CVE-2023-52867

drm/radeon: possible buffer overflow

7.1 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: possible buffer overflow

Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: High

Exploit likelihood

0.26%Up 0.2 points since May 22, 2024

What each source reports

CVE List Score used 7.1

drm/radeon: possible buffer overflow

In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: possible buffer overflow

Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

Record: CVE-2023-52867
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

EUVDEUVD-2023-59580 7.1

In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: possible buffer overflow

Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

Record: EUVD-2023-59580
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-xmph-r8h2-5h79 7.8

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer...

In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: possible buffer overflow

Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

Record: GHSA-xmph-r8h2-5h79
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

NVD 7.1

In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: possible buffer overflow

Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

Record: CVE-2023-52867
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSVBELL-CVE-2023-52867 7.8

Record: BELL-CVE-2023-52867
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.1

drm/radeon: possible buffer overflow

In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: possible buffer overflow

Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

Record: CVE-2023-52867
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

Show 27 moreShow less

OSVDEBIAN-CVE-2023-52867 7.8

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

Record: DEBIAN-CVE-2023-52867
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1677 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: ep0: fix NULL pointer exception

There is no validation of the index from dwc3_wIndex_to_dep() and we might be referring a non-existing ep and trigger a NULL pointer exception. In certain configurations we might use fewer eps and the index might wrongly indicate a larger ep index than existing.

By adding this validation from the patch we can actually report a wrong index back to the caller.

In our usecase we are using a composite device on an older kernel, but upstream might use this fix also. Unfortunately, I cannot describe the hardware for others to reproduce the issue as it is a proprietary implementation.

[ 82.958261] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a4 [ 82.966891] Mem abort info: [ 82.969663] ESR = 0x96000006 [ 82.972703] Exception class = DABT (current EL), IL = 32 bits [ 82.978603] SET = 0, FnV = 0 [ 82.981642] EA = 0, S1PTW = 0 [ 82.984765] Data abort info: [ 82.987631] ISV = 0, ISS = 0x00000006 [ 82.991449] CM = 0, WnR = 0 [ 82.994409] user pgtable: 4k pages, 39-bit VAs, pgdp = 00000000c6210ccc [ 83.000999] [00000000000000a4] pgd=0000000053aa5003, pud=0000000053aa5003, pmd=0000000000000000 [ 83.009685] Internal error: Oops: 96000006 [#1] PREEMPT SMP [ 83.026433] Process irq/62-dwc3 (pid: 303, stack limit = 0x000000003985154c) [ 83.033470] CPU: 0 PID: 303 Comm: irq/62-dwc3 Not tainted 4.19.124 #1 [ 83.044836] pstate: 60000085 (nZCv daIf -PAN -UAO) [ 83.049628] pc : dwc3_ep0_handle_feature+0x414/0x43c [ 83.054558] lr : dwc3_ep0_interrupt+0x3b4/0xc94

...

[ 83.141788] Call trace: [ 83.144227] dwc3_ep0_handle_feature+0x414/0x43c [ 83.148823] dwc3_ep0_interrupt+0x3b4/0xc94 [ 83.181546] ---[ end trace aac6b5267d84c32f ]---(CVE-2021-47269)

In the Linux kernel, the following vulnerability has been resolved:

isdn: mISDN: netjet: Fix crash in nj_probe:

'nj_setup' in netjet.c might fail with -EIO and in this case 'card->irq' is initialized and is bigger than zero. A subsequent call to 'nj_release' will free the irq that has not been requested.

Fix this bug by deleting the previous assignment to 'card->irq' and just keep the assignment before 'request_irq'.

The KASAN's log reveals it:

[ 3.354615 ] WARNING: CPU: 0 PID: 1 at kernel/irq/manage.c:1826 free_irq+0x100/0x480 [ 3.355112 ] Modules linked in: [ 3.355310 ] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.13.0-rc1-00144-g25a1298726e #13 [ 3.355816 ] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 3.356552 ] RIP: 0010:free_irq+0x100/0x480 [ 3.356820 ] Code: 6e 08 74 6f 4d 89 f4 e8 5e ac 09 00 4d 8b 74 24 18 4d 85 f6 75 e3 e8 4f ac 09 00 8b 75 c8 48 c7 c7 78 c1 2e 85 e8 e0 cf f5 ff <0f> 0b 48 8b 75 c0 4c 89 ff e8 72 33 0b 03 48 8b 43 40 4c 8b a0 80 [ 3.358012 ] RSP: 0000:ffffc90000017b48 EFLAGS: 00010082 [ 3.358357 ] RAX: 0000000000000000 RBX: ffff888104dc8000 RCX: 0000000000000000 [ 3.358814 ] RDX: ffff8881003c8000 RSI: ffffffff8124a9e6 RDI: 00000000ffffffff [ 3.359272 ] RBP: ffffc90000017b88 R08: 0000000000000000 R09: 0000000000000000 [ 3.359732 ] R10: ffffc900000179f0 R11: 0000000000001d04 R12: 0000000000000000 [ 3.360195 ] R13: ffff888107dc6000 R14: ffff888107dc6928 R15: ffff888104dc80a8 [ 3.360652 ] FS: 0000000000000000(0000) GS:ffff88817bc00000(0000) knlGS:0000000000000000 [ 3.361170 ] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3.361538 ] CR2: 0000000000000000 CR3: 000000000582e000 CR4: 00000000000006f0 [ 3.362003 ] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3.362175 ] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3.362175 ] Call Trace: [ …

Record: OESA-2024-1677
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVOESA-2024-1678 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: ep0: fix NULL pointer exception

By adding this validation from the patch we can actually report a wrong index back to the caller.

...

[ 83.141788] Call trace: [ 83.144227] dwc3_ep0_handle_feature+0x414/0x43c [ 83.148823] dwc3_ep0_interrupt+0x3b4/0xc94 [ 83.181546] ---[ end trace aac6b5267d84c32f ]---(CVE-2021-47269)

In the Linux kernel, the following vulnerability has been resolved:

isdn: mISDN: netjet: Fix crash in nj_probe:

'nj_setup' in netjet.c might fail with -EIO and in this case 'card->irq' is initialized and is bigger than zero. A subsequent call to 'nj_release' will free the irq that has not been requested.

