CVE-2023-52803

SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

RPC client pipefs dentries cleanup is in separated rpc_remove_pipedir() workqueue,which takes care about pipefs superblock locking. In some special scenarios, when kernel frees the pipefs sb of the current client and immediately alloctes a new pipefs sb, rpc_remove_pipedir function would misjudge the existence of pipefs sb which is not the one it used to hold. As a result, the rpc_remove_pipedir would clean the released freed pipefs dentries.

To fix this issue, rpc_remove_pipedir should check whether the current pipefs sb is consistent with the original pipefs sb.

This error can be catched by KASAN:

[ 250.497700] BUG: KASAN: slab-use-after-free in dget_parent+0x195/0x200 [ 250.498315] Read of size 4 at addr ffff88800a2ab804 by task kworker/0:18/106503 [ 250.500549] Workqueue: events rpc_free_client_work [ 250.501001] Call Trace: [ 250.502880] kasan_report+0xb6/0xf0 [ 250.503209] ? dget_parent+0x195/0x200 [ 250.503561] dget_parent+0x195/0x200 [ 250.503897] ? __pfx_rpc_clntdir_depopulate+0x10/0x10 [ 250.504384] rpc_rmdir_depopulate+0x1b/0x90 [ 250.504781] rpc_remove_client_dir+0xf5/0x150 [ 250.505195] rpc_free_client_work+0xe4/0x230 [ 250.505598] process_one_work+0x8ee/0x13b0 ... [ 22.039056] Allocated by task 244: [ 22.039390] kasan_save_stack+0x22/0x50 [ 22.039758] kasan_set_track+0x25/0x30 [ 22.040109] __kasan_slab_alloc+0x59/0x70 [ 22.040487] kmem_cache_alloc_lru+0xf0/0x240 [ 22.040889] __d_alloc+0x31/0x8e0 [ 22.041207] d_alloc+0x44/0x1f0 [ 22.041514] __rpc_lookup_create_exclusive+0x11c/0x140 [ 22.041987] rpc_mkdir_populate.constprop.0+0x5f/0x110 [ 22.042459] rpc_create_client_dir+0x34/0x150 [ 22.042874] rpc_setup_pipedir_sb+0x102/0x1c0 [ 22.043284] rpc_client_register+0x136/0x4e0 [ 22.043689] rpc_new_client+0x911/0x1020 [ 22.044057] rpc_create_xprt+0xcb/0x370 [ 22.044417] rpc_create+0x36b/0x6c0 ... [ 22.049524] Freed by task 0: [ 22.049803] kasan_save_stack+0x22/0x50 [ 22.050165] kasan_set_track+0x25/0x30 [ 22.050520] kasan_save_free_info+0x2b/0x50 [ 22.050921] __kasan_slab_free+0x10e/0x1a0 [ 22.051306] kmem_cache_free+0xa5/0x390 [ 22.051667] rcu_core+0x62c/0x1930 [ 22.051995] __do_softirq+0x165/0x52a [ 22.052347] [ 22.052503] Last potentially related work creation: [ 22.052952] kasan_save_stack+0x22/0x50 [ 22.053313] __kasan_record_aux_stack+0x8e/0xa0 [ 22.053739] __call_rcu_common.constprop.0+0x6b/0x8b0 [ 22.054209] dentry_free+0xb2/0x140 [ 22.054540] __dentry_kill+0x3be/0x540 [ 22.054900] shrink_dentry_list+0x199/0x510 [ 22.055293] shrink_dcache_parent+0x190/0x240 [ 22.055703] do_one_tree+0x11/0x40 [ 22.056028] shrink_dcache_for_umount+0x61/0x140 [ 22.056461] generic_shutdown_super+0x70/0x590 [ 22.056879] kill_anon_super+0x3a/0x60 [ 22.057234] rpc_kill_sb+0x121/0x200

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.24%Up 0.2 points since May 22, 2024

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

To fix this issue, rpc_remove_pipedir should check whether the current pipefs sb is consistent with the original pipefs sb.

This error can be catched by KASAN:

Record: CVE-2023-52803
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-416
Updated: 2026-11-02

CVE List No score

SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

To fix this issue, rpc_remove_pipedir should check whether the current pipefs sb is consistent with the original pipefs sb.

This error can be catched by KASAN:

Record: CVE-2023-52803
Updated: 2026-11-02

EUVDEUVD-2023-59520 No score

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

To fix this issue, rpc_remove_pipedir should check whether the current pipefs sb is consistent with the original pipefs sb.

This error can be catched by KASAN:

Record: EUVD-2023-59520
Updated: 2026-11-02

GitHub AdvisoriesGHSA-v93c-228v-m7cm 5.5

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client...

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

To fix this issue, rpc_remove_pipedir should check whether the current pipefs sb is consistent with the original pipefs sb.

This error can be catched by KASAN:

Record: GHSA-v93c-228v-m7cm
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVBELL-CVE-2023-52803 5.5

Record: BELL-CVE-2023-52803
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-52803 5.5

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RPC client pipefs dentries cleanup is in separated rpc_remove_pipedir() workqueue,which takes care about pipefs superblock locking. In some special scenarios, when kernel frees the pipefs sb of the current client and immediately alloctes a new pipefs sb, rpc_remove_pipedir function would misjudge the existence of pipefs sb which is not the one it used to hold. As a result, the rpc_remove_pipedir would clean the released freed pipefs dentries. To fix this issue, rpc_remove_pipedir should check whether the current pipefs sb is consistent with the original pipefs sb. This error can be catched by KASAN: ========================================================= [ 250.497700] BUG: KASAN: slab-use-after-free in dget_parent+0x195/0x200 [ 250.498315] Read of size 4 at addr ffff88800a2ab804 by task kworker/0:18/106503 [ 250.500549] Workqueue: events rpc_free_client_work [ 250.501001] Call Trace: [ 250.502880] kasan_report+0xb6/0xf0 [ 250.503209] ? dget_parent+0x195/0x200 [ 250.503561] dget_parent+0x195/0x200 [ 250.503897] ? __pfx_rpc_clntdir_depopulate+0x10/0x10 [ 250.504384] rpc_rmdir_depopulate+0x1b/0x90 [ 250.504781] rpc_remove_client_dir+0xf5/0x150 [ 250.505195] rpc_free_client_work+0xe4/0x230 [ 250.505598] process_one_work+0x8ee/0x13b0 ... [ 22.039056] Allocated by task 244: [ 22.039390] kasan_save_stack+0x22/0x50 [ 22.039758] kasan_set_track+0x25/0x30 [ 22.040109] __kasan_slab_alloc+0x59/0x70 [ 22.040487] kmem_cache_alloc_lru+0xf0/0x240 [ 22.040889] __d_alloc+0x31/0x8e0 [ 22.041207] d_alloc+0x44/0x1f0 [ 22.041514] __rpc_lookup_create_exclusive+0x11c/0x140 [ 22.041987] rpc_mkdir_populate.constprop.0+0x5f/0x110 [ 22.042459] rpc_create_client_dir+0x34/0x150 [ 22.042874] rpc_setup_pipedir_sb+0x102/0x1c0 [ 22.043284] rpc_client_register+0x136/0x4e0 [ 22.043689] rpc_new_client+0x911/0x1020 [ 22.044057] rpc_create_xprt+0xcb/0x370 [ 22.044417] rpc_create+0x36b/0x6c0 ... [ 22.049524] Freed by task 0: [ 22.049803] kasan_save_stack+0x22/0x50 [ 22.050165] kasan_set_track+0x25/0x30 [ 22.050520] kasan_save_free_info+0x2b/0x50 [ 22.050921] __kasan_slab_free+0x10e/0x1a0 [ 22.051306] kmem_cache_free+0xa5/0x390 [ 22.051667] rcu_core+0x62c/0x1930 [ 22.051995] __do_softirq+0x165/0x52a [ 22.052347] [ 22.052503] Last potentially related work creation: [ 22.052952] kasan_save_stack+0x22/0x50 [ 22.053313] __kasan_record_aux_stack+0x8e/0xa0 [ 22.053739] __call_rcu_common.constprop.0+0x6b/0x8b0 [ 22.054209] dentry_free+0xb2/0x140 [ 22.054540] __dentry_kill+0x3be/0x540 [ 22.054900] shrink_dentry_list+0x199/0x510 [ 22.055293] shrink_dcache_parent+0x190/0x240 [ 22.055703] do_one_tree+0x11/0x40 [ 22.056028] shrink_dcache_for_umount+0x61/0x140 [ 22.056461] generic_shutdown_super+0x70/0x590 [ 22.056879] kill_anon_super+0x3a/0x60 [ 22.057234] rpc_kill_sb+0x121/0x200

Record: DEBIAN-CVE-2023-52803
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 35 moreShow less

OSVOESA-2024-1705 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: cdc_eem: fix tx fixup skb leak

when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free original skb.

fix it by free orginal skb in eem_tx_fixup() first, then check skb clone status, if failed, return NULL to usbnet.(CVE-2021-47236)

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix use-after-free in gfs2_glock_shrink_scan

The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to remove the glock from the lru list in __gfs2_glock_put().

