CVE-2023-52847
media: bttv: fix use after free error due to btv->timeout timer
In the Linux kernel, the following vulnerability has been resolved:
media: bttv: fix use after free error due to btv->timeout timer
There may be some a race condition between timer function bttv_irq_timeout and bttv_remove. The timer is setup in probe and there is no timer_delete operation in remove function. When it hit kfree btv, the function might still be invoked, which will cause use after free bug.
This bug is found by static analysis, it may be false positive.
Fix it by adding del_timer_sync invoking to the remove function.
cpu0 cpu1 bttv_probe ->timer_setup ->bttv_set_dma ->mod_timer; bttv_remove ->kfree(btv); ->bttv_irq_timeout ->USE btv
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.8
media: bttv: fix use after free error due to btv->timeout timer
In the Linux kernel, the following vulnerability has been resolved:
media: bttv: fix use after free error due to btv->timeout timer
There may be some a race condition between timer function bttv_irq_timeout and bttv_remove. The timer is setup in probe and there is no timer_delete operation in remove function. When it hit kfree btv, the function might still be invoked, which will cause use after free bug.
This bug is found by static analysis, it may be false positive.
Fix it by adding del_timer_sync invoking to the remove function.
cpu0 cpu1 bttv_probe ->timer_setup ->bttv_set_dma ->mod_timer; bttv_remove ->kfree(btv); ->bttv_irq_timeout ->USE btv
- Record
CVE-2023-52847- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2023-59560
7.8
In the Linux kernel, the following vulnerability has been resolved:
media: bttv: fix use after free error due to btv->timeout timer
There may be some a race condition between timer function bttv_irq_timeout and bttv_remove. The timer is setup in probe and there is no timer_delete operation in remove function. When it hit kfree btv, the function might still be invoked, which will cause use after free bug.
This bug is found by static analysis, it may be false positive.
Fix it by adding del_timer_sync invoking to the remove function.
cpu0 cpu1 bttv_probe ->timer_setup ->bttv_set_dma ->mod_timer; bttv_remove ->kfree(btv); ->bttv_irq_timeout ->USE btv
- Record
EUVD-2023-59560- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jv5m-87g4-wp39
7.0
In the Linux kernel, the following vulnerability has been resolved: media: bttv: fix use after...
In the Linux kernel, the following vulnerability has been resolved:
media: bttv: fix use after free error due to btv->timeout timer
There may be some a race condition between timer function bttv_irq_timeout and bttv_remove. The timer is setup in probe and there is no timer_delete operation in remove function. When it hit kfree btv, the function might still be invoked, which will cause use after free bug.
This bug is found by static analysis, it may be false positive.
Fix it by adding del_timer_sync invoking to the remove function.
cpu0 cpu1 bttv_probe ->timer_setup ->bttv_set_dma ->mod_timer; bttv_remove ->kfree(btv); ->bttv_irq_timeout ->USE btv
- Record
GHSA-jv5m-87g4-wp39- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-362
- Updated
- 2026-11-02
NVD
7.8
In the Linux kernel, the following vulnerability has been resolved:
media: bttv: fix use after free error due to btv->timeout timer
There may be some a race condition between timer function bttv_irq_timeout and bttv_remove. The timer is setup in probe and there is no timer_delete operation in remove function. When it hit kfree btv, the function might still be invoked, which will cause use after free bug.
This bug is found by static analysis, it may be false positive.
Fix it by adding del_timer_sync invoking to the remove function.
cpu0 cpu1 bttv_probe ->timer_setup ->bttv_set_dma ->mod_timer; bttv_remove ->kfree(btv); ->bttv_irq_timeout ->USE btv
- Record
CVE-2023-52847- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-362, CWE-416
- Updated
- 2026-11-02
OSVBELL-CVE-2023-52847
7.0
- Record
BELL-CVE-2023-52847- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
7.8
media: bttv: fix use after free error due to btv->timeout timer
In the Linux kernel, the following vulnerability has been resolved:
media: bttv: fix use after free error due to btv->timeout timer
There may be some a race condition between timer function bttv_irq_timeout and bttv_remove. The timer is setup in probe and there is no timer_delete operation in remove function. When it hit kfree btv, the function might still be invoked, which will cause use after free bug.
This bug is found by static analysis, it may be false positive.
Fix it by adding del_timer_sync invoking to the remove function.
cpu0 cpu1 bttv_probe ->timer_setup ->bttv_set_dma ->mod_timer; bttv_remove ->kfree(btv); ->bttv_irq_timeout ->USE btv
- Record
CVE-2023-52847- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 29 moreShow less
OSVDEBIAN-CVE-2023-52847
7.0
In the Linux kernel, the following vulnerability has been resolved: media: bttv: fix use after free error due to btv->timeout timer There may be some a race condition between timer function bttv_irq_timeout and bttv_remove. The timer is setup in probe and there is no timer_delete operation in remove function. When it hit kfree btv, the function might still be invoked, which will cause use after free bug. This bug is found by static analysis, it may be false positive. Fix it by adding del_timer_sync invoking to the remove function. cpu0 cpu1 bttv_probe ->timer_setup ->bttv_set_dma ->mod_timer; bttv_remove ->kfree(btv); ->bttv_irq_timeout ->USE btv
- Record
DEBIAN-CVE-2023-52847- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-1677
0.0
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: ep0: fix NULL pointer exception
There is no validation of the index from dwc3_wIndex_to_dep() and we might be referring a non-existing ep and trigger a NULL pointer exception. In certain configurations we might use fewer eps and the index might wrongly indicate a larger ep index than existing.
By adding this validation from the patch we can actually report a wrong index back to the caller.
In our usecase we are using a composite device on an older kernel, but upstream might use this fix also. Unfortunately, I cannot describe the hardware for others to reproduce the issue as it is a proprietary implementation.
[ 82.958261] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a4 [ 82.966891] Mem abort info: [ 82.969663] ESR = 0x96000006 [ 82.972703] Exception class = DABT (current EL), IL = 32 bits [ 82.978603] SET = 0, FnV = 0 [ 82.981642] EA = 0, S1PTW = 0 [ 82.984765] Data abort info: [ 82.987631] ISV = 0, ISS = 0x00000006 [ 82.991449] CM = 0, WnR = 0 [ 82.994409] user pgtable: 4k pages, 39-bit VAs, pgdp = 00000000c6210ccc [ 83.000999] [00000000000000a4] pgd=0000000053aa5003, pud=0000000053aa5003, pmd=0000000000000000 [ 83.009685] Internal error: Oops: 96000006 [#1] PREEMPT SMP [ 83.026433] Process irq/62-dwc3 (pid: 303, stack limit = 0x000000003985154c) [ 83.033470] CPU: 0 PID: 303 Comm: irq/62-dwc3 Not tainted 4.19.124 #1 [ 83.044836] pstate: 60000085 (nZCv daIf -PAN -UAO) [ 83.049628] pc : dwc3_ep0_handle_feature+0x414/0x43c [ 83.054558] lr : dwc3_ep0_interrupt+0x3b4/0xc94
...
[ 83.141788] Call trace: [ 83.144227] dwc3_ep0_handle_feature+0x414/0x43c [ 83.148823] dwc3_ep0_interrupt+0x3b4/0xc94 [ 83.181546] ---[ end trace aac6b5267d84c32f ]---(CVE-2021-47269)
In the Linux kernel, the following vulnerability has been resolved:
isdn: mISDN: netjet: Fix crash in nj_probe:
'nj_setup' in netjet.c might fail with -EIO and in this case 'card->irq' is initialized and is bigger than zero. A subsequent call to 'nj_release' will free the irq that has not been requested.
Fix this bug by deleting the previous assignment to 'card->irq' and just keep the assignment before 'request_irq'.
The KASAN's log reveals it:
[ 3.354615 ] WARNING: CPU: 0 PID: 1 at kernel/irq/manage.c:1826 free_irq+0x100/0x480 [ 3.355112 ] Modules linked in: [ 3.355310 ] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.13.0-rc1-00144-g25a1298726e #13 [ 3.355816 ] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 3.356552 ] RIP: 0010:free_irq+0x100/0x480 [ 3.356820 ] Code: 6e 08 74 6f 4d 89 f4 e8 5e ac 09 00 4d 8b 74 24 18 4d 85 f6 75 e3 e8 4f ac 09 00 8b 75 c8 48 c7 c7 78 c1 2e 85 e8 e0 cf f5 ff <0f> 0b 48 8b 75 c0 4c 89 ff e8 72 33 0b 03 48 8b 43 40 4c 8b a0 80 [ 3.358012 ] RSP: 0000:ffffc90000017b48 EFLAGS: 00010082 [ 3.358357 ] RAX: 0000000000000000 RBX: ffff888104dc8000 RCX: 0000000000000000 [ 3.358814 ] RDX: ffff8881003c8000 RSI: ffffffff8124a9e6 RDI: 00000000ffffffff [ 3.359272 ] RBP: ffffc90000017b88 R08: 0000000000000000 R09: 0000000000000000 [ 3.359732 ] R10: ffffc900000179f0 R11: 0000000000001d04 R12: 0000000000000000 [ 3.360195 ] R13: ffff888107dc6000 R14: ffff888107dc6928 R15: ffff888104dc80a8 [ 3.360652 ] FS: 0000000000000000(0000) GS:ffff88817bc00000(0000) knlGS:0000000000000000 [ 3.361170 ] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3.361538 ] CR2: 0000000000000000 CR3: 000000000582e000 CR4: 00000000000006f0 [ 3.362003 ] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3.362175 ] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3.362175 ] Call Trace: [ …
- Record
OESA-2024-1677- CVSS 3.1
- 0.0 None
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1678
0.0
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: ep0: fix NULL pointer exception
There is no validation of the index from dwc3_wIndex_to_dep() and we might be referring a non-existing ep and trigger a NULL pointer exception. In certain configurations we might use fewer eps and the index might wrongly indicate a larger ep index than existing.
By adding this validation from the patch we can actually report a wrong index back to the caller.
In our usecase we are using a composite device on an older kernel, but upstream might use this fix also. Unfortunately, I cannot describe the hardware for others to reproduce the issue as it is a proprietary implementation.