Fix this bug by deleting the previous assignment to 'card->irq' and just keep the assignment before 'request_irq'.

The KASAN's log reveals it:

Record: OESA-2024-1678
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVOESA-2024-1679 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drm/tegra: dsi: Add missing check for of_find_device_by_node

Add check for the return value of of_find_device_by_node() and return the error if it fails in order to avoid NULL pointer dereference.(CVE-2023-52650)

In the Linux kernel, the following vulnerability has been resolved:

pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()

In persistent_ram_init_ecc(), on 64-bit arches DIV_ROUND_UP() will return 64-bit value since persistent_ram_zone::buffer_size has type size_t which is derived from the 64-bit unsigned long, while the ecc_blocks variable this value gets assigned to has (always 32-bit) int type. Even if that value fits into int type, an overflow is still possible when calculating the size_t typed ecc_total variable further below since there's no cast to any 64-bit type before multiplication. Declaring the ecc_blocks variable as size_t should fix this mess...

Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.(CVE-2023-52685)

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function

With tpd12s015_remove() marked with __exit this function is discarded when the driver is compiled as a built-in. The result is that when the driver unbinds there is no cleanup done which results in resource leakage or worse.(CVE-2023-52694)

In the Linux kernel, the following vulnerability has been resolved:

crypto: pcrypt - Fix hungtask for PADATA_RESET

We found a hungtask bug in test_aead_vec_cfg as follows:

INFO: task cryptomgr_test:391009 blocked for more than 120 seconds. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Call trace: __switch_to+0x98/0xe0 __schedule+0x6c4/0xf40 schedule+0xd8/0x1b4 schedule_timeout+0x474/0x560 wait_for_common+0x368/0x4e0 wait_for_completion+0x20/0x30 wait_for_completion+0x20/0x30 test_aead_vec_cfg+0xab4/0xd50 test_aead+0x144/0x1f0 alg_test_aead+0xd8/0x1e0 alg_test+0x634/0x890 cryptomgr_test+0x40/0x70 kthread+0x1e0/0x220 ret_from_fork+0x10/0x18 Kernel panic - not syncing: hung_task: blocked tasks

For padata_do_parallel, when the return err is 0 or -EBUSY, it will call wait_for_completion(&wait->completion) in test_aead_vec_cfg. In normal case, aead_request_complete() will be called in pcrypt_aead_serial and the return err is 0 for padata_do_parallel. But, when pinst->flags is PADATA_RESET, the return err is -EBUSY for padata_do_parallel, and it won't call aead_request_complete(). Therefore, test_aead_vec_cfg will hung at wait_for_completion(&wait->completion), which will cause hungtask.

In order to resolve the problem, we replace the return err -EBUSY with -EAGAIN, which means parallel_data is changing, and the caller should call it again.

v3: remove retry and just change the return err. v2: introduce padata_try_do_parallel() in pcrypt_aead_encrypt and pcrypt_aead_decrypt to solve the hungtask.(CVE-2023-52813)

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL

In certain types of chips, such as VEGA20, reading the amdgpu_regs_smc file could result in an abnormal null pointer access when the smc_rreg pointer is NULL. Below are the steps to reproduce this issue and the corresponding exception log:

Navigate to the…

Record: OESA-2024-1679
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVOESA-2024-1680 7.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume

In current code, when a PCI error state pci_channel_io_normal is detectd, it will report PCI_ERS_RESULT_CAN_RECOVER status to PCI driver, and PCI driver will continue the execution of PCI resume callback report_resume by pci_walk_bridge, and the callback will go into amdgpu_pci_resume finally, where write lock is releasd unconditionally without acquiring such lock first. In this case, a deadlock will happen when other threads start to acquire the read lock.

To fix this, add a member in amdgpu_device strucutre to cache pci_channel_state, and only continue the execution in amdgpu_pci_resume when it's pci_channel_io_frozen.(CVE-2021-47421)

In the Linux kernel, the following vulnerability has been resolved:

ptp: Fix possible memory leak in ptp_clock_register()

I got memory leak as follows when doing fault injection test:

unreferenced object 0xffff88800906c618 (size 8): comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 (age 13.188s) hex dump (first 8 bytes): 70 74 70 30 00 00 00 00 ptp0.... backtrace: [<00000000312ed458>] __kmalloc_track_caller+0x19f/0x3a0 [<0000000079f6e2ff>] kvasprintf+0xb5/0x150 [<0000000026aae54f>] kvasprintf_const+0x60/0x190 [<00000000f323a5f7>] kobject_set_name_vargs+0x56/0x150 [<000000004e35abdd>] dev_set_name+0xc0/0x100 [<00000000f20cfe25>] ptp_clock_register+0x9f4/0xd30 [ptp] [<000000008bb9f0de>] idt82p33_probe.cold+0x8b6/0x1561 [ptp_idt82p33]

When posix_clock_register() returns an error, the name allocated in dev_set_name() will be leaked, the put_device() should be used to give up the device reference, then the name will be freed in kobject_cleanup() and other memory will be freed in ptp_clock_release().(CVE-2021-47455)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: fix memory leak when blob is malformed

The bug fix was incomplete, it "replaced" crash with a memory leak. The old code had an assignment to "ret" embedded into the conditional, restore this.(CVE-2022-48641)

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: single: fix potential NULL dereference

Added checking of pointer "function" in pcs_set_mux(). pinmux_generic_get_function() can return NULL and the pointer "function" was dereferenced without checking against NULL.

Found by Linux Verification Center (linuxtesting.org) with SVACE.(CVE-2022-48708)

In the Linux kernel, the following vulnerability has been resolved:

drm/tegra: dsi: Add missing check for of_find_device_by_node

Add check for the return value of of_find_device_by_node() and return the error if it fails in order to avoid NULL pointer dereference.(CVE-2023-52650)

In the Linux kernel, the following vulnerability has been resolved:

io_uring: drop any code related to SCM_RIGHTS

This is dead code after we dropped support for passing io_uring fds over SCM_RIGHTS, get rid of it.(CVE-2023-52656)

In the Linux kernel, the following vulnerability has been resolved:

net: atlantic: eliminate double free in error handling logic

Driver has a logic leak in ring data allocation/free, where aq_ring_free could be called multiple times on same ring, if system is under stress and got memory allocation error.

