029.335.4.0-1030.345.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1035.395.4.0-1036.405.4.0-1037.415.4.0-1038.42	5.4.0-1039.43
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known

History

History
Recorded	Changed	Sources
Nov 11, 2026	affected	OSV
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-52791 is a medium vulnerability (CVSS 5.5) in Linux, published May 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in linux-lts 6.1.68-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 449 package rows, 385 versions, 6,123 references and the rest of 11 source descriptions. The JSON record has them.