[ 82.958261] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a4 [ 82.966891] Mem abort info: [ 82.969663] ESR = 0x96000006 [ 82.972703] Exception class = DABT (current EL), IL = 32 bits [ 82.978603] SET = 0, FnV = 0 [ 82.981642] EA = 0, S1PTW = 0 [ 82.984765] Data abort info: [ 82.987631] ISV = 0, ISS = 0x00000006 [ 82.991449] CM = 0, WnR = 0 [ 82.994409] user pgtable: 4k pages, 39-bit VAs, pgdp = 00000000c6210ccc [ 83.000999] [00000000000000a4] pgd=0000000053aa5003, pud=0000000053aa5003, pmd=0000000000000000 [ 83.009685] Internal error: Oops: 96000006 [#1] PREEMPT SMP [ 83.026433] Process irq/62-dwc3 (pid: 303, stack limit = 0x000000003985154c) [ 83.033470] CPU: 0 PID: 303 Comm: irq/62-dwc3 Not tainted 4.19.124 #1 [ 83.044836] pstate: 60000085 (nZCv daIf -PAN -UAO) [ 83.049628] pc : dwc3_ep0_handle_feature+0x414/0x43c [ 83.054558] lr : dwc3_ep0_interrupt+0x3b4/0xc94
...
[ 83.141788] Call trace: [ 83.144227] dwc3_ep0_handle_feature+0x414/0x43c [ 83.148823] dwc3_ep0_interrupt+0x3b4/0xc94 [ 83.181546] ---[ end trace aac6b5267d84c32f ]---(CVE-2021-47269)
In the Linux kernel, the following vulnerability has been resolved:
isdn: mISDN: netjet: Fix crash in nj_probe:
'nj_setup' in netjet.c might fail with -EIO and in this case 'card->irq' is initialized and is bigger than zero. A subsequent call to 'nj_release' will free the irq that has not been requested.
Fix this bug by deleting the previous assignment to 'card->irq' and just keep the assignment before 'request_irq'.
The KASAN's log reveals it:
[ 3.354615 ] WARNING: CPU: 0 PID: 1 at kernel/irq/manage.c:1826 free_irq+0x100/0x480 [ 3.355112 ] Modules linked in: [ 3.355310 ] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.13.0-rc1-00144-g25a1298726e #13 [ 3.355816 ] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 3.356552 ] RIP: 0010:free_irq+0x100/0x480 [ 3.356820 ] Code: 6e 08 74 6f 4d 89 f4 e8 5e ac 09 00 4d 8b 74 24 18 4d 85 f6 75 e3 e8 4f ac 09 00 8b 75 c8 48 c7 c7 78 c1 2e 85 e8 e0 cf f5 ff <0f> 0b 48 8b 75 c0 4c 89 ff e8 72 33 0b 03 48 8b 43 40 4c 8b a0 80 [ 3.358012 ] RSP: 0000:ffffc90000017b48 EFLAGS: 00010082 [ 3.358357 ] RAX: 0000000000000000 RBX: ffff888104dc8000 RCX: 0000000000000000 [ 3.358814 ] RDX: ffff8881003c8000 RSI: ffffffff8124a9e6 RDI: 00000000ffffffff [ 3.359272 ] RBP: ffffc90000017b88 R08: 0000000000000000 R09: 0000000000000000 [ 3.359732 ] R10: ffffc900000179f0 R11: 0000000000001d04 R12: 0000000000000000 [ 3.360195 ] R13: ffff888107dc6000 R14: ffff888107dc6928 R15: ffff888104dc80a8 [ 3.360652 ] FS: 0000000000000000(0000) GS:ffff88817bc00000(0000) knlGS:0000000000000000 [ 3.361170 ] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3.361538 ] CR2: 0000000000000000 CR3: 000000000582e000 CR4: 00000000000006f0 [ 3.362003 ] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3.362175 ] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3.362175 ] Call Trace: [ …
- Record
OESA-2024-1678- CVSS 3.1
- 0.0 None
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2024-1680
7.0
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
In current code, when a PCI error state pci_channel_io_normal is detectd, it will report PCI_ERS_RESULT_CAN_RECOVER status to PCI driver, and PCI driver will continue the execution of PCI resume callback report_resume by pci_walk_bridge, and the callback will go into amdgpu_pci_resume finally, where write lock is releasd unconditionally without acquiring such lock first. In this case, a deadlock will happen when other threads start to acquire the read lock.
To fix this, add a member in amdgpu_device strucutre to cache pci_channel_state, and only continue the execution in amdgpu_pci_resume when it's pci_channel_io_frozen.(CVE-2021-47421)
In the Linux kernel, the following vulnerability has been resolved:
ptp: Fix possible memory leak in ptp_clock_register()
I got memory leak as follows when doing fault injection test:
unreferenced object 0xffff88800906c618 (size 8): comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 (age 13.188s) hex dump (first 8 bytes): 70 74 70 30 00 00 00 00 ptp0.... backtrace: [<00000000312ed458>] __kmalloc_track_caller+0x19f/0x3a0 [<0000000079f6e2ff>] kvasprintf+0xb5/0x150 [<0000000026aae54f>] kvasprintf_const+0x60/0x190 [<00000000f323a5f7>] kobject_set_name_vargs+0x56/0x150 [<000000004e35abdd>] dev_set_name+0xc0/0x100 [<00000000f20cfe25>] ptp_clock_register+0x9f4/0xd30 [ptp] [<000000008bb9f0de>] idt82p33_probe.cold+0x8b6/0x1561 [ptp_idt82p33]
When posix_clock_register() returns an error, the name allocated in dev_set_name() will be leaked, the put_device() should be used to give up the device reference, then the name will be freed in kobject_cleanup() and other memory will be freed in ptp_clock_release().(CVE-2021-47455)
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ebtables: fix memory leak when blob is malformed
The bug fix was incomplete, it "replaced" crash with a memory leak. The old code had an assignment to "ret" embedded into the conditional, restore this.(CVE-2022-48641)
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: single: fix potential NULL dereference
Added checking of pointer "function" in pcs_set_mux(). pinmux_generic_get_function() can return NULL and the pointer "function" was dereferenced without checking against NULL.
Found by Linux Verification Center (linuxtesting.org) with SVACE.(CVE-2022-48708)
In the Linux kernel, the following vulnerability has been resolved:
drm/tegra: dsi: Add missing check for of_find_device_by_node
Add check for the return value of of_find_device_by_node() and return the error if it fails in order to avoid NULL pointer dereference.(CVE-2023-52650)
In the Linux kernel, the following vulnerability has been resolved:
io_uring: drop any code related to SCM_RIGHTS
This is dead code after we dropped support for passing io_uring fds over SCM_RIGHTS, get rid of it.(CVE-2023-52656)
In the Linux kernel, the following vulnerability has been resolved:
net: atlantic: eliminate double free in error handling logic
Driver has a logic leak in ring data allocation/free, where aq_ring_free could be called multiple times on same ring, if system is under stress and got memory allocation error.
Ring pointer was used as an indicator of failure, but this is not correct since only ring data is allocated/deallocated. Ring itself is an array member.
Changing ring allocation functions to return error code directly. This simplifies error handling and eliminates aq_ring_free on higher layer.(CVE-2023-52664)
In the Linux kernel, the following vulnerability has been…
- Record
OESA-2024-1680- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-1682
0.0
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
In current code, when a PCI error state pci_channel_io_normal is detectd, it will report PCI_ERS_RESULT_CAN_RECOVER status to PCI driver, and PCI driver will continue the execution of PCI resume callback report_resume by pci_walk_bridge, and the callback will go into amdgpu_pci_resume finally, where write lock is releasd unconditionally without acquiring such lock first. In this case, a deadlock will happen when other threads start to acquire the read lock.
To fix this, add a member in amdgpu_device strucutre to cache pci_channel_state, and only continue the execution in amdgpu_pci_resume when it's pci_channel_io_frozen.(CVE-2021-47421)
In the Linux kernel, the following vulnerability has been resolved:
ptp: Fix possible memory leak in ptp_clock_register()
I got memory leak as follows when doing fault injection test:
unreferenced object 0xffff88800906c618 (size 8): comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 (age 13.188s) hex dump (first 8 bytes): 70 74 70 30 00 00 00 00 ptp0.... backtrace: [<00000000312ed458>] __kmalloc_track_caller+0x19f/0x3a0 [<0000000079f6e2ff>] kvasprintf+0xb5/0x150 [<0000000026aae54f>] kvasprintf_const+0x60/0x190 [<00000000f323a5f7>] kobject_set_name_vargs+0x56/0x150 [<000000004e35abdd>] dev_set_name+0xc0/0x100 [<00000000f20cfe25>] ptp_clock_register+0x9f4/0xd30 [ptp] [<000000008bb9f0de>] idt82p33_probe.cold+0x8b6/0x1561 [ptp_idt82p33]
When posix_clock_register() returns an error, the name allocated in dev_set_name() will be leaked, the put_device() should be used to give up the device reference, then the name will be freed in kobject_cleanup() and other memory will be freed in ptp_clock_release().(CVE-2021-47455)
In the Linux kernel, the following vulnerability has been resolved:
net: enetc: deny offload of tc-based TSN features on VF interfaces
TSN features on the ENETC (taprio, cbs, gate, police) are configured through a mix of command BD ring messages and port registers: enetc_port_rd(), enetc_port_wr().
Port registers are a region of the ENETC memory map which are only accessible from the PCIe Physical Function. They are not accessible from the Virtual Functions.