On the shrink scan path, the same flag is cleared under lru_lock but because of cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the put side can be made without deleting the glock from the lru list.

Keep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to ensure correct behavior on both sides - clear GLF_LRU after list_del under lru_lock.(CVE-2021-47254)

In the Linux kernel, the following vulnerability has been resolved:

netrom: Decrease sock refcount when sock timers expire

Commit 63346650c1a9 ("netrom: switch to sock timer API") switched to use sock timer API. It replaces mod_timer() by sk_reset_timer(), and del_timer() by sk_stop_timer().

Function sk_reset_timer() will increase the refcount of sock if it is called on an inactive timer, hence, in case the timer expires, we need to decrease the refcount ourselves in the handler, otherwise, the sock refcount will be unbalanced and the sock will never be freed.(CVE-2021-47294)

In the Linux kernel, the following vulnerability has been resolved:

memory: fsl_ifc: fix leak of IO mapping on probe failure

On probe error the driver should unmap the IO memory. Smatch reports:

drivers/memory/fsl_ifc.c:298 fsl_ifc_ctrl_probe() warn: 'fsl_ifc_ctrl_dev->gregs' not released on lines: 298.(CVE-2021-47315)

In the Linux kernel, the following vulnerability has been resolved:

watchdog: Fix possible use-after-free in wdt_startup()

This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free.

Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.(CVE-2021-47324)

In the Linux kernel, the following vulnerability has been resolved:

scsi: megaraid_sas: Fix resource leak in case of probe failure

The driver doesn't clean up all the allocated resources properly when scsi_add_host(), megasas_start_aen() function fails during the PCI device probe.

Clean up all those resources.(CVE-2021-47329)

In the Linux kernel, the following vulnerability has been resolved:

ipack: ipoctal: fix module reference leak

A reference to the carrier module was taken on every open but was only released once when the final reference to the tty struct was dropped.

Fix this by taking the module reference and initialising the tty driver data when installing the tty.(CVE-2021-47403)

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc2: check return value after calling platform_get_resource()

It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value.(CVE-2021-47409)

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix freeing of uninitialized misc IRQ vector

When VSI set up failed in i40e_probe() as part of PF switch set up driver was trying to free misc IRQ vectors in i40e_clear_interrupt_scheme and produced a kernel Oops:

Trying to free already-free IRQ 266 WARNING:…

Record: OESA-2024-1705
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVOESA-2024-1706 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix use-after-free of encap entry in neigh update handler

Function mlx5e_rep_neigh_update() wasn't updated to accommodate rtnl lock removal from TC filter update path and properly handle concurrent encap entry insertion/deletion which can lead to following use-after-free:

[23827.464923] ================================================================== [23827.469446] BUG: KASAN: use-after-free in mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.470971] Read of size 4 at addr ffff8881d132228c by task kworker/u20:6/21635 [23827.472251] [23827.472615] CPU: 9 PID: 21635 Comm: kworker/u20:6 Not tainted 5.13.0-rc3+ #5 [23827.473788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 [23827.475639] Workqueue: mlx5e mlx5e_rep_neigh_update [mlx5_core] [23827.476731] Call Trace: [23827.477260] dump_stack+0xbb/0x107 [23827.477906] print_address_description.constprop.0+0x18/0x140 [23827.478896] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.479879] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.480905] kasan_report.cold+0x7c/0xd8 [23827.481701] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.482744] kasan_check_range+0x145/0x1a0 [23827.493112] mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.494054] ? mlx5e_tc_tun_encap_info_equal_generic+0x140/0x140 [mlx5_core] [23827.495296] mlx5e_rep_neigh_update+0x41e/0x5e0 [mlx5_core] [23827.496338] ? mlx5e_rep_neigh_entry_release+0xb80/0xb80 [mlx5_core] [23827.497486] ? read_word_at_a_time+0xe/0x20 [23827.498250] ? strscpy+0xa0/0x2a0 [23827.498889] process_one_work+0x8ac/0x14e0 [23827.499638] ? lockdep_hardirqs_on_prepare+0x400/0x400 [23827.500537] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [23827.501359] ? rwlock_bug.part.0+0x90/0x90 [23827.502116] worker_thread+0x53b/0x1220 [23827.502831] ? process_one_work+0x14e0/0x14e0 [23827.503627] kthread+0x328/0x3f0 [23827.504254] ? _raw_spin_unlock_irq+0x24/0x40 [23827.505065] ? __kthread_bind_mask+0x90/0x90 [23827.505912] ret_from_fork+0x1f/0x30 [23827.506621] [23827.506987] Allocated by task 28248: [23827.507694] kasan_save_stack+0x1b/0x40 [23827.508476] __kasan_kmalloc+0x7c/0x90 [23827.509197] mlx5e_attach_encap+0xde1/0x1d40 [mlx5_core] [23827.510194] mlx5e_tc_add_fdb_flow+0x397/0xc40 [mlx5_core] [23827.511218] __mlx5e_add_fdb_flow+0x519/0xb30 [mlx5_core] [23827.512234] mlx5e_configure_flower+0x191c/0x4870 [mlx5_core] [23827.513298] tc_setup_cb_add+0x1d5/0x420 [23827.514023] fl_hw_replace_filter+0x382/0x6a0 [cls_flower] [23827.514975] fl_change+0x2ceb/0x4a51 [cls_flower] [23827.515821] tc_new_tfilter+0x89a/0x2070 [23827.516548] rtnetlink_rcv_msg+0x644/0x8c0 [23827.517300] netlink_rcv_skb+0x11d/0x340 [23827.518021] netlink_unicast+0x42b/0x700 [23827.518742] netlink_sendmsg+0x743/0xc20 [23827.519467] sock_sendmsg+0xb2/0xe0 [23827.520131] ____sys_sendmsg+0x590/0x770 [23827.520851] ___sys_sendmsg+0xd8/0x160 [23827.521552] __sys_sendmsg+0xb7/0x140 [23827.522238] do_syscall_64+0x3a/0x70 [23827.522907] entry_SYSCALL_64_after_hwframe+0x44/0xae [23827.523797] [23827.524163] Freed by task 25948: [23827.524780] kasan_save_stack+0x1b/0x40 [23827.525488] kasan_set_track+0x1c/0x30 [23827.526187] kasan_set_free_info+0x20/0x30 [23827.526968] __kasan_slab_free+0xed/0x130 [23827.527709] slab_free_freelist_hook+0xcf/0x1d0 [23827.528528] kmem_cache_free_bulk+0x33a/0x6e0 [23827.529317] kfree_rcu_work+0x55f/0xb70 [23827.530024] process_one_work+0x8ac/0x14e0 [23827.530770] worker_thread+0x53b/0x1220 [23827.531480] kthread+0x328/0x3f0 [23827.532114] ret_from_fork+0x1f/0x30 [23827.532785] [23827.533147] Last potentially related work creation: [23827.534007] kasan_save_stack+0x1b/0x40 [23827.534710] kasan_record_aux_stack+0xab/0xc0 …

Record: OESA-2024-1706
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVOESA-2024-1707 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix use-after-free of encap entry in neigh update handler

Record: OESA-2024-1707
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2024:5101 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:5101
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:5102 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:5102
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:4509 8.0

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:4509
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-52803 5.5

Record: UBUNTU-CVE-2023-52803
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
[almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
[Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
(JIRA:AlmaLinux-31798)
(JIRA:AlmaLinux-10263)
(JIRA:AlmaLinux-40901)
(JIRA:AlmaLinux-43547)
(JIRA:AlmaLinux-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:AlmaLinux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: ALSA-2024:5101
Updated: 2026-11-02

OSVALSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: ALSA-2024:5102
Updated: 2026-11-02