Ring pointer was used as an indicator of failure, but this is not correct since only ring data is allocated/deallocated. Ring itself is an array member.

Changing ring allocation functions to return error code directly. This simplifies error handling and eliminates aq_ring_free on higher layer.(CVE-2023-52664)

In the Linux kernel, the following vulnerability has been…

Record: OESA-2024-1680
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1681 7.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume

To fix this, add a member in amdgpu_device strucutre to cache pci_channel_state, and only continue the execution in amdgpu_pci_resume when it's pci_channel_io_frozen.(CVE-2021-47421)

In the Linux kernel, the following vulnerability has been resolved:

ptp: Fix possible memory leak in ptp_clock_register()

I got memory leak as follows when doing fault injection test:

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: single: fix potential NULL dereference

Added checking of pointer "function" in pcs_set_mux(). pinmux_generic_get_function() can return NULL and the pointer "function" was dereferenced without checking against NULL.

Found by Linux Verification Center (linuxtesting.org) with SVACE.(CVE-2022-48708)

In the Linux kernel, the following vulnerability has been resolved:

drm/tegra: dsi: Add missing check for of_find_device_by_node

Add check for the return value of of_find_device_by_node() and return the error if it fails in order to avoid NULL pointer dereference.(CVE-2023-52650)

In the Linux kernel, the following vulnerability has been resolved:

io_uring: drop any code related to SCM_RIGHTS

This is dead code after we dropped support for passing io_uring fds over SCM_RIGHTS, get rid of it.(CVE-2023-52656)

In the Linux kernel, the following vulnerability has been resolved:

net: atlantic: eliminate double free in error handling logic

Driver has a logic leak in ring data allocation/free, where aq_ring_free could be called multiple times on same ring, if system is under stress and got memory allocation error.

Ring pointer was used as an indicator of failure, but this is not correct since only ring data is allocated/deallocated. Ring itself is an array member.

Changing ring allocation functions to return error code directly. This simplifies error handling and eliminates aq_ring_free on higher layer.(CVE-2023-52664)

In the Linux kernel, the following vulnerability has been resolved:

ACPI: LPIT: Avoid u32 multiplication overflow

In lpit_update_residency() there is a possibility of overflow in multiplication, if tsc_khz is large enough (> UINT_MAX/1000).

Change multiplication to mul_u32_u32().

Found by Linux Verification Center (linuxtesting.org) with SVACE.(CVE-2023-52683)

In the…

Record: OESA-2024-1681
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1682 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume

To fix this, add a member in amdgpu_device strucutre to cache pci_channel_state, and only continue the execution in amdgpu_pci_resume when it's pci_channel_io_frozen.(CVE-2021-47421)

In the Linux kernel, the following vulnerability has been resolved:

ptp: Fix possible memory leak in ptp_clock_register()

I got memory leak as follows when doing fault injection test:

In the Linux kernel, the following vulnerability has been resolved:

net: enetc: deny offload of tc-based TSN features on VF interfaces

TSN features on the ENETC (taprio, cbs, gate, police) are configured through a mix of command BD ring messages and port registers: enetc_port_rd(), enetc_port_wr().

Port registers are a region of the ENETC memory map which are only accessible from the PCIe Physical Function. They are not accessible from the Virtual Functions.

Moreover, attempting to access these registers crashes the kernel:

$ echo 1 > /sys/bus/pci/devices/0000:00:00.0/sriov_numvfs pci 0000:00:01.0: [1957:ef00] type 00 class 0x020001 fsl_enetc_vf 0000:00:01.0: Adding to iommu group 15 fsl_enetc_vf 0000:00:01.0: enabling device (0000 -> 0002) fsl_enetc_vf 0000:00:01.0 eno0vf0: renamed from eth0 $ tc qdisc replace dev eno0vf0 root taprio num_tc 8 map 0 1 2 3 4 5 6 7
queues 1@0 1@1 1@2 1@3 1@4 1@5 1@6 1@7 base-time 0
sched-entry S 0x7f 900000 sched-entry S 0x80 100000 flags 0x2 Unable to handle kernel paging request at virtual address ffff800009551a08 Internal error: Oops: 96000007 [#1] PREEMPT SMP pc : enetc_setup_tc_taprio+0x170/0x47c lr : enetc_setup_tc_taprio+0x16c/0x47c Call trace: enetc_setup_tc_taprio+0x170/0x47c enetc_setup_tc+0x38/0x2dc taprio_change+0x43c/0x970 taprio_init+0x188/0x1e0 qdisc_create+0x114/0x470 tc_modify_qdisc+0x1fc/0x6c0 rtnetlink_rcv_msg+0x12c/0x390

Split enetc_setup_tc() into separate functions for the PF and for the VF drivers. Also remove enetc_qos.o from being included into enetc-vf.ko, since it serves absolutely no purpose there.(CVE-2022-48645)

In the Linux kernel, the following vulnerability has been resolved:

drm/tegra: dsi: Add missing check for of_find_device_by_node

Add check for the return value of of_find_device_by_node() and return the error if it fails in order to avoid NULL pointer dereference.(CVE-2023-52650)

In the Linux kernel,…

Record: OESA-2024-1682
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-52867 7.8

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access.