Moreover, attempting to access these registers crashes the kernel:
$ echo 1 > /sys/bus/pci/devices/0000:00:00.0/sriov_numvfs
pci 0000:00:01.0: [1957:ef00] type 00 class 0x020001
fsl_enetc_vf 0000:00:01.0: Adding to iommu group 15
fsl_enetc_vf 0000:00:01.0: enabling device (0000 -> 0002)
fsl_enetc_vf 0000:00:01.0 eno0vf0: renamed from eth0
$ tc qdisc replace dev eno0vf0 root taprio num_tc 8 map 0 1 2 3 4 5 6 7
queues 1@0 1@1 1@2 1@3 1@4 1@5 1@6 1@7 base-time 0
sched-entry S 0x7f 900000 sched-entry S 0x80 100000 flags 0x2
Unable to handle kernel paging request at virtual address ffff800009551a08
Internal error: Oops: 96000007 [#1] PREEMPT SMP
pc : enetc_setup_tc_taprio+0x170/0x47c
lr : enetc_setup_tc_taprio+0x16c/0x47c
Call trace:
enetc_setup_tc_taprio+0x170/0x47c
enetc_setup_tc+0x38/0x2dc
taprio_change+0x43c/0x970
taprio_init+0x188/0x1e0
qdisc_create+0x114/0x470
tc_modify_qdisc+0x1fc/0x6c0
rtnetlink_rcv_msg+0x12c/0x390
Split enetc_setup_tc() into separate functions for the PF and for the VF drivers. Also remove enetc_qos.o from being included into enetc-vf.ko, since it serves absolutely no purpose there.(CVE-2022-48645)
In the Linux kernel, the following vulnerability has been resolved:
drm/tegra: dsi: Add missing check for of_find_device_by_node
Add check for the return value of of_find_device_by_node() and return the error if it fails in order to avoid NULL pointer dereference.(CVE-2023-52650)
In the Linux kernel,…
- Record
OESA-2024-1682- CVSS 3.1
- 0.0 None
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2024:5101
7.8
Red Hat Security Advisory: kernel security update
- Record
RHSA-2024:5101- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:5102
7.8
Red Hat Security Advisory: kernel-rt security update
- Record
RHSA-2024:5102- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-52847
7.0
In the Linux kernel, the following vulnerability has been resolved: media: bttv: fix use after free error due to btv->timeout timer There may be some a race condition between timer function bttv_irq_timeout and bttv_remove. The timer is setup in probe and there is no timer_delete operation in remove function. When it hit kfree btv, the function might still be invoked, which will cause use after free bug. This bug is found by static analysis, it may be false positive. Fix it by adding del_timer_sync invoking to the remove function. cpu0 cpu1 bttv_probe ->timer_setup ->bttv_set_dma ->mod_timer; bttv_remove ->kfree(btv); ->bttv_irq_timeout ->USE btv
- Record
UBUNTU-CVE-2023-52847- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-11
OSVALSA-2024:5101 No score
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
- kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
- kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
- kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
- kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
- kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
- kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
- kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
- kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
- kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
- kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
- kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
- kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
- kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
- kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
- kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
- kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
- kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
- kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
- (CVE-2023-28746)
- (CVE-2023-52847)
- (CVE-2021-47548)
- (CVE-2024-36921)
- (CVE-2024-26921)
- (CVE-2021-47579)
- (CVE-2024-36927)
- (CVE-2024-39276)
- (CVE-2024-33621)
- (CVE-2024-27010)
- (CVE-2024-26960)
- (CVE-2024-38596)
- (CVE-2022-48743)
- (CVE-2024-26733)
- (CVE-2024-26586)
- (CVE-2024-26698)
- (CVE-2023-52619)
Bug Fix(es):
- AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
- [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
- [almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
- lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
- [Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
- Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
- blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
- (JIRA:AlmaLinux-31798)
- (JIRA:AlmaLinux-10263)
- (JIRA:AlmaLinux-40901)
- (JIRA:AlmaLinux-43547)
- (JIRA:AlmaLinux-34876)
Enhancement(s):
- [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:AlmaLinux-19723)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
- Record
ALSA-2024:5101- Updated
- 2026-11-02
OSVALSA-2024:5102 No score
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
- kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
- kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
- kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
- kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
- kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
- kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
- kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
- kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
- kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
- kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
- kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
- kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
- kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
- kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
- kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
- kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
- kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
- kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
- kernel: crash due to a missing check for leb_size (CVE-2024-25739)
- kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
- kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
- kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
- kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
- kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
- kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
- kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
- kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
- kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
- kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
- kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
- kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
- kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
- kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
- kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
- kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
- kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
- kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
- kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
- (CVE-2023-52832)
- (CVE-2023-52803)
- (CVE-2023-52756)
- (CVE-2023-52834)
- (CVE-2023-52791)
- (CVE-2023-52764)
- (CVE-2021-47468)
- (CVE-2021-47284)
- (CVE-2024-36025)
- (CVE-2024-36941)
- (CVE-2024-36940)
- (CVE-2024-36904)
- (CVE-2024-36896)
- (CVE-2024-36954)
- (CVE-2024-36950)
- (CVE-2024-38575)
- (CVE-2024-36917)
- (CVE-2024-36016)
- (CVE-2023-52762)
- (CVE-2024-27025)
- (CVE-2021-47548)
- (CVE-2023-52619)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
- Record
ALSA-2024:5102- Updated
- 2026-11-02
OSVCLSA-2025-1744213128 No score
Fix of 55 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2025-21858
- geneve: Fix use-after-free in geneve_find_dev().
- CVE-url: https://ubuntu.com/security/CVE-2024-36921
- wifi: iwlwifi: mvm: guard against invalid STA ID on removal
- CVE-url: https://ubuntu.com/security/CVE-2023-52621
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- CVE-url: https://ubuntu.com/security/CVE-2025-21855
- ibmvnic: Don't reference skb after sending to VIOS
- CVE-url: https://ubuntu.com/security/CVE-2021-47110
- x86/kvm: Disable kvmclock on all CPUs on shutdown
- CVE-url: https://ubuntu.com/security/CVE-2025-21791
- vrf: use RCU protection in l3mdev_l3_out()
- CVE-url: https://ubuntu.com/security/CVE-2024-57980
- media: uvcvideo: Fix double free in error path
- CVE-url: https://ubuntu.com/security/CVE-2025-21718
- net: rose: fix timer races against user threads
- CVE-url: https://ubuntu.com/security/CVE-2025-21735
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- CVE-url: https://ubuntu.com/security/CVE-2023-52805
- jfs: fix array-index-out-of-bounds in diAlloc
- CVE-url: https://ubuntu.com/security/CVE-2023-52847
- media: bttv: fix use after free error due to btv->timeout timer
- CVE-url: https://ubuntu.com/security/CVE-2024-41014
- xfs: add bounds checking to xlog_recover_process_data
- CVE-url: https://ubuntu.com/security/CVE-2025-21782
- orangefs: fix a oob in orangefs_debug_write
- CVE-url: https://ubuntu.com/security/CVE-2024-26872
- RDMA/srpt: Do not register event handler until srpt device is fully setup
- CVE-url: https://ubuntu.com/security/CVE-2024-26982
- Squashfs: check the inode number is not the invalid value of zero
- CVE-url: https://ubuntu.com/security/CVE-2024-56548
- hfsplus: don't query the device logical block size multiple times
- CVE-url: https://ubuntu.com/security/CVE-2024-57850
- jffs2: Prevent rtime decompress memory corruption
- CVE-url: https://ubuntu.com/security/CVE-2024-49982
- aoe: fix the potential use-after-free problem in more places
- CVE-url: https://ubuntu.com/security/CVE-2024-47696
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- CVE-url: https://ubuntu.com/security/CVE-2024-50074
- parport: Proper fix for array out-of-bounds access
- CVE-url: https://ubuntu.com/security/CVE-2025-21687
- vfio/platform: check the bounds of read/write syscalls
- CVE-url: https://ubuntu.com/security/CVE-2024-57889
- regmap: allow to disable all locking mechanisms
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
- CVE-url: https://ubuntu.com/security/CVE-2024-56539
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- CVE-url: https://ubuntu.com/security/CVE-2024-53680
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
- CVE-url: https://ubuntu.com/security/CVE-2024-56630
- ocfs2: free inode when ocfs2_get_init_inode() fails
- CVE-url: https://ubuntu.com/security/CVE-2024-53184
- um: ubd: Do not use drvdata in release
- CVE-url: https://ubuntu.com/security/CVE-2024-57884
- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
- CVE-url: https://ubuntu.com/security/CVE-2024-56597
- jfs: fix shift-out-of-bounds in dbSplit
- CVE-url: https://ubuntu.com/security/CVE-2025-21664
- dm thin: make get_first_thin use rcu-safe list first function
- CVE-url: https://ubuntu.com/security/CVE-2024-56594
- drm/amdgpu: set the right AMDGPU sg segment limitation
- CVE-url: https://ubuntu.com/security/CVE-2024-56681
- crypto: bcm - add error check in the ahash_hmac_init function
- CVE-url: https://ubuntu.com/security/CVE-2024-52332
- igb: Fix potential invalid memory access in igb_init_module()
- CVE-url:…
- Record
CLSA-2025-1744213128- Updated
- 2026-11-02
OSVCLSA-2025-1744624441 No score
Fix of 56 CVEs
[ Ubuntu: 4.15.0-246.257 ]
- CVE-url: https://ubuntu.com/security/CVE-2025-21858
- geneve: Fix use-after-free in geneve_find_dev().