OSVCLSA-2024-1727816002 No score

Fix of 60 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26752
- l2tp: pass correct message length to ip6_append_data
CVE-url: https://ubuntu.com/security/CVE-2023-52527
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
CVE-url: https://ubuntu.com/security/CVE-2024-43882
- exec: Fix ToCToU between perm check and set-uid/gid usage
CVE-url: https://ubuntu.com/security/CVE-2022-48943
- KVM: x86/mmu: make apf token non-zero to fix bug
CVE-url: https://ubuntu.com/security/CVE-2024-38630
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
CVE-url: https://ubuntu.com/security/CVE-2024-44987
- ipv6: prevent UAF in ip6_send_skb()
Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE- url: https://ubuntu.com/security/CVE-2022-48742
- rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
CVE-url: https://ubuntu.com/security/CVE-2024-44940
- fou: remove warn in gue_gro_receive on unsupported protocol
CVE-url: https://ubuntu.com/security/CVE-2024-41059
- hfsplus: fix uninit-value in copy_name
Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47576
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
CVE-url: https://ubuntu.com/security/CVE-2024-46673
- scsi: aacraid: Fix double-free on probe failure
CVE-url: https://ubuntu.com/security/CVE-2024-42271
- net/iucv: fix use after free in iucv_sock_close()
Bionic update: upstream stable patchset 2022-04-13 (LP: #1968932) // CVE- url: https://ubuntu.com/security/CVE-2022-48919
- cifs: fix double free race when mount fails in cifs_get_root()
CVE-url: https://ubuntu.com/security/CVE-2024-43858
- jfs: Fix array-index-out-of-bounds in diFree
CVE-url: https://ubuntu.com/security/CVE-2024-41071
- wifi: mac80211: Avoid address calculations via out of bounds array indexing
CVE-url: https://ubuntu.com/security/CVE-2024-42301
- dev/parport: fix the array out-of-bounds risk
CVE-url: https://ubuntu.com/security/CVE-2024-46674
- usb: dwc3: st: fix probed platform device ref count on probe error path
CVE-url: https://ubuntu.com/security/CVE-2024-43900
- media: xc2028: avoid use-after-free in load_firmware_cb()
CVE-url: https://ubuntu.com/security/CVE-2024-42284
- tipc: Return non-zero value from tipc_udp_addr2str() on error
Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47589
- igbvf: fix double free in igbvf_probe
Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47600
- dm btree remove: fix use after free in rebalance_children()
CVE-url: https://ubuntu.com/security/CVE-2024-44998
- atm: idt77252: prevent use after free in dequeue_rx()
CVE-url: https://ubuntu.com/security/CVE-2024-42280
- mISDN: Fix a use after free in hfcmulti_tx()
CVE-url: https://ubuntu.com/security/CVE-2024-42094
- net/iucv: Avoid explicit cpumask var allocation on stack
CVE-url: https://ubuntu.com/security/CVE-2024-39499
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
CVE-url: https://ubuntu.com/security/CVE-2024-42105
- nilfs2: fix inode number range checks
CVE-url: https://ubuntu.com/security/CVE-2024-40988
- drm/radeon: fix UBSAN warning in kv_dpm.c
CVE-url: https://ubuntu.com/security/CVE-2024-40916
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
CVE-url: https://ubuntu.com/security/CVE-2024-40904
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
CVE-url: https://ubuntu.com/security/CVE-2024-42106
- inet_diag: Initialize pad field in struct…

Record: CLSA-2024-1727816002
Updated: 2026-11-02

OSVCLSA-2024-1727816710 No score

Fix of 60 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26752
- l2tp: pass correct message length to ip6_append_data
CVE-url: https://ubuntu.com/security/CVE-2023-52527
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
CVE-url: https://ubuntu.com/security/CVE-2024-43882
- exec: Fix ToCToU between perm check and set-uid/gid usage
CVE-url: https://ubuntu.com/security/CVE-2022-48943
- KVM: x86/mmu: make apf token non-zero to fix bug
CVE-url: https://ubuntu.com/security/CVE-2024-38630
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
CVE-url: https://ubuntu.com/security/CVE-2024-44987
- ipv6: prevent UAF in ip6_send_skb()
Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE- url: https://ubuntu.com/security/CVE-2022-48742
- rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
CVE-url: https://ubuntu.com/security/CVE-2024-44940
- fou: remove warn in gue_gro_receive on unsupported protocol
CVE-url: https://ubuntu.com/security/CVE-2024-41059
- hfsplus: fix uninit-value in copy_name
Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47576
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
CVE-url: https://ubuntu.com/security/CVE-2024-46673
- scsi: aacraid: Fix double-free on probe failure
CVE-url: https://ubuntu.com/security/CVE-2024-42271
- net/iucv: fix use after free in iucv_sock_close()
Bionic update: upstream stable patchset 2022-04-13 (LP: #1968932) // CVE- url: https://ubuntu.com/security/CVE-2022-48919
- cifs: fix double free race when mount fails in cifs_get_root()
CVE-url: https://ubuntu.com/security/CVE-2024-43858
- jfs: Fix array-index-out-of-bounds in diFree
CVE-url: https://ubuntu.com/security/CVE-2024-41071
- wifi: mac80211: Avoid address calculations via out of bounds array indexing
CVE-url: https://ubuntu.com/security/CVE-2024-42301
- dev/parport: fix the array out-of-bounds risk
CVE-url: https://ubuntu.com/security/CVE-2024-46674
- usb: dwc3: st: fix probed platform device ref count on probe error path
CVE-url: https://ubuntu.com/security/CVE-2024-43900
- media: xc2028: avoid use-after-free in load_firmware_cb()
CVE-url: https://ubuntu.com/security/CVE-2024-42284
- tipc: Return non-zero value from tipc_udp_addr2str() on error
Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47589
- igbvf: fix double free in igbvf_probe
Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47600
- dm btree remove: fix use after free in rebalance_children()
CVE-url: https://ubuntu.com/security/CVE-2024-44998
- atm: idt77252: prevent use after free in dequeue_rx()
CVE-url: https://ubuntu.com/security/CVE-2024-42280
- mISDN: Fix a use after free in hfcmulti_tx()
CVE-url: https://ubuntu.com/security/CVE-2024-42094
- net/iucv: Avoid explicit cpumask var allocation on stack
CVE-url: https://ubuntu.com/security/CVE-2024-39499
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
CVE-url: https://ubuntu.com/security/CVE-2024-42105
- nilfs2: fix inode number range checks
CVE-url: https://ubuntu.com/security/CVE-2024-40988
- drm/radeon: fix UBSAN warning in kv_dpm.c
CVE-url: https://ubuntu.com/security/CVE-2024-40916
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
CVE-url: https://ubuntu.com/security/CVE-2024-40904
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
CVE-url: https://ubuntu.com/security/CVE-2024-42106
- inet_diag: Initialize pad field in struct…

Record: CLSA-2024-1727816710
Updated: 2026-11-02

OSVCLSA-2024-1727817133 No score

Fix of 73 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26752
- l2tp: pass correct message length to ip6_append_data
CVE-url: https://ubuntu.com/security/CVE-2021-47188
- scsi: ufs: core: Improve SCSI abort handling
CVE-url: https://ubuntu.com/security/CVE-2024-26677
- rxrpc: Fix delayed ACKs to not set the reference serial number
CVE-url: https://ubuntu.com/security/CVE-2023-52527
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
CVE-url: https://ubuntu.com/security/CVE-2024-43882
- exec: Fix ToCToU between perm check and set-uid/gid usage
CVE-url: https://ubuntu.com/security/CVE-2022-48943
- KVM: x86/mmu: make apf token non-zero to fix bug
CVE-url: https://ubuntu.com/security/CVE-2024-38630
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
CVE-url: https://ubuntu.com/security/CVE-2024-44987
- ipv6: prevent UAF in ip6_send_skb()
CVE-url: https://ubuntu.com/security/CVE-2024-42285
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
CVE-url: https://ubuntu.com/security/CVE-2022-48733
- btrfs: fix use-after-free after failure to create a snapshot
CVE-url: https://ubuntu.com/security/CVE-2024-44940
- fou: remove warn in gue_gro_receive on unsupported protocol
CVE-url: https://ubuntu.com/security/CVE-2024-41059
- hfsplus: fix uninit-value in copy_name
CVE-url: https://ubuntu.com/security/CVE-2024-46673
- scsi: aacraid: Fix double-free on probe failure
CVE-url: https://ubuntu.com/security/CVE-2024-42313
- media: venus: fix use after free in vdec_close
CVE-url: https://ubuntu.com/security/CVE-2024-44999
- gtp: pull network headers in gtp_dev_xmit()
CVE-url: https://ubuntu.com/security/CVE-2024-42271
- net/iucv: fix use after free in iucv_sock_close()
CVE-url: https://ubuntu.com/security/CVE-2024-44942
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
CVE-url: https://ubuntu.com/security/CVE-2024-43858
- jfs: Fix array-index-out-of-bounds in diFree
CVE-url: https://ubuntu.com/security/CVE-2024-41071
- wifi: mac80211: Avoid address calculations via out of bounds array indexing
CVE-url: https://ubuntu.com/security/CVE-2024-42301
- dev/parport: fix the array out-of-bounds risk
CVE-url: https://ubuntu.com/security/CVE-2024-46674
- usb: dwc3: st: fix probed platform device ref count on probe error path
CVE-url: https://ubuntu.com/security/CVE-2024-43900
- media: xc2028: avoid use-after-free in load_firmware_cb()
CVE-url: https://ubuntu.com/security/CVE-2024-42284
- tipc: Return non-zero value from tipc_udp_addr2str() on error
CVE-url: https://ubuntu.com/security/CVE-2024-44998
- atm: idt77252: prevent use after free in dequeue_rx()
CVE-url: https://ubuntu.com/security/CVE-2024-42280
- mISDN: Fix a use after free in hfcmulti_tx()
CVE-url: https://ubuntu.com/security/CVE-2024-39503
- netns: add pre_exit method to struct pernet_operations
- netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
CVE-url: https://ubuntu.com/security/CVE-2024-39499
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
CVE-url: https://ubuntu.com/security/CVE-2024-40988
- drm/radeon: fix UBSAN warning in kv_dpm.c
CVE-url: https://ubuntu.com/security/CVE-2024-40916
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
CVE-url: https://ubuntu.com/security/CVE-2024-40904
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
CVE-url: https://ubuntu.com/security/CVE-2024-39506
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
CVE-url: https://ubuntu.com/security/CVE-2024-42106
- inet_diag: Initialize pad field in struct inet_diag_req_v2
CVE-url:…