Record: UBUNTU-CVE-2023-52867
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-11

OSVCLSA-2025-1759866837 No score

kernel: Fix of 44 CVEs

mm: zswap: fix missing folio cleanup in writeback race path {CVE-2024-26832}
mm: fix zswap writeback race condition {CVE-2023-53178}
dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929}
drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
gpio: davinci: Validate the obtained number of IRQs {CVE-2024-42092}
ASoC: topology: Fix references to freed memory {CVE-2024-41069}
Bluetooth: hci_sock: Fix not validating setsockopt user input {CVE-2024-35963}
Bluetooth: ISO: Fix not validating setsockopt user input {CVE-2024-35964}
Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967}
dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939}
wifi: mwifiex: avoid possible NULL skb pointer dereference {CVE-2023-53384}
md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request {CVE-2023-53380}
icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). {CVE-2023-53343}
thermal: core: prevent potential string overflow {CVE-2023-52868}
drm/amdkfd: Fix shift out-of-bounds issue {CVE-2023-52816}
drm/vkms: Fix null-ptr-deref in vkms_release() {CVE-2022-50369}
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
net/mlx5: Fix tainted pointer delete is case of flow rules creation fail {CVE-2024-40940}
ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796}
platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
platform/x86: wmi: remove unnecessary initializations
perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498}
net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001}
usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
kobject_uevent: Fix OOB access within zap_modalias_env() {CVE-2024-42292}
mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() {CVE-2023-53401}
net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125}
drm/radeon: possible buffer overflow {CVE-2023-52867}
media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
wifi: mac80211_hwsim: Fix possible NULL dereference {CVE-2023-53209}
vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
wifi: iwlwifi: fw: fix memory leak in debugfs {CVE-2023-53422}
drm/amdgpu: fix memory leak in mes self test {CVE-2023-53370}
skbuff: skb_segment, Call zero copy functions before using skbuff frags {CVE-2023-53354}
md/raid10: fix leak of 'r10bio->remaining' for recovery {CVE-2023-53299}
nfsd: call op_release, even when op_func returns an error {CVE-2023-53241}
ppdev: Add an error check in register_device {CVE-2024-36015}
wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
net: add atomic_long_t to net_device_stats fields {CVE-2024-26882}

Record: CLSA-2025-1759866837
Updated: 2026-11-02

OSVCLSA-2025-1763731262 No score

kernel: Fix of 66 CVEs

media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847} {CVE-2023-52847}
firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087} {CVE-2022-50087}
wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226} {CVE-2023-53226}
vsock: Fix transport_* TOCTOU {CVE-2025-38461} {CVE-2025-38461}
ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} {CVE-2025-39757}
locking/ww_mutex/test: Fix potential workqueue corruption {CVE-2023-52836} {CVE-2023-52836}
media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621} {CVE-2024-38621}
ath10k: skip ath10k_halt during suspend for driver state RESTARTING {CVE-2022-49519} {CVE-2022-49519}
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() {CVE-2022-48738} {CVE-2022-48738}
partitions: mac: fix handling of bogus partition table {CVE-2025-21772} {CVE-2025-21772}
ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292} {CVE-2022-49292}
usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} {CVE-2025-21704}
vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} {CVE-2024-53214}
ppdev: Add an error check in register_device {CVE-2024-36015} {CVE-2024-36015}
scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} {CVE-2023-53675}
enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659} {CVE-2024-38659}
dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929} {CVE-2024-57929}
dlm: fix plock invalid read {CVE-2022-49407} {CVE-2022-49407}
rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev {CVE-2022-48759} {CVE-2022-48759}
bpf: Don't use tnum_range on array range checking for poke descriptors {CVE-2022-49985} {CVE-2022-49985}
net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001} {CVE-2025-38001}
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes {CVE-2023-53185} {CVE-2023-53185}
dm integrity: fix memory corruption when tag_size is less than digest size {CVE-2022-49044} {CVE-2022-49044}
drm/radeon: possible buffer overflow {CVE-2023-52867} {CVE-2023-52867}
ata: sata_dwc_460ex: Fix crash due to OOB write {CVE-2022-49073} {CVE-2022-49073}
fs/jfs: Add validity check for db_maxag and db_agpref {CVE-2023-52804} {CVE-2023-52804}
net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581} {CVE-2023-53581}
thermal: core: prevent potential string overflow {CVE-2023-52868} {CVE-2023-52868}
ACPI: CPPC: Avoid out of bounds access when parsing _CPC data {CVE-2022-49145} {CVE-2022-49145}
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} {CVE-2025-39817}
igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} {CVE-2024-52332}
do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} {CVE-2025-38498}
drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119} {CVE-2024-42119}
wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408} {CVE-2022-50408}
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} {CVE-2024-58014}
wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229} {CVE-2023-53229}
ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} {CVE-2024-56570}
net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} {CVE-2023-53125}
net: stmmac: fix dma queue left shift overflow issue {CVE-2022-49592} {CVE-2022-49592}
iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904} {CVE-2024-57904}
crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} {CVE-2023-53373}
sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} {CVE-2025-38718}
KVM: SVM: Don't BUG if userspace…

Record: CLSA-2025-1763731262
Updated: 2026-11-02

OSVCLSA-2025-1763734783 No score

kernel: Fix of 64 CVEs

media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847}
firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087}
wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226}
vsock: Fix transport_* TOCTOU {CVE-2025-38461}
ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
perf/aux: Fix AUX buffer serialization {CVE-2024-46713}
locking/ww_mutex/test: Fix potential workqueue corruption {CVE-2023-52836}
media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
ath10k: skip ath10k_halt during suspend for driver state RESTARTING {CVE-2022-49519}
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() {CVE-2022-48738}
partitions: mac: fix handling of bogus partition table {CVE-2025-21772}
ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
ppdev: Add an error check in register_device {CVE-2024-36015}
scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675}
enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659}
dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929}
dlm: fix plock invalid read {CVE-2022-49407}
rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev {CVE-2022-48759}
bpf: Don't use tnum_range on array range checking for poke descriptors {CVE-2022-49985}
net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001}
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes {CVE-2023-53185}
dm integrity: fix memory corruption when tag_size is less than digest size {CVE-2022-49044}
drm/radeon: possible buffer overflow {CVE-2023-52867}
ata: sata_dwc_460ex: Fix crash due to OOB write {CVE-2022-49073}
fs/jfs: Add validity check for db_maxag and db_agpref {CVE-2023-52804}
net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581}
thermal: core: prevent potential string overflow {CVE-2023-52868}
ACPI: CPPC: Avoid out of bounds access when parsing _CPC data {CVE-2022-49145}
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817}
igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498}
drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119}
wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408}
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014}
wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229}
ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570}
net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125}
net: stmmac: fix dma queue left shift overflow issue {CVE-2022-49592}
iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904}
crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}
sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718}
KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 {CVE-2022-50228}
soundwire: cadence: fix invalid PDI offset {CVE-2024-38635}
wifi: at76c50x: fix use after free access in at76_disconnect {CVE-2025-37796}
ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365}
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans {CVE-2023-53034}
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297}
scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527}
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730}
scsi:…