- CVE-url: https://ubuntu.com/security/CVE-2024-36921
- wifi: iwlwifi: mvm: guard against invalid STA ID on removal
- CVE-url: https://ubuntu.com/security/CVE-2023-52621
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- CVE-url: https://ubuntu.com/security/CVE-2025-21855
- ibmvnic: Don't reference skb after sending to VIOS
- CVE-url: https://ubuntu.com/security/CVE-2021-47110
- x86/kvm: Disable kvmclock on all CPUs on shutdown
- CVE-url: https://ubuntu.com/security/CVE-2025-21791
- vrf: use RCU protection in l3mdev_l3_out()
- CVE-url: https://ubuntu.com/security/CVE-2024-57980
- media: uvcvideo: Fix double free in error path
- CVE-url: https://ubuntu.com/security/CVE-2025-21718
- net: rose: fix timer races against user threads
- CVE-url: https://ubuntu.com/security/CVE-2025-21735
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- CVE-url: https://ubuntu.com/security/CVE-2023-52805
- jfs: fix array-index-out-of-bounds in diAlloc
- CVE-url: https://ubuntu.com/security/CVE-2023-52847
- media: bttv: fix use after free error due to btv->timeout timer
- CVE-url: https://ubuntu.com/security/CVE-2024-41014
- xfs: add bounds checking to xlog_recover_process_data
- CVE-url: https://ubuntu.com/security/CVE-2025-21782
- orangefs: fix a oob in orangefs_debug_write
- CVE-url: https://ubuntu.com/security/CVE-2024-26872
- RDMA/srpt: Do not register event handler until srpt device is fully setup
- CVE-url: https://ubuntu.com/security/CVE-2024-26982
- Squashfs: check the inode number is not the invalid value of zero
- CVE-url: https://ubuntu.com/security/CVE-2024-56548
- hfsplus: don't query the device logical block size multiple times
- CVE-url: https://ubuntu.com/security/CVE-2024-57850
- jffs2: Prevent rtime decompress memory corruption
- CVE-url: https://ubuntu.com/security/CVE-2024-49982
- aoe: fix the potential use-after-free problem in more places
- CVE-url: https://ubuntu.com/security/CVE-2024-47696
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- CVE-url: https://ubuntu.com/security/CVE-2024-50074
- parport: Proper fix for array out-of-bounds access
- CVE-url: https://ubuntu.com/security/CVE-2025-21687
- vfio/platform: check the bounds of read/write syscalls
- CVE-url: https://ubuntu.com/security/CVE-2024-57889
- regmap: allow to disable all locking mechanisms
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
- CVE-url: https://ubuntu.com/security/CVE-2024-56539
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- CVE-url: https://ubuntu.com/security/CVE-2024-53680
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
- CVE-url: https://ubuntu.com/security/CVE-2024-56630
- ocfs2: free inode when ocfs2_get_init_inode() fails
- CVE-url: https://ubuntu.com/security/CVE-2024-53184
- um: ubd: Do not use drvdata in release
- CVE-url: https://ubuntu.com/security/CVE-2024-57884
- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
- CVE-url: https://ubuntu.com/security/CVE-2024-56597
- jfs: fix shift-out-of-bounds in dbSplit
- CVE-url: https://ubuntu.com/security/CVE-2025-21664
- dm thin: make get_first_thin use rcu-safe list first function
- CVE-url: https://ubuntu.com/security/CVE-2024-56594
- drm/amdgpu: set the right AMDGPU sg segment limitation
- CVE-url: https://ubuntu.com/security/CVE-2024-56681
- crypto: bcm - add error check in the ahash_hmac_init function
- CVE-url: https://ubuntu.com/security/CVE-2024-52332
- igb: Fix potential invalid memory access in…
- Record
CLSA-2025-1744624441- Updated
- 2026-11-02
OSVCLSA-2025-1744713316 No score
Fix of 50 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-26872
- RDMA/srpt: Do not register event handler until srpt device is fully setup
- CVE-url: https://ubuntu.com/security/CVE-2024-53179
- smb: client: fix use-after-free of signing key
- CVE-url: https://ubuntu.com/security/CVE-2021-47357
- atm: iphase: fix possible use-after-free in ia_module_exit()
- Bionic update: upstream stable patchset 2022-11-15 (LP: #1996650) // CVE-
url: https://ubuntu.com/security/CVE-2021-47103
- inet: fully convert sk->sk_rx_dst to RCU rules
- CVE-url: https://ubuntu.com/security/CVE-2025-21858
- geneve: Fix use-after-free in geneve_find_dev().
- CVE-url: https://ubuntu.com/security/CVE-2024-36921
- wifi: iwlwifi: mvm: guard against invalid STA ID on removal
- Bionic update: upstream stable patchset 2022-07-25 (LP: #1982782) // CVE-
url: https://ubuntu.com/security/CVE-2022-49478
- media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
- CVE-url: https://ubuntu.com/security/CVE-2023-52621
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- CVE-url: https://ubuntu.com/security/CVE-2025-21855
- ibmvnic: Don't reference skb after sending to VIOS
- CVE-url: https://ubuntu.com/security/CVE-2021-47110
- x86/kvm: Disable kvmclock on all CPUs on shutdown
- CVE-url: https://ubuntu.com/security/CVE-2024-57980
- media: uvcvideo: Fix double free in error path
- CVE-url: https://ubuntu.com/security/CVE-2025-21718
- net: rose: fix timer races against user threads
- CVE-url: https://ubuntu.com/security/CVE-2025-21735
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- CVE-url: https://ubuntu.com/security/CVE-2023-52805
- jfs: fix array-index-out-of-bounds in diAlloc
- CVE-url: https://ubuntu.com/security/CVE-2023-52847
- media: bttv: fix use after free error due to btv->timeout timer
- CVE-url: https://ubuntu.com/security/CVE-2024-41014
- xfs: add bounds checking to xlog_recover_process_data
- Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE-
url: https://ubuntu.com/security/CVE-2022-48702
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE-
url: https://ubuntu.com/security/CVE-2022-48701
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
- CVE-url: https://ubuntu.com/security/CVE-2024-26982
- Squashfs: check the inode number is not the invalid value of zero
- CVE-url: https://ubuntu.com/security/CVE-2024-56548
- hfsplus: don't query the device logical block size multiple times
- CVE-url: https://ubuntu.com/security/CVE-2024-57850
- jffs2: Prevent rtime decompress memory corruption
- CVE-url: https://ubuntu.com/security/CVE-2024-49982
- aoe: fix the potential use-after-free problem in more places
- CVE-url: https://ubuntu.com/security/CVE-2025-21687
- vfio/platform: check the bounds of read/write syscalls
- CVE-url: https://ubuntu.com/security/CVE-2024-56539
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- CVE-url: https://ubuntu.com/security/CVE-2024-53680
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
- CVE-url: https://ubuntu.com/security/CVE-2024-56630
- ocfs2: free inode when ocfs2_get_init_inode() fails
- CVE-url: https://ubuntu.com/security/CVE-2024-53184
- um: ubd: Do not use drvdata in release
- CVE-url: https://ubuntu.com/security/CVE-2024-57884
- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
- CVE-url: https://ubuntu.com/security/CVE-2024-56597
- jfs: fix shift-out-of-bounds in dbSplit
- CVE-url: https://ubuntu.com/security/CVE-2025-21664
- dm thin: make get_first_thin use rcu-safe…
- Record
CLSA-2025-1744713316- Updated
- 2026-11-02
OSVCLSA-2025-1763722365 No score
kernel: Fix of 63 CVEs
- wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226} {CVE-2023-53226}
- wifi: mac80211: check S1G action frame size {CVE-2023-53257} {CVE-2023-53257}
- wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864} {CVE-2025-39864}
- partitions: mac: fix handling of bogus partition table {CVE-2025-21772} {CVE-2025-21772}
- wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} {CVE-2024-58014}
- wifi: at76c50x: fix use after free access in at76_disconnect {CVE-2025-37796} {CVE-2025-37796}
- dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} {CVE-2024-35939}
- Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} {CVE-2022-50386}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} {CVE-2025-39817}
- wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937} {CVE-2024-35937}
- nfs: fix UAF in direct writes {CVE-2024-26958} {CVE-2024-26958}
- wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} {CVE-2024-36921}
- net/smc: avoid data corruption caused by decline {CVE-2023-52775} {CVE-2023-52775}
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} {CVE-2024-39487}
- scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} {CVE-2024-40978}
- mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961} {CVE-2024-26961}
- platform/x86: wmi: Fix opening of char device {CVE-2023-52864} {CVE-2023-52864}
- net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739} {CVE-2024-26739}
- drm/dp_mst: Fix resetting msg rx state after topology removal {CVE-2024-57876} {CVE-2024-57876}
- net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556} {CVE-2024-38556}
- of: Fix double free in of_parse_phandle_with_args_map {CVE-2023-52679} {CVE-2023-52679}
- xhci: Handle TD clearing for multiple streams case {CVE-2024-40927} {CVE-2024-40927}
- wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} {CVE-2023-52530}
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit {CVE-2024-27395} {CVE-2024-27395}
- r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586} {CVE-2024-38586}
- media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} {CVE-2023-52764}
- media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847} {CVE-2023-52847}
- vsock: Fix transport_* TOCTOU {CVE-2025-38461} {CVE-2025-38461}
- ppdev: Add an error check in register_device {CVE-2024-36015} {CVE-2024-36015}
- HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} {CVE-2025-38556}
- iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904} {CVE-2024-57904}
- perf/aux: Fix AUX buffer serialization {CVE-2024-46713} {CVE-2024-46713}
- net_sched: hfsc: Fix a UAF vulnerability in class handling {CVE-2025-37797} {CVE-2025-37797}
- wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072} {CVE-2024-58072}
- wifi: rtlwifi: remove unused dualmac control leftovers {CVE-2024-58072} {CVE-2024-58072}
- wifi: rtlwifi: remove unused timer and related code {CVE-2024-58072} {CVE-2024-58072}
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() {CVE-2025-22121} {CVE-2025-22121}
- ext4: move where set the MAY_INLINE_DATA flag is set {CVE-2025-22121} {CVE-2025-22121}
- ext4: introduce ITAIL helper {CVE-2025-22121} {CVE-2025-22121}
- ext4: improve xattr consistency checking and error reporting {CVE-2025-22121} {CVE-2025-22121}
- mm: fix zswap writeback race condition {CVE-2023-53178} {CVE-2023-53178}
- fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367} {CVE-2022-50367}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} {CVE-2025-39757}
- smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527} {CVE-2025-38527} -…
- Record
CLSA-2025-1763722365- Updated
- 2026-11-02
OSVCLSA-2025-1763731262 No score
kernel: Fix of 66 CVEs
- media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847} {CVE-2023-52847}
- firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087} {CVE-2022-50087}
- wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226} {CVE-2023-53226}
- vsock: Fix transport_* TOCTOU {CVE-2025-38461} {CVE-2025-38461}
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} {CVE-2025-39757}
- locking/ww_mutex/test: Fix potential workqueue corruption {CVE-2023-52836} {CVE-2023-52836}
- media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621} {CVE-2024-38621}
- ath10k: skip ath10k_halt during suspend for driver state RESTARTING {CVE-2022-49519} {CVE-2022-49519}
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() {CVE-2022-48738} {CVE-2022-48738}
- partitions: mac: fix handling of bogus partition table {CVE-2025-21772} {CVE-2025-21772}
- ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292} {CVE-2022-49292}
- usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} {CVE-2025-21704}
- vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} {CVE-2024-53214}
- ppdev: Add an error check in register_device {CVE-2024-36015} {CVE-2024-36015}
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} {CVE-2023-53675}
- enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659} {CVE-2024-38659}
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929} {CVE-2024-57929}
- dlm: fix plock invalid read {CVE-2022-49407} {CVE-2022-49407}
- rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev {CVE-2022-48759} {CVE-2022-48759}
- bpf: Don't use tnum_range on array range checking for poke descriptors {CVE-2022-49985} {CVE-2022-49985}
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001} {CVE-2025-38001}
- wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes {CVE-2023-53185} {CVE-2023-53185}
- dm integrity: fix memory corruption when tag_size is less than digest size {CVE-2022-49044} {CVE-2022-49044}
- drm/radeon: possible buffer overflow {CVE-2023-52867} {CVE-2023-52867}
- ata: sata_dwc_460ex: Fix crash due to OOB write {CVE-2022-49073} {CVE-2022-49073}
- fs/jfs: Add validity check for db_maxag and db_agpref {CVE-2023-52804} {CVE-2023-52804}
- net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581} {CVE-2023-53581}
- thermal: core: prevent potential string overflow {CVE-2023-52868} {CVE-2023-52868}
- ACPI: CPPC: Avoid out of bounds access when parsing _CPC data {CVE-2022-49145} {CVE-2022-49145}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} {CVE-2025-39817}
- igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} {CVE-2024-52332}
- do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} {CVE-2025-38498}
- drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119} {CVE-2024-42119}
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408} {CVE-2022-50408}
- wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} {CVE-2024-58014}
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229} {CVE-2023-53229}
- ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} {CVE-2024-56570}
- net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} {CVE-2023-53125}
- net: stmmac: fix dma queue left shift overflow issue {CVE-2022-49592} {CVE-2022-49592}
- iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904} {CVE-2024-57904}
- crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} {CVE-2023-53373}
- sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} {CVE-2025-38718}
- KVM: SVM: Don't BUG if userspace…
- Record
CLSA-2025-1763731262- Updated
- 2026-11-02
OSVCLSA-2025-1763734783 No score
kernel: Fix of 64 CVEs
- media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847}
- firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087}
- wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226}
- vsock: Fix transport_* TOCTOU {CVE-2025-38461}
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
- perf/aux: Fix AUX buffer serialization {CVE-2024-46713}
- locking/ww_mutex/test: Fix potential workqueue corruption {CVE-2023-52836}
- media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
- ath10k: skip ath10k_halt during suspend for driver state RESTARTING {CVE-2022-49519}
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() {CVE-2022-48738}
- partitions: mac: fix handling of bogus partition table {CVE-2025-21772}
- ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
- usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
- vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
- ppdev: Add an error check in register_device {CVE-2024-36015}
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675}
- enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659}
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929}
- dlm: fix plock invalid read {CVE-2022-49407}
- rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev {CVE-2022-48759}
- bpf: Don't use tnum_range on array range checking for poke descriptors {CVE-2022-49985}
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001}
- wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes {CVE-2023-53185}
- dm integrity: fix memory corruption when tag_size is less than digest size {CVE-2022-49044}
- drm/radeon: possible buffer overflow {CVE-2023-52867}
- ata: sata_dwc_460ex: Fix crash due to OOB write {CVE-2022-49073}
- fs/jfs: Add validity check for db_maxag and db_agpref {CVE-2023-52804}
- net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581}
- thermal: core: prevent potential string overflow {CVE-2023-52868}
- ACPI: CPPC: Avoid out of bounds access when parsing _CPC data {CVE-2022-49145}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817}
- igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
- do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498}
- drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119}
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408}
- wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014}
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229}
- ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570}
- net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125}
- net: stmmac: fix dma queue left shift overflow issue {CVE-2022-49592}
- iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904}
- crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}
- sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718}
- KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 {CVE-2022-50228}
- soundwire: cadence: fix invalid PDI offset {CVE-2024-38635}
- wifi: at76c50x: fix use after free access in at76_disconnect {CVE-2025-37796}
- ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans {CVE-2023-53034}
- Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297}
- scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
- smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730}
- scsi:…
- Record
CLSA-2025-1763734783- Updated
- 2026-11-02
OSVRLSA-2024:5101 No score
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
-
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
-
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
-
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
-
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
-
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
-
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
-
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
-
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
-
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
-
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
-
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
-
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
-
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
-
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
-
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
-
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
-
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
-
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
-
(CVE-2023-28746)
-
(CVE-2023-52847)
-
(CVE-2021-47548)
-
(CVE-2024-36921)
-
(CVE-2024-26921)
-
(CVE-2021-47579)
-
(CVE-2024-36927)
-
(CVE-2024-39276)
-
(CVE-2024-33621)
-
(CVE-2024-27010)
-
(CVE-2024-26960)
-
(CVE-2024-38596)
-
(CVE-2022-48743)
-
(CVE-2024-26733)
-
(CVE-2024-26586)
-
(CVE-2024-26698)
-
(CVE-2023-52619)
Bug Fix(es):
-
Rocky Linux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux-17678)
-
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux-23841)
-
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux-32941)
-
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux-33437)
-
[Hyper-V][Rocky Linux-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux-39074)
-
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux-40167)
-
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux-40939)
-
(JIRA:Rocky Linux-31798)
-
(JIRA:Rocky Linux-10263)
-
(JIRA:Rocky Linux-40901)
-
(JIRA:Rocky Linux-43547)
-
(JIRA:Rocky Linux-34876)
Enhancement(s):
- [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux-19723)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
- Record
RLSA-2024:5101- Updated
- 2026-11-02
OSVRLSA-2024:5102 No score
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
-
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
-
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
-
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
-
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
-
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
-
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
-
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
-
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
-
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
-
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
-
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
-
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
-
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
-
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
-
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
-
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
-
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
-
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
-
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
-
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
-
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
-
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
-
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
-
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
-
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
-
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
-
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
-
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
-
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
-
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
-
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
-
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
-
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
-
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
-
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
-
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
-
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
-
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
-
(CVE-2023-52832)
-
(CVE-2023-52803)
-
(CVE-2023-52756)
-
(CVE-2023-52834)
-
(CVE-2023-52791)
-
(CVE-2023-52764)
-
(CVE-2021-47468)
-
(CVE-2021-47284)
-
(CVE-2024-36025)
-
(CVE-2024-36941)
-
(CVE-2024-36940)
-
(CVE-2024-36904)
-
(CVE-2024-36896)
-
(CVE-2024-36954)
-
(CVE-2024-36950)
-
(CVE-2024-38575)
-
(CVE-2024-36917)
-
(CVE-2024-36016)
-
(CVE-2023-52762)
-
(CVE-2024-27025)
-
(CVE-2021-47548)
-
(CVE-2023-52619)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
- Record
RLSA-2024:5102- Updated
- 2026-11-02
OSVRXSA-2024:5101 No score
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
-
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
-
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
-
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
-
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
-
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
-
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
-
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
-
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
-
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
-
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
-
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
-
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
-
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
-
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
-
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
-
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
-
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
-
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
-
(CVE-2023-28746)
-
(CVE-2023-52847)
-
(CVE-2021-47548)
-
(CVE-2024-36921)
-
(CVE-2024-26921)
-
(CVE-2021-47579)
-
(CVE-2024-36927)
-
(CVE-2024-39276)
-
(CVE-2024-33621)
-
(CVE-2024-27010)
-
(CVE-2024-26960)
-
(CVE-2024-38596)
-
(CVE-2022-48743)
-
(CVE-2024-26733)
-
(CVE-2024-26586)
-
(CVE-2024-26698)
-
(CVE-2023-52619)
Bug Fix(es):
-
Rocky Linux SIG Cloud8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux SIG Cloud-17678)
-
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux SIG Cloud-23841)
-
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux SIG Cloud-32941)
-
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux SIG Cloud-33437)
-
[Hyper-V][Rocky Linux SIG Cloud-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux SIG Cloud-39074)
-
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux SIG Cloud-40167)
-
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-40939)
-
(JIRA:Rocky Linux SIG Cloud-31798)
-
(JIRA:Rocky Linux SIG Cloud-10263)
-
(JIRA:Rocky Linux SIG Cloud-40901)
-
(JIRA:Rocky Linux SIG Cloud-43547)
-
(JIRA:Rocky Linux SIG Cloud-34876)
Enhancement(s):
- [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux SIG Cloud-19723)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
- Record
RXSA-2024:5101- Updated
- 2026-11-02
OSVSUSE-SU-2024:2008-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
- CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
- CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-42755: Check user supplied offsets (bsc#1215702).
- CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
- CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
- CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
- CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
- CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
- CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
- CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
- CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
- CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
- CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
- CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
- CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
- CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
- CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
- CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
- CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
- CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
- CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
- CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
- CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
- CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
- CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
- CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
- CVE-2024-27417: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721)
- CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
- CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
- CVE-2024-35791: Flush pages under…
- Record
SUSE-SU-2024:2008-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2011-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
- CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
- CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
- CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
- CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
- CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
- CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
- CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
- CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
- CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
- CVE-2024-35904: Fixed dereference of garbage after mount failure (bsc#1224494).
- CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
- CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
The following non-security bugs were fixed:
- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
- af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
- filemap: remove use of wait bookmarks (bsc#1224085).
- idpf: extend tx watchdog timeout (bsc#1224137).
- ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
- powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
- powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
- powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
- powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
- powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
- powerpc: Refactor verification of MSR_RI (bsc#1223191).
- supported.conf: support tcp_dctcp module (jsc#PED-8111)
- Record
SUSE-SU-2024:2011-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2019-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
- CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
- CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
- CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
- CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
- CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
- CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
- CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
- CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
- CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
- CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
- CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
- CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
- CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-35869: Guarantee refcounted children from parent session (bsc#1224679).
- CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
- CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2023-42755: Check user supplied offsets (bsc#1215702).
- CVE-2024-35964: Fixed not validating setsockopt user input (bsc#1224581).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
- CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
- CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
- CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
- CVE-2024-35860: struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531).
- CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
- CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
- CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
- CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
- CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
- CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
- CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
- CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
- CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios (bsc#1224530).