Record: CLSA-2024-1727817133
Updated: 2026-11-02

OSVCLSA-2024-1727817159 No score

Fix of 73 CVEs

[ Ubuntu: 4.15.0-237.248 ]

CVE-url: https://ubuntu.com/security/CVE-2024-26752
- l2tp: pass correct message length to ip6_append_data
CVE-url: https://ubuntu.com/security/CVE-2021-47188
- scsi: ufs: core: Improve SCSI abort handling
CVE-url: https://ubuntu.com/security/CVE-2024-26677
- rxrpc: Fix delayed ACKs to not set the reference serial number
CVE-url: https://ubuntu.com/security/CVE-2023-52527
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
CVE-url: https://ubuntu.com/security/CVE-2024-43882
- exec: Fix ToCToU between perm check and set-uid/gid usage
CVE-url: https://ubuntu.com/security/CVE-2022-48943
- KVM: x86/mmu: make apf token non-zero to fix bug
CVE-url: https://ubuntu.com/security/CVE-2024-38630
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
CVE-url: https://ubuntu.com/security/CVE-2024-44987
- ipv6: prevent UAF in ip6_send_skb()
CVE-url: https://ubuntu.com/security/CVE-2024-42285
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
CVE-url: https://ubuntu.com/security/CVE-2022-48733
- btrfs: fix use-after-free after failure to create a snapshot
CVE-url: https://ubuntu.com/security/CVE-2024-44940
- fou: remove warn in gue_gro_receive on unsupported protocol
CVE-url: https://ubuntu.com/security/CVE-2024-41059
- hfsplus: fix uninit-value in copy_name
CVE-url: https://ubuntu.com/security/CVE-2024-46673
- scsi: aacraid: Fix double-free on probe failure
CVE-url: https://ubuntu.com/security/CVE-2024-42313
- media: venus: fix use after free in vdec_close
CVE-url: https://ubuntu.com/security/CVE-2024-44999
- gtp: pull network headers in gtp_dev_xmit()
CVE-url: https://ubuntu.com/security/CVE-2024-42271
- net/iucv: fix use after free in iucv_sock_close()
CVE-url: https://ubuntu.com/security/CVE-2024-44942
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
CVE-url: https://ubuntu.com/security/CVE-2024-43858
- jfs: Fix array-index-out-of-bounds in diFree
CVE-url: https://ubuntu.com/security/CVE-2024-41071
- wifi: mac80211: Avoid address calculations via out of bounds array indexing
CVE-url: https://ubuntu.com/security/CVE-2024-42301
- dev/parport: fix the array out-of-bounds risk
CVE-url: https://ubuntu.com/security/CVE-2024-46674
- usb: dwc3: st: fix probed platform device ref count on probe error path
CVE-url: https://ubuntu.com/security/CVE-2024-43900
- media: xc2028: avoid use-after-free in load_firmware_cb()
CVE-url: https://ubuntu.com/security/CVE-2024-42284
- tipc: Return non-zero value from tipc_udp_addr2str() on error
CVE-url: https://ubuntu.com/security/CVE-2024-44998
- atm: idt77252: prevent use after free in dequeue_rx()
CVE-url: https://ubuntu.com/security/CVE-2024-42280
- mISDN: Fix a use after free in hfcmulti_tx()
CVE-url: https://ubuntu.com/security/CVE-2024-39503
- netns: add pre_exit method to struct pernet_operations
- netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
CVE-url: https://ubuntu.com/security/CVE-2024-39499
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
CVE-url: https://ubuntu.com/security/CVE-2024-40988
- drm/radeon: fix UBSAN warning in kv_dpm.c
CVE-url: https://ubuntu.com/security/CVE-2024-40916
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
CVE-url: https://ubuntu.com/security/CVE-2024-40904
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
CVE-url: https://ubuntu.com/security/CVE-2024-39506
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
CVE-url: https://ubuntu.com/security/CVE-2024-42106
- inet_diag: Initialize pad field in struct inet_diag_req_v2 …

Record: CLSA-2024-1727817159
Updated: 2026-11-02

OSVCLSA-2024-1727817758 No score

Fix of 74 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26752
- l2tp: pass correct message length to ip6_append_data
CVE-url: https://ubuntu.com/security/CVE-2021-47188
- scsi: ufs: core: Improve SCSI abort handling
CVE-url: https://ubuntu.com/security/CVE-2024-26677
- rxrpc: Fix delayed ACKs to not set the reference serial number
CVE-url: https://ubuntu.com/security/CVE-2023-52527
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
CVE-url: https://ubuntu.com/security/CVE-2024-43882
- exec: Fix ToCToU between perm check and set-uid/gid usage
CVE-url: https://ubuntu.com/security/CVE-2022-48943
- KVM: x86/mmu: make apf token non-zero to fix bug
CVE-url: https://ubuntu.com/security/CVE-2024-38630
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
CVE-url: https://ubuntu.com/security/CVE-2024-44987
- ipv6: prevent UAF in ip6_send_skb()
CVE-url: https://ubuntu.com/security/CVE-2024-42285
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
CVE-url: https://ubuntu.com/security/CVE-2022-48733
- btrfs: fix use-after-free after failure to create a snapshot
CVE-url: https://ubuntu.com/security/CVE-2024-44940
- fou: remove warn in gue_gro_receive on unsupported protocol
CVE-url: https://ubuntu.com/security/CVE-2024-41059
- hfsplus: fix uninit-value in copy_name
CVE-url: https://ubuntu.com/security/CVE-2024-46673
- scsi: aacraid: Fix double-free on probe failure
CVE-url: https://ubuntu.com/security/CVE-2024-42313
- media: venus: fix use after free in vdec_close
CVE-url: https://ubuntu.com/security/CVE-2024-44999
- gtp: pull network headers in gtp_dev_xmit()
CVE-url: https://ubuntu.com/security/CVE-2024-42271
- net/iucv: fix use after free in iucv_sock_close()
CVE-url: https://ubuntu.com/security/CVE-2024-44942
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
CVE-url: https://ubuntu.com/security/CVE-2024-43858
- jfs: Fix array-index-out-of-bounds in diFree
CVE-url: https://ubuntu.com/security/CVE-2024-41071
- wifi: mac80211: Avoid address calculations via out of bounds array indexing
CVE-url: https://ubuntu.com/security/CVE-2024-42301
- dev/parport: fix the array out-of-bounds risk
CVE-url: https://ubuntu.com/security/CVE-2024-46674
- usb: dwc3: st: fix probed platform device ref count on probe error path
CVE-url: https://ubuntu.com/security/CVE-2024-43900
- media: xc2028: avoid use-after-free in load_firmware_cb()
CVE-url: https://ubuntu.com/security/CVE-2024-42284
- tipc: Return non-zero value from tipc_udp_addr2str() on error
CVE-url: https://ubuntu.com/security/CVE-2024-44998
- atm: idt77252: prevent use after free in dequeue_rx()
CVE-url: https://ubuntu.com/security/CVE-2024-42280
- mISDN: Fix a use after free in hfcmulti_tx()
CVE-url: https://ubuntu.com/security/CVE-2024-39503
- netns: add pre_exit method to struct pernet_operations
- netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
CVE-url: https://ubuntu.com/security/CVE-2024-39499
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
CVE-url: https://ubuntu.com/security/CVE-2024-40988
- drm/radeon: fix UBSAN warning in kv_dpm.c
CVE-url: https://ubuntu.com/security/CVE-2024-40916
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
CVE-url: https://ubuntu.com/security/CVE-2024-40904
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
CVE-url: https://ubuntu.com/security/CVE-2024-39506
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
CVE-url: https://ubuntu.com/security/CVE-2024-42106
- inet_diag: Initialize pad field in struct inet_diag_req_v2
CVE-url:…

Record: CLSA-2024-1727817758
Updated: 2026-11-02

OSV No score

SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix RPC client cleaned up the freed pipefs dentries

To fix this issue, rpc_remove_pipedir should check whether the current pipefs sb is consistent with the original pipefs sb.