Record: CLSA-2025-1763734783
Updated: 2026-11-02

OSVCLSA-2026-1780132980 No score

kernel: Fix of 46 CVEs

tracing: Fix potential double free in create_var_ref() {CVE-2022-49410}
scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216}
e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093}
module: limit enabling module.sig_enforce {CVE-2021-35039}
Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm {CVE-2022-42896}
HID: elan: Fix potential double free in elan_input_configured {CVE-2022-49508}
libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
scsi: qla2xxx: Fix improper freeing of purex item {CVE-2025-68741}
binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497}
ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}
kernfs: fix use-after-free in __kernfs_remove {CVE-2022-50432}
rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails {CVE-2023-53307}
virtio_console: Assure used length from device is limited {CVE-2021-38160}
Squashfs: check metadata block offset is within range {CVE-2026-23388}
Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475}
wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531}
cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741}
ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988}
selinux: Add boundary check in put_entry() {CVE-2022-50200}
nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116}
ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285}
drm/i915/perf: add sentinel to xehp_oa_b_counters {CVE-2023-53646}
net: mdio: validate parameter addr in mdiobus_get_phy() {CVE-2023-53019}
wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() {CVE-2023-53570}
vt: Clear selection before changing the font {CVE-2022-49948}
ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917}
netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907}
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366}
lwt: Fix return values of BPF xmit ops {CVE-2023-53338}
ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315}
udf: Do not bother merging very long extents {CVE-2023-53506}
gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622}
wifi: mac80211_hwsim: drop short frames {CVE-2023-53321}
thermal: core: prevent potential string overflow {CVE-2023-52868}
drm/radeon: possible buffer overflow {CVE-2023-52867}
ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075}
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040}
drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206}
ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
smb: client: reject userspace cifs.spnego descriptions
ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}

Record: CLSA-2026-1780132980
Updated: 2026-11-02

OSVCLSA-2026-1782148597 No score

Fix of 33 CVEs

CVE-2022-49267
- mmc: core: use sysfs_emit() instead of sprintf() {CVE-2022-49267}
- mmc: sdio: Export SDIO revision and info strings to userspace {CVE-2022-49267}
CVE-2026-43040
- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040}
CVE-2026-43027
- netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
CVE-2025-71091
- team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
CVE-2025-71075
- scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
CVE-2025-38565
- perf/core: Exit early on perf_mmap() fail {CVE-2025-38565}
CVE-2025-38401
- mtk-sd: Prevent memory corruption from DMA map failure {CVE-2025-38401}
CVE-2023-53218
- rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218}
CVE-2025-38230
- jfs: validate AG parameters in dbMount() to prevent crashes {CVE-2025-38230}
CVE-2023-52867
- drm/radeon: possible buffer overflow {CVE-2023-52867}
CVE-2023-53432
- firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432}
CVE-2025-39891
- wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
CVE-2025-38666
- net: appletalk: Fix use-after-free in AARP proxy probe {CVE-2025-38666}
CVE-2025-39828
- atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() {CVE-2025-39828}
CVE-2026-43020
- Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
CVE-2026-43011
- net/x25: Fix potential double free of skb {CVE-2026-43011}
CVE-2026-31778
- ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}
CVE-2026-31748
- comedi: me_daq: Fix potential overrun of firmware buffer {CVE-2026-31748}
CVE-2026-31747
- comedi: me4000: Fix potential overrun of firmware buffer {CVE-2026-31747}
CVE-2026-31720
- usb: gadget: f_uac1_legacy: validate control request size {CVE-2026-31720}
CVE-2026-31696
- rxrpc: Fix missing validation of ticket length in non-XDR key preparsing {CVE-2026-31696}
CVE-2026-31659
- batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
CVE-2026-31629
- nfc: llcp: add missing return after LLCP_CLOSED checks {CVE-2026-31629}
CVE-2026-31626
- staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() {CVE-2026-31626}
CVE-2026-31622
- NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622}
CVE-2026-31602
- ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
CVE-2026-31583
- media: em28xx: fix use-after-free in em28xx_v4l2_open() {CVE-2026-31583}
CVE-2026-31581
- ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
CVE-2026-31576
- media: hackrf: fix to not free memory after the device is registered in hackrf_probe() {CVE-2026-31576}
CVE-2026-31504
- net: fix fanout UAF in packet_release() via NETDEV_UP race {CVE-2026-31504}
CVE-2026-23388
- Squashfs: check metadata block offset is within range {CVE-2026-23388}
CVE-2026-23372
- nfc: rawsock: cancel tx_work before socket teardown {CVE-2026-23372}
Bump ABI 4.15.0-259