- CVE-2024-35852: Fixed memory leak when canceling rehash work (bsc#1224502).
- CVE-2024-36006: Fixed incorrect list API usage (bsc#1224541).
- CVE-2024-36007: Fixed warning during rehash (bsc#1224543).
- CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
- CVE-2024-35907: Call request_irq() after NAPI initialized (bsc#1224492).
- CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
- CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure…
- Record
SUSE-SU-2024:2019-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2189-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
- CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-35863: Fix potential UAF in is_valid_oplock_break() (bsc#1224763).
- CVE-2024-35867: Fix potential UAF in cifs_stats_proc_show() (bsc#1224664).
- CVE-2024-35868: Fix potential UAF in cifs_stats_proc_write() (bsc#1224678).
- CVE-2024-26928: Fix potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
- CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
- CVE-2024-35904: Avoid dereference of garbage after mount failure (bsc#1224494).
- CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
- CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
- CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
- CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
- CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
- CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
The following non-security bugs were fixed:
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
- af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
- filemap: remove use of wait bookmarks (bsc#1224085).
- idpf: extend tx watchdog timeout (bsc#1224137).
- ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
- powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
- powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
- powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
- powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
- powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
- powerpc: Refactor verification of MSR_RI (bsc#1223191).
- Record
SUSE-SU-2024:2189-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2190-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
- CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
- CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-42755: Check user supplied offsets (bsc#1215702).
- CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
- CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
- CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
- CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
- CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
- CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
- CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
- CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
- CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
- CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
- CVE-2024-26700: Fixed drm/amd/display: Fix MST Null Ptr for RV (bsc#1222870)
- CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
- CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
- CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
- CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)
- CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)
- CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
- CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)
- CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
- CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
- CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).
- CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
- CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
- CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
- CVE-2024-27042: Fixed potential out-of-bounds access in…
- Record
SUSE-SU-2024:2190-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2571-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
- CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
- CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758).
- CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
- CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
- CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
- CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
- CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
- CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
- CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
- CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
- CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
- CVE-2023-52865: Add check for mtk_alloc_clk_data (bsc#1225086).
- CVE-2023-52821: Fixed a possible null pointer dereference (bsc#1225022).
- CVE-2023-52867: Fixed possible buffer overflow (bsc#1225009).
- CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,).
- CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
- CVE-2023-52759: Ignore negated quota changes (bsc#1225560).
- CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
- CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
- CVE-2023-52864: Fixed opening of char device (bsc#1225132).
- CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
- CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
- CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
- CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
- CVE-2024-35843: iommu/vt-d: Use device rbtree in iopf reporting path (bsc#1224751).
- CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
- CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
- CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
- CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
- CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799).
- CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
- CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841).
- CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879).
- CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
- CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789).
- CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
- CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
- CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
- CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
- CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
- CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
- CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
- CVE-2024-38556:…
- Record
SUSE-SU-2024:2571-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2896-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
- CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
- CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). -…
- Record
SUSE-SU-2024:2896-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2973-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
- CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
- CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
- CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
- CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
- CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
- CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
- CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
- CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
- CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
- CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
- CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
- CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
- CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
- CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
- CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
- CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
- CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
- CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
- CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
- CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
- CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
- CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
- CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
- CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
- CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
- CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
- CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…
- Record
SUSE-SU-2024:2973-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20008-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
- CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
- CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
- CVE-2024-35890:…
- Record
SUSE-SU-2025:20008-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20028-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
- CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…
- Record
SUSE-SU-2025:20028-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bpftoolAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernelAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-abi-stablelistsAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-coreAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-cross-headersAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-debugAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-debug-coreAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-debug-develAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-debug-modulesAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-debug-modules-extraAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-docAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-headersAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-modulesAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-modules-extraAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-toolsAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-tools-libsAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-tools-libs-develAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-zfcpdumpAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-coreAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-develAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-modulesAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-modules-extraAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
perfAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
python3-perfAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-rtAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-coreAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debugAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-coreAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-develAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-kvmAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-modulesAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-modules-extraAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-develAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-kvmAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-modulesAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-modules-extraAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
linux-ltsAlpaquita:23 |
6.1.62-r0 up to 6.1.68-r0 | 6.1.68-r0 |
linux-ltsAlpaquita:25 |
6.6.89-r0 up to 6.12.41-r0 | 6.12.41-r0 |
linux-ltsAlpaquita:stream |
6.6.100-r0 up to 6.12.41-r0 | 6.12.41-r0 |
linux-buildinfo-4.15.0-246-tuxcare.els34-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-buildinfo-4.15.0-246-tuxcare.els34-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-cloud-tools-4.15.0-246-tuxcare.els34TuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-cloud-tools-4.15.0-246-tuxcare.els34-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-cloud-tools-4.15.0-246-tuxcare.els34-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-cloud-tools-commonTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-cloud-tools-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-cloud-tools-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-crashdumpTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-docTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-headers-4.15.0-246-tuxcare.els34TuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-headers-4.15.0-246-tuxcare.els34-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-headers-4.15.0-246-tuxcare.els34-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-headers-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-headers-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-image-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-image-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-image-unsigned-4.15.0-246-tuxcare.els34-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-image-unsigned-4.15.0-246-tuxcare.els34-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-libc-devTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-modules-4.15.0-246-tuxcare.els34-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-modules-4.15.0-246-tuxcare.els34-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-modules-extra-4.15.0-246-tuxcare.els34-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-sourceTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-source-4.15.0TuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-tools-4.15.0-246-tuxcare.els34TuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-tools-4.15.0-246-tuxcare.els34-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-tools-4.15.0-246-tuxcare.els34-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-tools-commonTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-tools-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-tools-hostTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257 | 4.15.0-246.257 |
linux-tools-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.246.257 | 4.15.0.246.257 |
linux-buildinfo-4.15.0-246-tuxcare.els44-genericTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-buildinfo-4.15.0-246-tuxcare.els44-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-cloud-tools-4.15.0-246-tuxcare.els44-genericTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-cloud-tools-4.15.0-246-tuxcare.els44-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-headers-4.15.0-246-tuxcare.els44TuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-headers-4.15.0-246-tuxcare.els44-genericTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-headers-4.15.0-246-tuxcare.els44-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-hwe-cloud-tools-4.15.0-246-tuxcare.els44TuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-hwe-tools-4.15.0-246-tuxcare.els44TuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-image-unsigned-4.15.0-246-tuxcare.els44-genericTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-image-unsigned-4.15.0-246-tuxcare.els44-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-modules-4.15.0-246-tuxcare.els44-genericTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-modules-4.15.0-246-tuxcare.els44-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-modules-extra-4.15.0-246-tuxcare.els44-genericTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-source-4.15.0TuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-tools-4.15.0-246-tuxcare.els44-genericTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-tools-4.15.0-246-tuxcare.els44-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 55 CVEs |
before 4.15.0-246.257~16.04.1 | 4.15.0-246.257~16.04.1 |
linux-buildinfo-4.4.0-273-tuxcare.els44-genericTuxCare:Ubuntu:16.04 From an advisory covering 50 CVEs |
before 4.4.0-273.307 | 4.4.0-273.307 |
KernelLinux |
4.15.0 up to 4.19.299, 4.20.0 up to 5.4.261, 5.5.0 up to 5.10.201, 5.11.0 up to 5.15.139, 5.16.0 up to 6.1.63, 6.2.0 up to 6.5.12, 6.6.0 up to 6.6.2 | 4.19.2995.4.2615.10.2015.15.1396.1.636.5.126.6.2 |
linuxDebian:12 |
before 6.1.64-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 6 moreShow less6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+1 |
6.1.64-1 |
linuxDebian:13 |
before 6.6.8-1 | 6.6.8-1 |
linuxDebian:14 |
before 6.6.8-1 | 6.6.8-1 |
kernelopenEuler:20.03-LTS-SP1 From an advisory covering 80 CVEs |