This error can be catched by KASAN:

Record: CVE-2023-52803
Updated: 2026-11-02

OSVRLSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

Rocky Linux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux-23841)
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux-33437)
[Hyper-V][Rocky Linux-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux-40939)
(JIRA:Rocky Linux-31798)
(JIRA:Rocky Linux-10263)
(JIRA:Rocky Linux-40901)
(JIRA:Rocky Linux-43547)
(JIRA:Rocky Linux-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RLSA-2024:5101
Updated: 2026-11-02

OSVRLSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RLSA-2024:5102
Updated: 2026-11-02

OSVRXSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

Rocky Linux SIG Cloud8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux SIG Cloud-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux SIG Cloud-23841)
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux SIG Cloud-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux SIG Cloud-33437)
[Hyper-V][Rocky Linux SIG Cloud-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux SIG Cloud-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux SIG Cloud-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-40939)
(JIRA:Rocky Linux SIG Cloud-31798)
(JIRA:Rocky Linux SIG Cloud-10263)
(JIRA:Rocky Linux SIG Cloud-40901)
(JIRA:Rocky Linux SIG Cloud-43547)
(JIRA:Rocky Linux SIG Cloud-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux SIG Cloud-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RXSA-2024:5101
Updated: 2026-11-02

OSVSUSE-SU-2024:1979-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2022-48686: Fix UAF when detecting digest errors (bsc#1223948). Update blacklist.conf: remove entry
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2022-48697: Fix a use-after-free (bsc#1223922). Update blacklist.conf: drop entry from it
CVE-2024-26846: Do not wait in vain when unloading module (bsc#1223023).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2021-47246: Fix page reclaim for dead peer hairpin (bsc#1224831).
CVE-2023-52732: Blocklist the kclient when receiving corrupted snap trace (bsc#1225222 CVE-2023-52732).
CVE-2024-35936: Add missing mutex_unlock in btrfs_relocate_sys_chunks() (bsc#1224644)
CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2024-36029: Pervent access to suspended controller (bsc#1225708 CVE-2024-36029)
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2021-47352: Add validation for used length (bsc#1225124).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2021-47431: Fix gart.bo pin_count leak (bsc#1225390).
CVE-2024-35935: Handle path ref underflow in header iterate_inode_ref() (bsc#1224645)
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2021-47423: Fix file release memory leak (bsc#1225366).
CVE-2022-48710: Fix a possible null pointer dereference (bsc#1225230).
CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2024-35932: Do not check if plane->state->fb == state->fb (bsc#1224650).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2024-35809: Drain runtime-idle callbacks before driver removal (bsc#1224738).
CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
CVE-2024-35982: Avoid infinite loop trying to resize local TT (bsc#1224566)
CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960, CVE-2021-47277).
CVE-2024-35791: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (bsc#1224725).
CVE-2021-47401: Fix stack information leak (bsc#1225242).
CVE-2023-52867: Fix possible buffer overflow (bsc#1225009).
CVE-2023-52821: Fix a possible null pointer dereference (bsc#1225022).
CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
CVE-2021-47361: Fix error handling in mcb_alloc_bus() (bsc#1225151).
CVE-2023-52864: Fix opening of char device (bsc#1225132).
CVE-2022-48708: Fix potential NULL dereference (bsc#1224942).
CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648).
CVE-2021-47238: Fix memory leak in ip_mc_add1_src (bsc#1224847)
CVE-2023-52730: Fix possible resource leaks in some error paths (bsc#1224956).
CVE-2021-47355: Fix possible use-after-free in nicstar_cleanup() (bsc#1225141).
CVE-2021-47245: Fix out of bounds when parsing TCP options (bsc#1224838)
CVE-2024-35878: Prevent NULL pointer dereference in vsnprintf() (bsc#1224671).
CVE-2023-52747: Restore allocated resources on failed copyout (bsc#1224931) -…

Record: SUSE-SU-2024:1979-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1983-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2022-48686: Fix UAF when detecting digest errors (bsc#1223948).
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2022-48697: Fix a use-after-free (bsc#1223922).
CVE-2024-26846: Do not wait in vain when unloading module (bsc#1223023).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2021-47246: Fix page reclaim for dead peer hairpin (bsc#1224831).
CVE-2023-52732: Blocklist the kclient when receiving corrupted snap trace (bsc#1225222).
CVE-2024-35936: Add missing mutex_unlock in btrfs_relocate_sys_chunks() (bsc#1224644)
CVE-2021-47548: Fixed a possible array out-of-bounds (bsc#1225506)
CVE-2024-36029: Pervent access to suspended controller (bsc#1225708)
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2021-47352: Add validation for used length (bsc#1225124).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2021-47431: Fix gart.bo pin_count leak (bsc#1225390).
CVE-2024-35935: Handle path ref underflow in header iterate_inode_ref() (bsc#1224645)
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2021-47423: Fix file release memory leak (bsc#1225366).
CVE-2022-48710: Fix a possible null pointer dereference (bsc#1225230).
CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2024-35932: Do not check if plane->state->fb == state->fb (bsc#1224650).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2024-35809: Drain runtime-idle callbacks before driver removal (bsc#1224738).
CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
CVE-2024-35982: Avoid infinite loop trying to resize local TT (bsc#1224566)
CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960).
CVE-2024-35791: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (bsc#1224725).
CVE-2021-47401: Fix stack information leak (bsc#1225242).
CVE-2023-52867: Fix possible buffer overflow (bsc#1225009).
CVE-2023-52821: Fix a possible null pointer dereference (bsc#1225022).
CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
CVE-2021-47361: Fix error handling in mcb_alloc_bus() (bsc#1225151).
CVE-2023-52864: Fix opening of char device (bsc#1225132).
CVE-2022-48708: Fix potential NULL dereference (bsc#1224942).
CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648).
CVE-2021-47238: Fix memory leak in ip_mc_add1_src (bsc#1224847)
CVE-2023-52730: Fix possible resource leaks in some error paths (bsc#1224956).
CVE-2021-47355: Fix possible use-after-free in nicstar_cleanup() (bsc#1225141).
CVE-2021-47245: Fix out of bounds when parsing TCP options (bsc#1224838)
CVE-2024-35878: Prevent NULL pointer dereference in vsnprintf() (bsc#1224671).
CVE-2023-52747: Restore allocated resources on failed copyout (bsc#1224931)
CVE-2021-47249: Fix memory leak in rds_recvmsg (bsc#1224880)
CVE-2021-47397: Break out if skb_header_pointer returns NULL in…

Record: SUSE-SU-2024:1983-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
CVE-2024-27417: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721)
CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
CVE-2024-35791: Flush pages under…

Record: SUSE-SU-2024:2008-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2019-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-35869: Guarantee refcounted children from parent session (bsc#1224679).
CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2024-35964: Fixed not validating setsockopt user input (bsc#1224581).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
CVE-2024-35860: struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios (bsc#1224530).
CVE-2024-35852: Fixed memory leak when canceling rehash work (bsc#1224502).
CVE-2024-36006: Fixed incorrect list API usage (bsc#1224541).
CVE-2024-36007: Fixed warning during rehash (bsc#1224543).
CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
CVE-2024-35907: Call request_irq() after NAPI initialized (bsc#1224492).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure…