Record: CLSA-2026-1782148597
Updated: 2026-11-02

OSVSUSE-SU-2024:1979-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2022-48686: Fix UAF when detecting digest errors (bsc#1223948). Update blacklist.conf: remove entry
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2022-48697: Fix a use-after-free (bsc#1223922). Update blacklist.conf: drop entry from it
CVE-2024-26846: Do not wait in vain when unloading module (bsc#1223023).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2021-47246: Fix page reclaim for dead peer hairpin (bsc#1224831).
CVE-2023-52732: Blocklist the kclient when receiving corrupted snap trace (bsc#1225222 CVE-2023-52732).
CVE-2024-35936: Add missing mutex_unlock in btrfs_relocate_sys_chunks() (bsc#1224644)
CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2024-36029: Pervent access to suspended controller (bsc#1225708 CVE-2024-36029)
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2021-47352: Add validation for used length (bsc#1225124).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2021-47431: Fix gart.bo pin_count leak (bsc#1225390).
CVE-2024-35935: Handle path ref underflow in header iterate_inode_ref() (bsc#1224645)
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2021-47423: Fix file release memory leak (bsc#1225366).
CVE-2022-48710: Fix a possible null pointer dereference (bsc#1225230).
CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2024-35932: Do not check if plane->state->fb == state->fb (bsc#1224650).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2024-35809: Drain runtime-idle callbacks before driver removal (bsc#1224738).
CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
CVE-2024-35982: Avoid infinite loop trying to resize local TT (bsc#1224566)
CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960, CVE-2021-47277).
CVE-2024-35791: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (bsc#1224725).
CVE-2021-47401: Fix stack information leak (bsc#1225242).
CVE-2023-52867: Fix possible buffer overflow (bsc#1225009).
CVE-2023-52821: Fix a possible null pointer dereference (bsc#1225022).
CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
CVE-2021-47361: Fix error handling in mcb_alloc_bus() (bsc#1225151).
CVE-2023-52864: Fix opening of char device (bsc#1225132).
CVE-2022-48708: Fix potential NULL dereference (bsc#1224942).
CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648).
CVE-2021-47238: Fix memory leak in ip_mc_add1_src (bsc#1224847)
CVE-2023-52730: Fix possible resource leaks in some error paths (bsc#1224956).
CVE-2021-47355: Fix possible use-after-free in nicstar_cleanup() (bsc#1225141).
CVE-2021-47245: Fix out of bounds when parsing TCP options (bsc#1224838)
CVE-2024-35878: Prevent NULL pointer dereference in vsnprintf() (bsc#1224671).
CVE-2023-52747: Restore allocated resources on failed copyout (bsc#1224931) -…

Record: SUSE-SU-2024:1979-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1983-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2022-48686: Fix UAF when detecting digest errors (bsc#1223948).
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2022-48697: Fix a use-after-free (bsc#1223922).
CVE-2024-26846: Do not wait in vain when unloading module (bsc#1223023).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2021-47246: Fix page reclaim for dead peer hairpin (bsc#1224831).
CVE-2023-52732: Blocklist the kclient when receiving corrupted snap trace (bsc#1225222).
CVE-2024-35936: Add missing mutex_unlock in btrfs_relocate_sys_chunks() (bsc#1224644)
CVE-2021-47548: Fixed a possible array out-of-bounds (bsc#1225506)
CVE-2024-36029: Pervent access to suspended controller (bsc#1225708)
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2021-47352: Add validation for used length (bsc#1225124).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2021-47431: Fix gart.bo pin_count leak (bsc#1225390).
CVE-2024-35935: Handle path ref underflow in header iterate_inode_ref() (bsc#1224645)
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2021-47423: Fix file release memory leak (bsc#1225366).
CVE-2022-48710: Fix a possible null pointer dereference (bsc#1225230).
CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2024-35932: Do not check if plane->state->fb == state->fb (bsc#1224650).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2024-35809: Drain runtime-idle callbacks before driver removal (bsc#1224738).
CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
CVE-2024-35982: Avoid infinite loop trying to resize local TT (bsc#1224566)
CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960).
CVE-2024-35791: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (bsc#1224725).
CVE-2021-47401: Fix stack information leak (bsc#1225242).
CVE-2023-52867: Fix possible buffer overflow (bsc#1225009).
CVE-2023-52821: Fix a possible null pointer dereference (bsc#1225022).
CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
CVE-2021-47361: Fix error handling in mcb_alloc_bus() (bsc#1225151).
CVE-2023-52864: Fix opening of char device (bsc#1225132).
CVE-2022-48708: Fix potential NULL dereference (bsc#1224942).
CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648).
CVE-2021-47238: Fix memory leak in ip_mc_add1_src (bsc#1224847)
CVE-2023-52730: Fix possible resource leaks in some error paths (bsc#1224956).
CVE-2021-47355: Fix possible use-after-free in nicstar_cleanup() (bsc#1225141).
CVE-2021-47245: Fix out of bounds when parsing TCP options (bsc#1224838)
CVE-2024-35878: Prevent NULL pointer dereference in vsnprintf() (bsc#1224671).
CVE-2023-52747: Restore allocated resources on failed copyout (bsc#1224931)
CVE-2021-47249: Fix memory leak in rds_recvmsg (bsc#1224880)
CVE-2021-47397: Break out if skb_header_pointer returns NULL in…

Record: SUSE-SU-2024:1983-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
CVE-2024-27417: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721)
CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
CVE-2024-35791: Flush pages under…

Record: SUSE-SU-2024:2008-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2011-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
CVE-2024-35904: Fixed dereference of garbage after mount failure (bsc#1224494).
CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).

The following non-security bugs were fixed:

af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
filemap: remove use of wait bookmarks (bsc#1224085).
idpf: extend tx watchdog timeout (bsc#1224137).
ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
powerpc: Refactor verification of MSR_RI (bsc#1223191).
supported.conf: support tcp_dctcp module (jsc#PED-8111)

Record: SUSE-SU-2024:2011-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2019-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-35869: Guarantee refcounted children from parent session (bsc#1224679).
CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2024-35964: Fixed not validating setsockopt user input (bsc#1224581).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
CVE-2024-35860: struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios (bsc#1224530).
CVE-2024-35852: Fixed memory leak when canceling rehash work (bsc#1224502).
CVE-2024-36006: Fixed incorrect list API usage (bsc#1224541).
CVE-2024-36007: Fixed warning during rehash (bsc#1224543).
CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
CVE-2024-35907: Call request_irq() after NAPI initialized (bsc#1224492).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure…