before 4.19.90-2405.5.0.0251.oe1 | 4.19.90-2405.5.0.0251.oe1 |
kernelopenEuler:20.03-LTS-SP4 From an advisory covering 81 CVEs |
before 4.19.90-2405.5.0.0278.oe2003sp4 | 4.19.90-2405.5.0.0278.oe2003sp4 |
kernelopenEuler:22.03-LTS-SP1 From an advisory covering 63 CVEs |
before 5.10.0-136.77.0.157.oe2203sp1 | 5.10.0-136.77.0.157.oe2203sp1 |
kernelopenEuler:22.03-LTS-SP3 From an advisory covering 86 CVEs |
before 5.10.0-201.0.0.114.oe2203sp3 | 5.10.0-201.0.0.114.oe2203sp3 |
bpftoolRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
bpftool-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernelRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-abi-stablelistsRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-coreRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debugRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debug-coreRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debug-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debug-develRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debug-modulesRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debug-modules-extraRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-develRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-docRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-modulesRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-modules-extraRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-toolsRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-tools-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-tools-libsRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-zfcpdumpRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-coreRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-develRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-modulesRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-modules-extraRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
perfRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
perf-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
python3-perfRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
python3-perf-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
bpftool-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debug-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-tools-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-tools-libs-develRed Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
perf-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
python3-perf-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-rtRed Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs |
before 0:4.18.0-553.16.1.rt7.357.el8_10 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-coreRed Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs |
before 0:4.18.0-553.16.1.rt7.357.el8_10 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debugRed Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs |
before 0:4.18.0-553.16.1.rt7.357.el8_10 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-coreRed Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs |
before 0:4.18.0-553.16.1.rt7.357.el8_10 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-debuginfoRed Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs |
before 0:4.18.0-553.16.1.rt7.357.el8_10 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-develRed Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs |
before 0:4.18.0-553.16.1.rt7.357.el8_10 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-kvmRed Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs |
before 0:4.18.0-553.16.1.rt7.357.el8_10 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-modulesRed Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs |
before 0:4.18.0-553.16.1.rt7.357.el8_10 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
kernelRocky Linux:8 From an advisory covering 160 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-rtRocky Linux:8 From an advisory covering 149 CVEs |
before 0:4.18.0-553.16.1.rt7.357.el8_10 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
kernelRocky Linux:8 From an advisory covering 160 CVEs |
before 0:4.18.0-553.16.1.el8_10.cloud.0.1 | 0:4.18.0-553.16.1.el8_10.cloud.0.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-livepatch-SLE15-SP5-RT_Update_16SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 561 CVEs |
before 1-150500.11.3.1 | 1-150500.11.3.1 |
kernel-rtSUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-rt_debugSUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-source-rtSUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-rtopenSUSE:Leap 15.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-rt_debugopenSUSE:Leap 15.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-source-rtopenSUSE:Leap 15.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-syms-rtopenSUSE:Leap 15.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 308 CVEs |
before 5.14.21-150400.15.82.1 | 5.14.21-150400.15.82.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 308 CVEs |
before 5.14.21-150400.15.82.1 | 5.14.21-150400.15.82.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 308 CVEs |
before 5.14.21-150400.15.82.1 | 5.14.21-150400.15.82.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 308 CVEs |
before 5.14.21-150400.15.82.1 | 5.14.21-150400.15.82.1 |
kernel-rtopenSUSE:Leap Micro 5.3 From an advisory covering 308 CVEs |
before 5.14.21-150400.15.82.1 | 5.14.21-150400.15.82.1 |
kernel-rtopenSUSE:Leap Micro 5.4 From an advisory covering 308 CVEs |
before 5.14.21-150400.15.82.1 | 5.14.21-150400.15.82.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-source-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-syms-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-azureopenSUSE:Leap 15.5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-source-azureopenSUSE:Leap 15.5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-syms-azureopenSUSE:Leap 15.5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.3 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.3 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2.150400.24.58.2 | 5.14.21-150400.24.122.2.150400.24.58.2 |
kernel-defaultSUSE:Linux Enterprise Micro 5.4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2.150400.24.58.2 | 5.14.21-150400.24.122.2.150400.24.58.2 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-livepatch-SLE15-SP4_Update_27SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 320 CVEs |
before 1-150400.9.3.2 | 1-150400.9.3.2 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2.150400.24.58.2 | 5.14.21-150400.24.122.2.150400.24.58.2 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.1 | 5.14.21-150400.24.122.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.1 | 5.14.21-150400.24.122.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2.150400.24.58.2 | 5.14.21-150400.24.122.2.150400.24.58.2 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.1 | 5.14.21-150400.24.122.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.1 | 5.14.21-150400.24.122.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2.150400.24.58.2 | 5.14.21-150400.24.122.2.150400.24.58.2 |
kernel-docsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.1 | 5.14.21-150400.24.122.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.1 | 5.14.21-150400.24.122.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2.150400.24.58.2 | 5.14.21-150400.24.122.2.150400.24.58.2 |
kernel-docsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-obs-buildSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.1 | 5.14.21-150400.24.122.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.1 | 5.14.21-150400.24.122.1 |
kernel-defaultSUSE:Manager Proxy 4.3 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-default-baseSUSE:Manager Proxy 4.3 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2.150400.24.58.2 | 5.14.21-150400.24.122.2.150400.24.58.2 |
kernel-defaultopenSUSE:Leap Micro 5.3 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-default-baseopenSUSE:Leap Micro 5.3 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2.150400.24.58.2 | 5.14.21-150400.24.122.2.150400.24.58.2 |
kernel-defaultopenSUSE:Leap Micro 5.4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2 | 5.14.21-150400.24.122.2 |
kernel-default-baseopenSUSE:Leap Micro 5.4 From an advisory covering 320 CVEs |
before 5.14.21-150400.24.122.2.150400.24.58.2 | 5.14.21-150400.24.122.2.150400.24.58.2 |
dtb-aarch64openSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-64kbopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-debugopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-defaultopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-default-baseopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1.150500.6.31.1 | 5.14.21-150500.55.68.1.150500.6.31.1 |
kernel-docsopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-kvmsmallopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-obs-buildopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-obs-qaopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-sourceopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-symsopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-zfcpdumpopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
dtb-aarch64openSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.1 | 6.4.0-150600.23.14.1 |
kernel-64kbopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.1 | 6.4.0-150600.23.14.1 |
kernel-debugopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-defaultopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-default-baseopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2.150600.12.4.3 | 6.4.0-150600.23.14.2.150600.12.4.3 |
kernel-docsopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-kvmsmallopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-obs-buildopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-obs-qaopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-sourceopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-symsopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-zfcpdumpopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-azureopenSUSE:Leap 15.6 From an advisory covering 402 CVEs |
before 6.4.0-150600.8.8.2 | 6.4.0-150600.8.8.2 |
kernel-source-azureopenSUSE:Leap 15.6 From an advisory covering 402 CVEs |
before 6.4.0-150600.8.8.2 | 6.4.0-150600.8.8.2 |
kernel-syms-azureopenSUSE:Leap 15.6 From an advisory covering 402 CVEs |
before 6.4.0-150600.8.8.1 | 6.4.0-150600.8.8.1 |
kernel-rtopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
kernel-rt_debugopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
kernel-source-rtopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
kernel-syms-rtopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
linux-azureUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1 |
None known |
linux-aws-hweUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1 |
None known |
linux-azureUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71 |
None known |
linux-gcpUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1 |
None known |
linux-hweUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1 |
None known |
linux-hwe-edgeUbuntu:16.04:LTS |
All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 |
None known |
linux-oracleUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1 |
None known |
linuxUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107 |
None known |
linux-awsUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87 |
None known |
linux-aws-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 |
None known |
linux-aws-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 |
None known |
linux-aws-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1120.130~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2 |
5.4.0-1120.130~18.04.1 |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-azure-4.15Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176 |
None known |
linux-azure-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 |
None known |
linux-azure-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1126.133~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1 |
5.4.0-1126.133~18.04.1 |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-gcp-4.15Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161 |
None known |
linux-gcp-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 |
None known |
linux-gcp-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1124.133~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2 |
5.4.0-1124.133~18.04.1 |
linux-gke-4.15Ubuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 |
None known |
linux-gke-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 |
None known |
linux-gkeop-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-hwe-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-173.191~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1 |
5.4.0-173.191~18.04.1 |
linux-hwe-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 |
None known |
linux-ibm-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1067.72~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 38 moreShow less5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.1 |
5.4.0-1067.72~18.04.1 |
linux-kvmUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83 |
None known |
linux-oemUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 |
None known |
linux-oracleUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88 |
None known |
linux-oracle-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 |
None known |
linux-oracle-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 |
None known |
linux-oracle-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1119.128~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1 |
5.4.0-1119.128~18.04.1 |
linux-raspi-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1104.116~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1 |
5.4.0-1104.116~18.04.1 |
linux-aws-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93 |
None known |
linux-azure-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80 |
None known |
linux-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110 |
None known |
linux-gcp-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83 |
None known |
linux-aws-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-2000.4 |
None known |
linux-azure-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.2 |
None known |
linux-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1011.12 |
None known |
linux-gcp-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.1 |
None known |
linuxUbuntu:20.04:LTS |
before 5.4.0-173.191, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110 |
5.4.0-173.191 |
linux-awsUbuntu:20.04:LTS |
before 5.4.0-1120.130, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78 |
5.4.0-1120.130 |
linux-aws-5.15Ubuntu:20.04:LTS |
before 5.15.0-1056.61~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 28 moreShow less5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.1 |
5.15.0-1056.61~20.04.1 |
linux-azureUbuntu:20.04:LTS |
before 5.4.0-1126.133, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87 |
5.4.0-1126.133 |
linux-azure-5.15Ubuntu:20.04:LTS |
before 5.15.0-1058.66~20.04.2, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 30 moreShow less5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.1 |
5.15.0-1058.66~20.04.2 |
linux-bluefieldUbuntu:20.04:LTS |
before 5.4.0-1080.87, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 39 moreShow less5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.85 |
5.4.0-1080.87 |
linux-gcpUbuntu:20.04:LTS |
before 5.4.0-1124.133, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80 |
5.4.0-1124.133 |
linux-gcp-5.15Ubuntu:20.04:LTS |
before 5.15.0-1053.61~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 28 moreShow less5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.1 |
5.15.0-1053.61~20.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | OSV | |
| affected | OSV | |
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-52847 is a high vulnerability (CVSS 7.8) in Linux, published May 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in linux-lts 6.1.68-r0.