Record: SUSE-SU-2024:2019-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2184-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2021-47113: Abort btrfs rename_exchange if we fail to insert the second ref (bsc#1221543).
CVE-2021-47131: Fixed a use-after-free after the TLS device goes down and up (bsc#1221545).
CVE-2021-47206: Check return value after calling platform_get_resource() (bsc#1222894).
CVE-2021-47238: Fixed memory leak in ip_mc_add1_src (bsc#1224847)
CVE-2021-47245: Fixed out of bounds when parsing TCP options (bsc#1224838)
CVE-2021-47246: Fixed page reclaim for dead peer hairpin (CVE-2021-47246 bsc#1224831).
CVE-2021-47249: Fixed memory leak in rds_recvmsg (bsc#1224880)
CVE-2021-47250: Fixed memory leak in netlbl_cipsov4_add_std (bsc#1224827)
CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960).
CVE-2021-47281: Fixed race of snd_seq_timer_open() (bsc#1224983).
CVE-2021-47334: Fixed two use after free in ibmasm_init_one (bsc#1225112).
CVE-2021-47352: Add validation for used length (bsc#1225124).
CVE-2021-47355: Fixed possible use-after-free in nicstar_cleanup() (bsc#1225141).
CVE-2021-47357: Fixed possible use-after-free in ia_module_exit() (bsc#1225144).
CVE-2021-47361: Fixed error handling in mcb_alloc_bus() (bsc#1225151).
CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47397: Break out if skb_header_pointer returns NULL in sctp_rcv_ootb (bsc#1225082)
CVE-2021-47401: Fixed stack information leak (bsc#1225242).
CVE-2021-47423: Fixed file release memory leak (bsc#1225366).
CVE-2021-47431: Fixed gart.bo pin_count leak (bsc#1225390).
CVE-2021-47469: Add SPI fix commit to be ignored (bsc#1225347)
CVE-2021-47483: Fixed possible double-free in regcache_rbtree_exit() (bsc#1224907).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2022-48672: Fixed off-by-one error in unflatten_dt_nodes() (CVE-2022-48672 bsc#1223931).
CVE-2022-48686: Fixed UAF when detecting digest errors (bsc#1223948).
CVE-2022-48697: Fixed a use-after-free (bsc#1223922).
CVE-2022-48702: Fixed out of bounds access in snd_emu10k1_pcm_channel_alloc() (bsc#1223923).
CVE-2022-48704: Add a force flush to delay work when radeon (bsc#1223932)
CVE-2022-48708: Fixed potential NULL dereference (bsc#1224942).
CVE-2022-48710: Fixed a possible null pointer dereference (bsc#1225230).
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52691: Fixed a double-free in si_dpm_init (bsc#1224607).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2023-52730: Fixed possible resource leaks in some error paths (bsc#1224956).
CVE-2023-52732: Blocklist the kclient when…

Record: SUSE-SU-2024:2184-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26700: Fixed drm/amd/display: Fix MST Null Ptr for RV (bsc#1222870)
CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)
CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)
CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)
CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).
CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
CVE-2024-27042: Fixed potential out-of-bounds access in…

Record: SUSE-SU-2024:2190-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2571-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758).
CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52865: Add check for mtk_alloc_clk_data (bsc#1225086).
CVE-2023-52821: Fixed a possible null pointer dereference (bsc#1225022).
CVE-2023-52867: Fixed possible buffer overflow (bsc#1225009).
CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,).
CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
CVE-2023-52759: Ignore negated quota changes (bsc#1225560).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52864: Fixed opening of char device (bsc#1225132).
CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
CVE-2024-35843: iommu/vt-d: Use device rbtree in iopf reporting path (bsc#1224751).
CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799).
CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841).
CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879).
CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789).
CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
CVE-2024-38556:…

Record: SUSE-SU-2024:2571-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2896-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). -…

Record: SUSE-SU-2024:2896-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…

Record: SUSE-SU-2024:2973-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
CVE-2024-35890:…

Record: SUSE-SU-2025:20008-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…

Record: SUSE-SU-2025:20028-1
Updated: 2026-11-02

OSVUSN-7003-1 No score

linux, linux-aws, linux-azure, linux-bluefield, linux-gcp, linux-gkeop, linux-ibm, linux-kvm, linux-oracle vulnerabilities

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-40902)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

MIPS architecture;
PowerPC architecture;
x86 architecture;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Media drivers;
VMware VMCI Driver;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
USB subsystem;
JFFS2 file system;
JFS file system;
File systems infrastructure;
NILFS2 file system;
IOMMU subsystem;
Sun RPC protocol;
Netfilter;
Memory management;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
NET/ROM layer;
Network traffic control;
SoC Audio for Freescale CPUs drivers; (CVE-2024-40905, CVE-2024-41095, CVE-2024-41035, CVE-2024-36974, CVE-2024-40959, CVE-2024-40978, CVE-2024-42236, CVE-2024-40963, CVE-2024-40916, CVE-2024-41006, CVE-2024-39495, CVE-2023-52803, CVE-2024-42070, CVE-2024-41041, CVE-2024-42157, CVE-2024-36894, CVE-2024-42153, CVE-2024-42127, CVE-2024-42224, CVE-2024-40932, CVE-2024-42105, CVE-2024-40968, CVE-2024-41044, CVE-2024-41046, CVE-2023-52887, CVE-2024-42094, CVE-2024-40960, CVE-2024-41007, CVE-2024-40961, CVE-2024-39487, CVE-2024-39502, CVE-2024-42086, CVE-2024-36978, CVE-2024-39503, CVE-2024-41049, CVE-2024-42090, CVE-2024-42232, CVE-2024-39499, CVE-2024-40902, CVE-2024-37078, CVE-2024-39501, CVE-2024-42119, CVE-2024-40901, CVE-2024-42101, CVE-2024-42104, CVE-2024-42145, CVE-2024-41097, CVE-2024-40942, CVE-2024-41034, CVE-2024-40904, CVE-2024-41089, CVE-2024-42084, CVE-2024-42093, CVE-2024-40945, CVE-2024-40958, CVE-2024-42124, CVE-2024-40987, CVE-2024-40912, CVE-2024-39506, CVE-2024-40941, CVE-2024-39509, CVE-2024-40974, CVE-2024-39505, CVE-2024-42115, CVE-2024-40988, CVE-2024-40995, CVE-2024-42097, CVE-2024-41087, CVE-2024-42106, CVE-2024-40984, CVE-2024-40981, CVE-2024-42102, CVE-2024-42148, CVE-2024-42154, CVE-2024-42096, CVE-2024-40934, CVE-2024-40980, CVE-2024-42076, CVE-2024-40943, CVE-2024-42092, CVE-2024-42089, CVE-2024-42223, CVE-2024-38619, CVE-2024-42087, CVE-2024-39469)

Record: USN-7003-1
Updated: 2026-11-02

OSVUSN-7003-2 No score

linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

MIPS architecture;
PowerPC architecture;
x86 architecture;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Media drivers;
VMware VMCI Driver;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
USB subsystem;
JFFS2 file system;
JFS file system;
File systems infrastructure;
NILFS2 file system;
IOMMU subsystem;
Sun RPC protocol;
Netfilter;
Memory management;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
NET/ROM layer;
Network traffic control;
SoC Audio for Freescale CPUs drivers; (CVE-2024-40941, CVE-2024-42086, CVE-2024-41097, CVE-2024-40958, CVE-2024-41089, CVE-2024-40942, CVE-2024-40968, CVE-2024-40934, CVE-2024-40902, CVE-2024-42124, CVE-2023-52887, CVE-2024-42115, CVE-2024-41041, CVE-2024-39501, CVE-2024-40932, CVE-2024-42102, CVE-2024-40960, CVE-2024-39487, CVE-2024-39503, CVE-2024-40945, CVE-2024-40959, CVE-2024-40987, CVE-2024-40995, CVE-2024-40988, CVE-2024-42084, CVE-2024-40943, CVE-2024-42070, CVE-2024-40904, CVE-2024-41049, CVE-2024-41046, CVE-2024-39502, CVE-2024-42097, CVE-2024-42090, CVE-2024-42236, CVE-2024-42223, CVE-2024-42094, CVE-2024-41007, CVE-2024-42105, CVE-2024-41035, CVE-2024-41087, CVE-2024-42157, CVE-2024-39495, CVE-2024-36894, CVE-2024-40916, CVE-2024-39469, CVE-2024-40974, CVE-2024-42153, CVE-2024-36974, CVE-2024-42096, CVE-2024-42232, CVE-2024-40980, CVE-2024-41034, CVE-2024-42087, CVE-2024-42093, CVE-2024-41095, CVE-2024-42145, CVE-2024-42148, CVE-2023-52803, CVE-2024-39499, CVE-2024-42104, CVE-2024-42224, CVE-2024-37078, CVE-2024-42092, CVE-2024-39505, CVE-2024-38619, CVE-2024-42106, CVE-2024-40978, CVE-2024-41044, CVE-2024-42089, CVE-2024-40981, CVE-2024-42154, CVE-2024-36978, CVE-2024-42076, CVE-2024-40984, CVE-2024-42127, CVE-2024-42119, CVE-2024-40961, CVE-2024-39509, CVE-2024-42101, CVE-2024-40901, CVE-2024-40963, CVE-2024-40905, CVE-2024-39506, CVE-2024-40912, CVE-2024-41006)