Record: SUSE-SU-2024:2019-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2184-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2021-47113: Abort btrfs rename_exchange if we fail to insert the second ref (bsc#1221543).
CVE-2021-47131: Fixed a use-after-free after the TLS device goes down and up (bsc#1221545).
CVE-2021-47206: Check return value after calling platform_get_resource() (bsc#1222894).
CVE-2021-47238: Fixed memory leak in ip_mc_add1_src (bsc#1224847)
CVE-2021-47245: Fixed out of bounds when parsing TCP options (bsc#1224838)
CVE-2021-47246: Fixed page reclaim for dead peer hairpin (CVE-2021-47246 bsc#1224831).
CVE-2021-47249: Fixed memory leak in rds_recvmsg (bsc#1224880)
CVE-2021-47250: Fixed memory leak in netlbl_cipsov4_add_std (bsc#1224827)
CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960).
CVE-2021-47281: Fixed race of snd_seq_timer_open() (bsc#1224983).
CVE-2021-47334: Fixed two use after free in ibmasm_init_one (bsc#1225112).
CVE-2021-47352: Add validation for used length (bsc#1225124).
CVE-2021-47355: Fixed possible use-after-free in nicstar_cleanup() (bsc#1225141).
CVE-2021-47357: Fixed possible use-after-free in ia_module_exit() (bsc#1225144).
CVE-2021-47361: Fixed error handling in mcb_alloc_bus() (bsc#1225151).
CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225208).
CVE-2021-47397: Break out if skb_header_pointer returns NULL in sctp_rcv_ootb (bsc#1225082)
CVE-2021-47401: Fixed stack information leak (bsc#1225242).
CVE-2021-47423: Fixed file release memory leak (bsc#1225366).
CVE-2021-47431: Fixed gart.bo pin_count leak (bsc#1225390).
CVE-2021-47469: Add SPI fix commit to be ignored (bsc#1225347)
CVE-2021-47483: Fixed possible double-free in regcache_rbtree_exit() (bsc#1224907).
CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2022-48672: Fixed off-by-one error in unflatten_dt_nodes() (CVE-2022-48672 bsc#1223931).
CVE-2022-48686: Fixed UAF when detecting digest errors (bsc#1223948).
CVE-2022-48697: Fixed a use-after-free (bsc#1223922).
CVE-2022-48702: Fixed out of bounds access in snd_emu10k1_pcm_channel_alloc() (bsc#1223923).
CVE-2022-48704: Add a force flush to delay work when radeon (bsc#1223932)
CVE-2022-48708: Fixed potential NULL dereference (bsc#1224942).
CVE-2022-48710: Fixed a possible null pointer dereference (bsc#1225230).
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52691: Fixed a double-free in si_dpm_init (bsc#1224607).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2023-52730: Fixed possible resource leaks in some error paths (bsc#1224956).
CVE-2023-52732: Blocklist the kclient when…

Record: SUSE-SU-2024:2184-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2189-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-35863: Fix potential UAF in is_valid_oplock_break() (bsc#1224763).
CVE-2024-35867: Fix potential UAF in cifs_stats_proc_show() (bsc#1224664).
CVE-2024-35868: Fix potential UAF in cifs_stats_proc_write() (bsc#1224678).
CVE-2024-26928: Fix potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
CVE-2024-35904: Avoid dereference of garbage after mount failure (bsc#1224494).
CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).

The following non-security bugs were fixed:

af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
filemap: remove use of wait bookmarks (bsc#1224085).
idpf: extend tx watchdog timeout (bsc#1224137).
ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
powerpc: Refactor verification of MSR_RI (bsc#1223191).

Record: SUSE-SU-2024:2189-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-42755: Check user supplied offsets (bsc#1215702).
CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26700: Fixed drm/amd/display: Fix MST Null Ptr for RV (bsc#1222870)
CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)
CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)
CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)
CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).
CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
CVE-2024-27042: Fixed potential out-of-bounds access in…

Record: SUSE-SU-2024:2190-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2571-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758).
CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52865: Add check for mtk_alloc_clk_data (bsc#1225086).
CVE-2023-52821: Fixed a possible null pointer dereference (bsc#1225022).
CVE-2023-52867: Fixed possible buffer overflow (bsc#1225009).
CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,).
CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
CVE-2023-52759: Ignore negated quota changes (bsc#1225560).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52864: Fixed opening of char device (bsc#1225132).
CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
CVE-2024-35843: iommu/vt-d: Use device rbtree in iopf reporting path (bsc#1224751).
CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799).
CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841).
CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879).
CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789).
CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
CVE-2024-38556:…

Record: SUSE-SU-2024:2571-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2896-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). -…

Record: SUSE-SU-2024:2896-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…

Record: SUSE-SU-2024:2973-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
CVE-2024-35890:…

Record: SUSE-SU-2025:20008-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…