References
git.kernel.org/stable/c/bbc3b8dd2cb7817e703f112d988e4f4728f0f2a9
git.kernel.org/stable/c/b35fdade92c5058a5e727e233fe263b828de2c9a
git.kernel.org/stable/c/2f3d9198cdae1cb079ec8652f4defacd481eab2b
git.kernel.org/stable/c/51c94256a83fe4e17406c66ff3e1ad7d242d8574
git.kernel.org/stable/c/20568d06f6069cb835e05eed432edf962645d226
git.kernel.org/stable/c/1871014d6ef4812ad11ef7d838d73ce09d632267
Show 194 moreShow less
git.kernel.org/stable/c/847599fffa528b2cdec4e21b6bf7586dad982132
git.kernel.org/stable/c/bd5b50b329e850d467e7bcc07b2b6bde3752fbda
nvd.nist.gov/vuln/detail/CVE-2023-52847
github.com/advisories/GHSA-jv5m-87g4-wp39
access.redhat.com/errata/RHSA-2024:5101
access.redhat.com/security/cve/CVE-2021-46939
access.redhat.com/security/cve/CVE-2021-47018
access.redhat.com/security/cve/CVE-2021-47257
access.redhat.com/security/cve/CVE-2021-47284
access.redhat.com/security/cve/CVE-2021-47304
access.redhat.com/security/cve/CVE-2021-47373
access.redhat.com/security/cve/CVE-2021-47408
access.redhat.com/security/cve/CVE-2021-47461
access.redhat.com/security/cve/CVE-2021-47468
access.redhat.com/security/cve/CVE-2021-47491
access.redhat.com/security/cve/CVE-2021-47548
access.redhat.com/security/cve/CVE-2021-47579
access.redhat.com/security/cve/CVE-2021-47624
access.redhat.com/security/cve/CVE-2022-48632
access.redhat.com/security/cve/CVE-2022-48743
access.redhat.com/security/cve/CVE-2022-48747
access.redhat.com/security/cve/CVE-2022-48757
access.redhat.com/security/cve/CVE-2023-28746
access.redhat.com/security/cve/CVE-2023-52451
access.redhat.com/security/cve/CVE-2023-52463
access.redhat.com/security/cve/CVE-2023-52469
bugzilla.redhat.com/2263879
bugzilla.redhat.com/2265645
bugzilla.redhat.com/2265650
bugzilla.redhat.com/2265797
bugzilla.redhat.com/2266341
bugzilla.redhat.com/2266347
bugzilla.redhat.com/2266497
bugzilla.redhat.com/2266594
bugzilla.redhat.com/2267787
bugzilla.redhat.com/2268118
bugzilla.redhat.com/2269070
bugzilla.redhat.com/2269211
bugzilla.redhat.com/2270084
bugzilla.redhat.com/2270100
bugzilla.redhat.com/2270700
bugzilla.redhat.com/2271686
bugzilla.redhat.com/2271688
bugzilla.redhat.com/2272782
bugzilla.redhat.com/2272795
bugzilla.redhat.com/2273109
bugzilla.redhat.com/2273117
errata.almalinux.org/8/ALSA-2024-5101.html
errata.almalinux.org/8/ALSA-2024-5102.html
docs.bell-sw.com/security/cves/CVE-2023-52847
errata.cloudlinux.com/ubuntu18-els/CLSA-2025-1744213128.html
errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1744624441.html
nvd.nist.gov/vuln/detail/CVE-2021-47110
nvd.nist.gov/vuln/detail/CVE-2021-47219
nvd.nist.gov/vuln/detail/CVE-2021-47636
nvd.nist.gov/vuln/detail/CVE-2023-52621
nvd.nist.gov/vuln/detail/CVE-2023-52805
nvd.nist.gov/vuln/detail/CVE-2024-26872
nvd.nist.gov/vuln/detail/CVE-2024-26982
nvd.nist.gov/vuln/detail/CVE-2024-36921
nvd.nist.gov/vuln/detail/CVE-2024-41014
nvd.nist.gov/vuln/detail/CVE-2024-47696
nvd.nist.gov/vuln/detail/CVE-2024-49982
nvd.nist.gov/vuln/detail/CVE-2024-50074
nvd.nist.gov/vuln/detail/CVE-2024-50269
nvd.nist.gov/vuln/detail/CVE-2024-52332
nvd.nist.gov/vuln/detail/CVE-2024-5317
nvd.nist.gov/vuln/detail/CVE-2024-53172
nvd.nist.gov/vuln/detail/CVE-2024-53174
nvd.nist.gov/vuln/detail/CVE-2024-53183
nvd.nist.gov/vuln/detail/CVE-2024-53184
nvd.nist.gov/vuln/detail/CVE-2024-53194
nvd.nist.gov/vuln/detail/CVE-2024-53214
errata.cloudlinux.com/ubuntu16-els/CLSA-2025-1744713316.html
errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1763722365.html
errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1763731262.html
errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1763734783.html
github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52847.json
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
security-tracker.debian.org/tracker/CVE-2023-52847
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1677
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1678
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1680
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1682
issues.redhat.com/browse/RHEL-36222
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5101.json
cve.org/CVERecord?id=CVE-2021-46939
lore.kernel.org/linux-cve-announce/[email protected]/T
cve.org/CVERecord?id=CVE-2021-47018
git.kernel.org/stable/c/4b9fb2c9039a206d37f215936a4d5bee7b1bf9cd
git.kernel.org/stable/c/9ccba66d4d2aff9a3909aa77d57ea8b7cc166f3c
git.kernel.org/stable/c/a84df7c80bdac598d6ac9268ae578da6928883e8
git.kernel.org/stable/c/abb07dc5e8b61ab7b1dde20dd73aa01a3aeb183f
cve.org/CVERecord?id=CVE-2021-47257
lore.kernel.org/linux-cve-announce/2024052146-CVE-2021-47257-1d1c@gregkh/T
cve.org/CVERecord?id=CVE-2021-47284
lore.kernel.org/linux-cve-announce/2024052154-CVE-2021-47284-c8f5@gregkh/T
cve.org/CVERecord?id=CVE-2021-47304
lore.kernel.org/linux-cve-announce/2024052126-CVE-2021-47304-fc16@gregkh/T
cve.org/CVERecord?id=CVE-2021-47373
cve.org/CVERecord?id=CVE-2021-47408
lore.kernel.org/linux-cve-announce/2024052151-CVE-2021-47408-ad88@gregkh/T
cve.org/CVERecord?id=CVE-2021-47461
lore.kernel.org/linux-cve-announce/2024052225-CVE-2021-47461-a472@gregkh/T
cve.org/CVERecord?id=CVE-2021-47468
lore.kernel.org/linux-cve-announce/2024052227-CVE-2021-47468-6c1b@gregkh/T
cve.org/CVERecord?id=CVE-2021-47491
lore.kernel.org/linux-cve-announce/2024052241-CVE-2021-47491-437d@gregkh/T
cve.org/CVERecord?id=CVE-2021-47548
lore.kernel.org/linux-cve-announce/2024052441-CVE-2021-47548-e9c0@gregkh/T
cve.org/CVERecord?id=CVE-2021-47579
lore.kernel.org/linux-cve-announce/2024061915-CVE-2021-47579-4f78@gregkh/T
cve.org/CVERecord?id=CVE-2021-47624
lore.kernel.org/linux-cve-announce/2024071646-CVE-2021-47624-86cd@gregkh/T
cve.org/CVERecord?id=CVE-2022-48632
lore.kernel.org/linux-cve-announce/2024042854-CVE-2022-48632-465f@gregkh/T
cve.org/CVERecord?id=CVE-2022-48743
lore.kernel.org/linux-cve-announce/2024062003-CVE-2022-48743-ee30@gregkh/T
cve.org/CVERecord?id=CVE-2022-48747
lore.kernel.org/linux-cve-announce/2024062004-CVE-2022-48747-c63f@gregkh/T
cve.org/CVERecord?id=CVE-2022-48757
lore.kernel.org/linux-cve-announce/2024062007-CVE-2022-48757-c816@gregkh/T
cve.org/CVERecord?id=CVE-2022-50372
lore.kernel.org/linux-cve-announce/2025091717-CVE-2022-50372-e3b5@gregkh/T
cve.org/CVERecord?id=CVE-2022-50495
lore.kernel.org/linux-cve-announce/2025100419-CVE-2022-50495-fdee@gregkh/T
cve.org/CVERecord?id=CVE-2023-28746
intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
cve.org/CVERecord?id=CVE-2023-52451
lore.kernel.org/linux-cve-announce/2024022257-CVE-2023-52451-7bdb@gregkh/T
lore.kernel.org/linux-cve-announce/2024022335-CVE-2023-52463-6195@gregkh/T
git.kernel.org/stable/c/28dd788382c43b330480f57cd34cde0840896743
git.kernel.org/stable/c/3426f059eacc33ecc676b0d66539297e1cfafd02
git.kernel.org/stable/c/35fa2394d26e919f63600ce631e6aefc95ec2706
git.kernel.org/stable/c/520e213a0b97b64735a13950e9371e0a5d7a5dc3
git.kernel.org/stable/c/8a27d9d9fc9b5564b8904c3a77a7dea482bfa34e
git.kernel.org/stable/c/8b55b06e737feb2a645b0293ea27e38418876d63
git.kernel.org/stable/c/95084632a65d5c0d682a83b55935560bdcd2a1e3
git.kernel.org/stable/c/b6dcba02ee178282e0d28684d241e0b8462dea6a
git.kernel.org/stable/c/3027e7b15b02d2d37e3f82d6b8404f6d37e3b8cf
lore.kernel.org/linux-cve-announce/[email protected]/T
lore.kernel.org/linux-cve-announce/2024030255-CVE-2023-52530-ebf0@gregkh/T
download.vusec.net/papers/inspectre_sec24.pdf
intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/branch-history-injection.html
openwall.com/lists/oss-security/2024/04/09/15
vusec.net/projects/native-bhi
cisa.gov/known-exploited-vulnerabilities-catalog
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5102.json
errata.rockylinux.org/RLSA-2024:5101
errata.rockylinux.org/RLSA-2024:5102
errata.rockylinux.org/RXSA-2024:5101
suse.com/support/update/announcement/2024/suse-su-20242008-1
bugzilla.suse.com/1065729
bugzilla.suse.com/1141539
bugzilla.suse.com/1174585
bugzilla.suse.com/1181674
bugzilla.suse.com/1187716
bugzilla.suse.com/1190569
bugzilla.suse.com/1191949
bugzilla.suse.com/1192107
bugzilla.suse.com/1193983
bugzilla.suse.com/1194288
bugzilla.suse.com/1194869
bugzilla.suse.com/1196956
bugzilla.suse.com/1197915
bugzilla.suse.com/1200465
bugzilla.suse.com/1205205
bugzilla.suse.com/1207284
bugzilla.suse.com/1207361
bugzilla.suse.com/1207948
bugzilla.suse.com/1208149
bugzilla.suse.com/1209657
bugzilla.suse.com/1209799
suse.com/security/cve/CVE-2020-36788
suse.com/security/cve/CVE-2021-39698
suse.com/security/cve/CVE-2021-4148
suse.com/security/cve/CVE-2021-42327
suse.com/security/cve/CVE-2021-43056
suse.com/security/cve/CVE-2021-43527
suse.com/security/cve/CVE-2021-47200
suse.com/security/cve/CVE-2021-47358
suse.com/security/cve/CVE-2021-47359
suse.com/security/cve/CVE-2021-47360
suse.com/security/cve/CVE-2021-47361
suse.com/security/cve/CVE-2021-47362
suse.com/security/cve/CVE-2021-47363
suse.com/security/cve/CVE-2021-47364
suse.com/security/cve/CVE-2021-47365
suse.com/security/cve/CVE-2021-47366
suse.com/security/cve/CVE-2021-47367
suse.com/security/cve/CVE-2021-47368
suse.com/security/cve/CVE-2021-47369
suse.com/security/cve/CVE-2021-47370
ubuntu.com/security/CVE-2023-52847
Left out here: 281 package rows, 1,405 versions, 3,596 references and the rest of 18 source descriptions. The JSON record has them.