Record: USN-7003-2
Updated: 2026-11-02

OSVUSN-7003-3 No score

linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

MIPS architecture;
PowerPC architecture;
x86 architecture;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Media drivers;
VMware VMCI Driver;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
USB subsystem;
JFFS2 file system;
JFS file system;
File systems infrastructure;
NILFS2 file system;
IOMMU subsystem;
Sun RPC protocol;
Netfilter;
Memory management;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
NET/ROM layer;
Network traffic control;
SoC Audio for Freescale CPUs drivers; (CVE-2024-42094, CVE-2024-42154, CVE-2024-42101, CVE-2024-40995, CVE-2024-40959, CVE-2024-42076, CVE-2024-40961, CVE-2024-42096, CVE-2024-42092, CVE-2024-39501, CVE-2024-41046, CVE-2024-42087, CVE-2024-39502, CVE-2024-42090, CVE-2024-40974, CVE-2024-40942, CVE-2024-39509, CVE-2024-40934, CVE-2024-42148, CVE-2024-42127, CVE-2024-42115, CVE-2024-39505, CVE-2024-36978, CVE-2024-39503, CVE-2024-40912, CVE-2024-41034, CVE-2024-42119, CVE-2024-41006, CVE-2024-40902, CVE-2024-40968, CVE-2024-39499, CVE-2024-42093, CVE-2024-40941, CVE-2024-42106, CVE-2024-42145, CVE-2024-41097, CVE-2024-36974, CVE-2024-41044, CVE-2024-39495, CVE-2024-40981, CVE-2024-40987, CVE-2024-42232, CVE-2024-40905, CVE-2024-39506, CVE-2024-42153, CVE-2024-41007, CVE-2024-40978, CVE-2024-40960, CVE-2023-52887, CVE-2024-41087, CVE-2024-41049, CVE-2024-42086, CVE-2024-40958, CVE-2024-40980, CVE-2024-42084, CVE-2024-42224, CVE-2024-39487, CVE-2024-40943, CVE-2024-40984, CVE-2024-41095, CVE-2024-41035, CVE-2024-41089, CVE-2024-36894, CVE-2024-42104, CVE-2024-40988, CVE-2024-42105, CVE-2024-39469, CVE-2024-40901, CVE-2024-40963, CVE-2024-42097, CVE-2024-42089, CVE-2024-42124, CVE-2024-42223, CVE-2023-52803, CVE-2024-42070, CVE-2024-42157, CVE-2024-42102, CVE-2024-40916, CVE-2024-40904, CVE-2024-41041, CVE-2024-40932, CVE-2024-40945, CVE-2024-38619, CVE-2024-37078, CVE-2024-42236)

Record: USN-7003-3
Updated: 2026-11-02

OSVUSN-7003-4 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

MIPS architecture;
PowerPC architecture;
x86 architecture;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Media drivers;
VMware VMCI Driver;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
USB subsystem;
JFFS2 file system;
JFS file system;
File systems infrastructure;
NILFS2 file system;
IOMMU subsystem;
Sun RPC protocol;
Netfilter;
Memory management;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
NET/ROM layer;
Network traffic control;
SoC Audio for Freescale CPUs drivers; (CVE-2024-41034, CVE-2024-40984, CVE-2024-40987, CVE-2024-42119, CVE-2024-42224, CVE-2024-42101, CVE-2024-42096, CVE-2024-41095, CVE-2024-42087, CVE-2024-42104, CVE-2024-42148, CVE-2024-39495, CVE-2024-40980, CVE-2024-42223, CVE-2024-40961, CVE-2024-40988, CVE-2024-42127, CVE-2024-42090, CVE-2024-42236, CVE-2024-40995, CVE-2024-41007, CVE-2024-40968, CVE-2024-40901, CVE-2024-42097, CVE-2024-41041, CVE-2024-36974, CVE-2024-42115, CVE-2024-40978, CVE-2024-38619, CVE-2024-41049, CVE-2024-41035, CVE-2024-41044, CVE-2024-42154, CVE-2024-39499, CVE-2024-42070, CVE-2024-40959, CVE-2024-39487, CVE-2024-42157, CVE-2024-40916, CVE-2024-42076, CVE-2024-41087, CVE-2024-42094, CVE-2024-42124, CVE-2024-40905, CVE-2024-42145, CVE-2024-40963, CVE-2024-36894, CVE-2024-40942, CVE-2024-42092, CVE-2024-42153, CVE-2024-41089, CVE-2024-40912, CVE-2023-52887, CVE-2024-40934, CVE-2024-41006, CVE-2024-39501, CVE-2024-42084, CVE-2024-39506, CVE-2024-39509, CVE-2024-40943, CVE-2024-42106, CVE-2024-42093, CVE-2024-40902, CVE-2024-42086, CVE-2024-40958, CVE-2024-39502, CVE-2024-42232, CVE-2024-42089, CVE-2024-37078, CVE-2024-39469, CVE-2024-41046, CVE-2024-42102, CVE-2024-40974, CVE-2024-39505, CVE-2024-40960, CVE-2024-42105, CVE-2024-40932, CVE-2024-40904, CVE-2024-40981, CVE-2024-39503, CVE-2024-41097, CVE-2024-40941, CVE-2024-36978, CVE-2023-52803, CVE-2024-40945)

Record: USN-7003-4
Updated: 2026-11-02

OSVUSN-7003-5 No score

linux-raspi-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

MIPS architecture;
PowerPC architecture;
x86 architecture;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Media drivers;
VMware VMCI Driver;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
USB subsystem;
JFFS2 file system;
JFS file system;
File systems infrastructure;
NILFS2 file system;
IOMMU subsystem;
Sun RPC protocol;
Netfilter;
Memory management;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
NET/ROM layer;
Network traffic control;
SoC Audio for Freescale CPUs drivers; (CVE-2024-40916, CVE-2024-41035, CVE-2024-39469, CVE-2024-39499, CVE-2024-36978, CVE-2024-42092, CVE-2024-42087, CVE-2024-42102, CVE-2024-40978, CVE-2024-40902, CVE-2024-36974, CVE-2024-42096, CVE-2024-40974, CVE-2024-40904, CVE-2024-40905, CVE-2024-42153, CVE-2024-42106, CVE-2024-42070, CVE-2024-41097, CVE-2024-42090, CVE-2024-42105, CVE-2024-42104, CVE-2024-39502, CVE-2024-41089, CVE-2024-40945, CVE-2024-38619, CVE-2024-40961, CVE-2024-42127, CVE-2024-39487, CVE-2024-40988, CVE-2024-41044, CVE-2024-42236, CVE-2024-40942, CVE-2024-39506, CVE-2024-39509, CVE-2024-39503, CVE-2024-40934, CVE-2024-40959, CVE-2024-42101, CVE-2024-40960, CVE-2024-40968, CVE-2024-41087, CVE-2023-52803, CVE-2024-40987, CVE-2024-40943, CVE-2024-42089, CVE-2023-52887, CVE-2024-37078, CVE-2024-42148, CVE-2024-36894, CVE-2024-42097, CVE-2024-41006, CVE-2024-40984, CVE-2024-40963, CVE-2024-42223, CVE-2024-40912, CVE-2024-42086, CVE-2024-41049, CVE-2024-42157, CVE-2024-41034, CVE-2024-42145, CVE-2024-42124, CVE-2024-40995, CVE-2024-42224, CVE-2024-40981, CVE-2024-41095, CVE-2024-40901, CVE-2024-42115, CVE-2024-41041, CVE-2024-41007, CVE-2024-39505, CVE-2024-40932, CVE-2024-39495, CVE-2024-40980, CVE-2024-42084, CVE-2024-41046, CVE-2024-42119, CVE-2024-42076, CVE-2024-42232, CVE-2024-39501, CVE-2024-40958, CVE-2024-40941, CVE-2024-42093, CVE-2024-42094, CVE-2024-42154)

Record: USN-7003-5
Updated: 2026-11-02

OSVUSN-7006-1 No score

linux-iot vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference vulnerability. A privileged local attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-24860)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