Record: SUSE-SU-2025:20028-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`linux-lts` Alpaquita:23	6.1.62-r0 up to 6.1.68-r0	6.1.68-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.7.els21	7.0.0-284.1101.el9_2.tuxcare.7.els21
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els21	2:1.0.0-2.el9_2.tuxcare.7.els21
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els21	2:1.0.0-2.el9_2.tuxcare.7.els21
`libbpf-static` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els21	2:1.0.0-2.el9_2.tuxcare.7.els21
`perf` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`python3-perf` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`rtla` TuxCare:AlmaLinux:9.2 From an advisory covering 44 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els21	5.14.0-284.1101.el9_2.tuxcare.7.els21
`bpftool` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-core` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-cross-headers` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-debug` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-debug-core` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-debug-devel` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-debug-modules` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-debug-modules-extra` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-debug-modules-internal` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-devel` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-headers` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-ipaclones-internal` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-modules` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-modules-extra` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-modules-internal` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-selftests-internal` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-tools` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-tools-libs` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`kernel-tools-libs-devel` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`perf` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`python3-perf` TuxCare:CentOS:8.4 From an advisory covering 63 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els32	4.18.0-305.25.1.el8_4.tuxcare.els32
`bpftool` TuxCare:CentOS:8.5 From an advisory covering 64 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els32	4.18.0-348.7.1.el8_5.tuxcare.els32
`kernel` TuxCare:CentOS:8.5 From an advisory covering 64 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els32	4.18.0-348.7.1.el8_5.tuxcare.els32
`kernel-core` TuxCare:CentOS:8.5 From an advisory covering 64 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els32	4.18.0-348.7.1.el8_5.tuxcare.els32
`Kernel` Linux	4.13.0 up to 4.14.330, 4.15.0 up to 4.19.299, 4.20.0 up to 5.4.261, 5.5.0 up to 5.10.201, 5.11.0 up to 5.15.139, 5.16.0 up to 6.1.63, 6.2.0 up to 6.5.12, 6.6.0 up to 6.6.2	4.14.3304.19.2995.4.2615.10.2015.15.1396.1.636.5.126.6.2
`linux` Debian:12	before 6.1.64-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 6 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+1	6.1.64-1
`linux` Debian:13	before 6.6.8-1	6.6.8-1
`linux` Debian:14	before 6.6.8-1	6.6.8-1
`kernel` openEuler:20.03-LTS-SP1 From an advisory covering 80 CVEs	before 4.19.90-2405.5.0.0251.oe1	4.19.90-2405.5.0.0251.oe1
`kernel` openEuler:20.03-LTS-SP4 From an advisory covering 81 CVEs	before 4.19.90-2405.5.0.0278.oe2003sp4	4.19.90-2405.5.0.0278.oe2003sp4
`kernel` openEuler:22.03-LTS From an advisory covering 25 CVEs	before 5.10.0-60.139.0.166.oe2203	5.10.0-60.139.0.166.oe2203
`kernel` openEuler:22.03-LTS-SP1 From an advisory covering 63 CVEs	before 5.10.0-136.77.0.157.oe2203sp1	5.10.0-136.77.0.157.oe2203sp1
`kernel` openEuler:22.03-LTS-SP2 From an advisory covering 55 CVEs	before 5.10.0-153.56.0.134.oe2203sp2	5.10.0-153.56.0.134.oe2203sp2
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 86 CVEs	before 5.10.0-201.0.0.114.oe2203sp3	5.10.0-201.0.0.114.oe2203sp3
`bpftool-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`bpftool` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`bpftool-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-azure` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 180 CVEs	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-source-azure` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 180 CVEs	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-syms-azure` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 180 CVEs	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 180 CVEs	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-source-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 180 CVEs	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-syms-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 180 CVEs	before 4.12.14-16.188.1	4.12.14-16.188.1
`kernel-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 199 CVEs	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-rt_debug` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 199 CVEs	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-source-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 199 CVEs	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-syms-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 199 CVEs	before 4.12.14-10.188.1	4.12.14-10.188.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-livepatch-SLE15-SP5-RT_Update_16` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 561 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 561 CVEs	before 5.14.21-150500.13.58.1	5.14.21-150500.13.58.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-rt` openSUSE:Leap Micro 5.3 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-rt` openSUSE:Leap Micro 5.4 From an advisory covering 308 CVEs	before 5.14.21-150400.15.82.1	5.14.21-150400.15.82.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 541 CVEs	before 5.14.21-150500.33.57.1	5.14.21-150500.33.57.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 12 SP5 From an advisory covering 198 CVEs	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 198 CVEs	before 4.12.14-122.219.1	4.12.14-122.219.1
`kgraft-patch-SLE12-SP5_Update_57` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 198 CVEs	before 1-8.3.1	1-8.3.1
`kernel-docs` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 198 CVEs	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-obs-build` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 198 CVEs	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 198 CVEs	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 198 CVEs	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 198 CVEs	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 198 CVEs	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 198 CVEs	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 198 CVEs	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 198 CVEs	before 4.12.14-122.219.1	4.12.14-122.219.1
`kernel-default` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-default` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-livepatch-SLE15-SP4_Update_27` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 320 CVEs	before 1-150400.9.3.2	1-150400.9.3.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.1	5.14.21-150400.24.122.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-docs` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default` openSUSE:Leap Micro 5.3 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` openSUSE:Leap Micro 5.3 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`kernel-default` openSUSE:Leap Micro 5.4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2	5.14.21-150400.24.122.2
`kernel-default-base` openSUSE:Leap Micro 5.4 From an advisory covering 320 CVEs	before 5.14.21-150400.24.122.2.150400.24.58.2	5.14.21-150400.24.122.2.150400.24.58.2
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1.150500.6.31.1	5.14.21-150500.55.68.1.150500.6.31.1
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 557 CVEs	before 5.14.21-150500.55.68.1	5.14.21-150500.55.68.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2.150600.12.4.3	6.4.0-150600.23.14.2.150600.12.4.3
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.1	6.4.0-150600.8.8.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1120.130~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1120.130~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1126.133~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1126.133~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1124.133~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1124.133~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-173.191~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-173.191~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1067.72~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 38 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.1	5.4.0-1067.72~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1119.128~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1119.128~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1104.116~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1104.116~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-173.191, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-173.191
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1120.130, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1120.130
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1056.61~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 28 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.1	5.15.0-1056.61~20.04.1
`linux-azure` Ubuntu:20.04:LTS	before 5.4.0-1126.133, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	5.4.0-1126.133
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1058.66~20.04.2, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 30 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.1	5.15.0-1058.66~20.04.2
`linux-bluefield` Ubuntu:20.04:LTS	before 5.4.0-1080.87, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 39 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.85	5.4.0-1080.87
`linux-gcp` Ubuntu:20.04:LTS	before 5.4.0-1124.133, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	5.4.0-1124.133
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1053.61~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 28 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.1	5.15.0-1053.61~20.04.1
`linux-gkeop` Ubuntu:20.04:LTS	before 5.4.0-1087.91, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	5.4.0-1087.91
`linux-gkeop-5.15` Ubuntu:20.04:LTS	before 5.15.0-1038.44~20.04.1, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 24 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.1	5.15.0-1038.44~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-100.110~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 28 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.1	5.15.0-100.110~20.04.1
`linux-ibm` Ubuntu:20.04:LTS	before 5.4.0-1067.72, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 45 moreShow less 5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71	5.4.0-1067.72
`linux-ibm-5.15` Ubuntu:20.04:LTS	before 5.15.0-1048.51~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 9 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.1	5.15.0-1048.51~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1050.56~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 20 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.1	5.15.0-1050.56~20.04.1
`linux-iot` Ubuntu:20.04:LTS	before 5.4.0-1032.33, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 18 moreShow less 5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.32	5.4.0-1032.33
`linux-kvm` Ubuntu:20.04:LTS	before 5.4.0-1108.115, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78	5.4.0-1108.115
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-100.110~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 27 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.1	5.15.0-100.110~20.04.1

History

History
Recorded	Changed	Sources
Nov 11, 2026	affected	OSV
Nov 10, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-52867 is a high vulnerability (CVSS 7.1) in Linux, published May 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. Fixed in linux-lts 6.1.68-r0.