MIPS architecture;
PowerPC architecture;
SuperH RISC architecture;
x86 architecture;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
USB subsystem;
GFS2 file system;
JFFS2 file system;
JFS file system;
File systems infrastructure;
NILFS2 file system;
IOMMU subsystem;
Sun RPC protocol;
Netfilter;
Memory management;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
NET/ROM layer;
Network traffic control;
HD-audio driver;
SoC Audio for Freescale CPUs drivers; (CVE-2024-42154, CVE-2024-42093, CVE-2024-42096, CVE-2024-40984, CVE-2024-39502, CVE-2024-36901, CVE-2024-41044, CVE-2024-40961, CVE-2024-40981, CVE-2024-42236, CVE-2024-42232, CVE-2024-41041, CVE-2024-40958, CVE-2024-40905, CVE-2024-42084, CVE-2024-40934, CVE-2024-42124, CVE-2024-39505, CVE-2024-39506, CVE-2024-39501, CVE-2021-46926, CVE-2024-40941, CVE-2024-42145, CVE-2024-41089, CVE-2024-40932, CVE-2024-42224, CVE-2024-41097, CVE-2024-40959, CVE-2024-42157, CVE-2024-39469, CVE-2024-39499, CVE-2024-40974, CVE-2024-42094, CVE-2024-36894, CVE-2024-42087, CVE-2024-42104, CVE-2023-52803, CVE-2024-41034, CVE-2024-40995, CVE-2023-52629, CVE-2024-40912, CVE-2024-39484, CVE-2024-41006, CVE-2023-52760, CVE-2024-41095, CVE-2024-41046, CVE-2024-42070, CVE-2023-52887, CVE-2024-40960, CVE-2024-41007, CVE-2024-40901, CVE-2024-42119, CVE-2024-40987, CVE-2024-42148, CVE-2024-41049, CVE-2024-40963, CVE-2024-41087, CVE-2024-42223, CVE-2024-42090, CVE-2024-42105, CVE-2024-42089, CVE-2024-40916, CVE-2024-40942, CVE-2024-40978, CVE-2024-40902, CVE-2024-26921, CVE-2024-39495, CVE-2024-40943, CVE-2024-36978, CVE-2024-26929, CVE-2024-40988, CVE-2024-39503, CVE-2024-42101, CVE-2024-40904, CVE-2024-42086, CVE-2024-42106, CVE-2024-26830, CVE-2024-41035, CVE-2024-42153, CVE-2024-39509, CVE-2024-37078, CVE-2024-42076, CVE-2024-36974, CVE-2024-40980, CVE-2024-40945, CVE-2024-39487, CVE-2024-42092, CVE-2024-38619, CVE-2024-42127, CVE-2024-40968, CVE-2024-42115, CVE-2024-42102, CVE-2024-42097)

Record: USN-7006-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-core` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-cross-headers` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-core` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-devel` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-modules` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-doc` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-headers` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-modules` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-modules-extra` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools-libs` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`perf` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`python3-perf` AlmaLinux:8	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-rt` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-core` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-core` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-devel` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-devel` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-kvm` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-modules` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-modules-extra` AlmaLinux:8	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`linux-lts` Alpaquita:23	6.1.62-r0 up to 6.1.68-r0	6.1.68-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`linux-buildinfo-4.4.0-265-tuxcare.els36-generic` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-buildinfo-4.4.0-265-tuxcare.els36-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-cloud-tools-4.4.0-265-tuxcare.els36` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-cloud-tools-4.4.0-265-tuxcare.els36-generic` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-cloud-tools-4.4.0-265-tuxcare.els36-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-cloud-tools-common` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-cloud-tools-generic` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-cloud-tools-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-crashdump` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-doc` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-generic` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-headers-4.4.0-265-tuxcare.els36` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-headers-4.4.0-265-tuxcare.els36-generic` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-headers-4.4.0-265-tuxcare.els36-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-headers-generic` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-headers-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-image-generic` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-image-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-image-unsigned-4.4.0-265-tuxcare.els36-generic` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-image-unsigned-4.4.0-265-tuxcare.els36-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-libc-dev` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-modules-4.4.0-265-tuxcare.els36-generic` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-modules-4.4.0-265-tuxcare.els36-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-modules-extra-4.4.0-265-tuxcare.els36-generic` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-source` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-source-4.4.0` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-tools-4.4.0-265-tuxcare.els36` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-tools-4.4.0-265-tuxcare.els36-generic` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-tools-4.4.0-265-tuxcare.els36-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-tools-common` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-tools-generic` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-tools-host` TuxCare:Ubuntu:16.04	before 4.4.0-265.299	4.4.0-265.299
`linux-tools-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0.265.299	4.4.0.265.299
`linux-buildinfo-4.15.0-237-tuxcare.els25-generic` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-buildinfo-4.15.0-237-tuxcare.els25-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-cloud-tools-4.15.0-237-tuxcare.els25` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-cloud-tools-4.15.0-237-tuxcare.els25-generic` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-cloud-tools-4.15.0-237-tuxcare.els25-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-cloud-tools-common` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-doc` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-headers-4.15.0-237-tuxcare.els25` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-headers-4.15.0-237-tuxcare.els25-generic` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-headers-4.15.0-237-tuxcare.els25-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-image-unsigned-4.15.0-237-tuxcare.els25-generic` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-image-unsigned-4.15.0-237-tuxcare.els25-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-libc-dev` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-modules-4.15.0-237-tuxcare.els25-generic` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-modules-4.15.0-237-tuxcare.els25-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-modules-extra-4.15.0-237-tuxcare.els25-generic` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-source-4.15.0` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-tools-4.15.0-237-tuxcare.els25` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`linux-tools-4.15.0-237-tuxcare.els25-generic` TuxCare:Ubuntu:18.04	before 4.15.0-237.248	4.15.0-237.248
`Kernel` Linux	3.4.0 up to 4.19.318, 4.20.0 up to 5.4.280, 5.5.0 up to 5.10.202, 5.11.0 up to 5.15.140, 5.16.0 up to 6.1.64, 6.2.0 up to 6.5.13, 6.6.0 up to 6.6.3	4.19.3185.4.2805.10.2025.15.1406.1.646.5.136.6.3
`linux` Debian:12	before 6.1.64-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 6 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+1	6.1.64-1
`linux` Debian:13	before 6.6.8-1	6.6.8-1
`linux` Debian:14	before 6.6.8-1	6.6.8-1
`kernel` openEuler:20.03-LTS-SP4	before 4.19.90-2406.2.0.0281.oe2003sp4	4.19.90-2406.2.0.0281.oe2003sp4
`kernel` openEuler:22.03-LTS-SP1	before 5.10.0-136.79.0.159.oe2203sp1	5.10.0-136.79.0.159.oe2203sp1
`kernel` openEuler:22.03-LTS-SP3	before 5.10.0-207.0.0.116.oe2203sp3	5.10.0-207.0.0.116.oe2203sp3
`bpftool` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-kvm` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debuginfo` Red Hat:enterprise_linux:8::nfv	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel` Rocky Linux:8	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-rt` Rocky Linux:8	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel` Rocky Linux:8	before 0:4.18.0-553.16.1.el8_10.cloud.0.1	0:4.18.0-553.16.1.el8_10.cloud.0.1
`kernel-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-source-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-syms-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-source-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-syms-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-rt` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-rt_debug` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-source-rt` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-syms-rt` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-livepatch-SLE15-SP5-RT_Update_16` SUSE:Linux Enterprise Live Patching 15 SP5	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-rt` SUSE:Real Time Module 15 SP5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt_debug` openSUSE:Leap 15.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-syms-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-source-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-syms-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kgraft-patch-SLE12-SP5_Update_57` SUSE:Linux Enterprise Live Patching 12 SP5	before 1-8.3.1	1-8.3.1
`kernel-docs` SUSE:Linux Enterprise Software Development Kit 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-obs-build` SUSE:Linux Enterprise Software Development Kit 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 12 SP5	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5	before 5.14.21-150500.55.68.1.150500.6.31.1	5.14.21-150500.55.68.1.150500.6.31.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5	before 5.14.21-150500.55.68.1.150500.6.31.1	5.14.21-150500.55.68.1.150500.6.31.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-livepatch-SLE15-SP5_Update_15` SUSE:Linux Enterprise Live Patching 15 SP5	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`dtb-aarch64` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-64kb` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-debug` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default-base` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1.150500.6.31.1	5.14.21-150500.55.68.1.150500.6.31.1
`kernel-docs` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-kvmsmall` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-obs-build` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-obs-qa` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-source` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-syms` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-zfcpdump` openSUSE:Leap 15.5	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.14.2.150600.12.4.3	6.4.0-150600.23.14.2.150600.12.4.3
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`dtb-aarch64` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-64kb` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-debug` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default-base` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.2.150600.12.4.3	6.4.0-150600.23.14.2.150600.12.4.3
`kernel-docs` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-kvmsmall` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-build` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-qa` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-source` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-syms` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-zfcpdump` openSUSE:Leap 15.6	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-source-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-syms-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.8.1	6.4.0-150600.8.8.1
`kernel-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` openSUSE:Leap 15.6	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`linux` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less 3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70	None known
`linux-aws` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	None known
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	None known
`linux` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	None known
`linux-aws` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-kvm` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	None known
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1132.142~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1132.142~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1137.144~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1137.144~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1136.145~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1136.145~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-195.215~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-195.215~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1079.84~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	5.4.0-1079.84~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1131.140~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1131.140~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1116.128~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1116.128~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-195.215, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-195.215
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1132.142, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1132.142

History

History
Recorded	Changed	Sources
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-52803 is a medium vulnerability (CVSS 5.5) in Linux, published May 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. Fixed in bpftool 4.18.0-553.16.1.el8_10.