CVE-2024-26614

tcp: make sure init the accept_queue's spinlocks once

7.8 HighFix available

What does this mean?

: 7.8v3.1, from CVE List
: 0.18%7th percentile
Fixed in: 6.1.81-r0linux-lts
Published: February 29, 2024
Modified: November 6, 2026
Weakness: CWE-667
Also known as: ALSA-2024:5101ALSA-2024:5102BELL-CVE-2024-26614CLSA-2024-1716269479CLSA-2024-1716269925CLSA-2024-1716270232CLSA-2024-1716270655CLSA-2024-1716270851
Show 49 moreShow less
CLSA-2024-1725872696CLSA-2024-1725876080CLSA-2024-1727815919DEBIAN-CVE-2024-26614DLA-3842-1DSA-5681-1EUVD-2024-23876GHSA-jc3j-vf3f-q43pOESA-2024-1520OESA-2024-1524OESA-2024-1536OESA-2024-1541OESA-2024-1617OESA-2024-1618RHSA-2024:5101RHSA-2024:5102RHSA-2024:9315RHSA-2025:3935RLSA-2024:5101RLSA-2024:5102RXSA-2024:5101SUSE-SU-2024:1454-1SUSE-SU-2024:1465-1SUSE-SU-2024:1466-1SUSE-SU-2024:1480-1SUSE-SU-2024:1489-1SUSE-SU-2024:1490-1SUSE-SU-2024:1641-1SUSE-SU-2024:1643-1SUSE-SU-2024:1646-1SUSE-SU-2024:1647-1SUSE-SU-2024:1870-1SUSE-SU-2024:2135-1SUSE-SU-2024:2203-1SUSE-SU-2024:2973-1SUSE-SU-2025:20008-1UBUNTU-CVE-2024-26614USN-6766-1USN-6766-2USN-6766-3USN-6774-1USN-6776-1USN-6777-1USN-6777-2USN-6777-3USN-6777-4USN-6778-1USN-6795-1USN-6828-1

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted value 0x0! WARNING: CPU: 19 PID: 21160 at __pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508) Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 RIP: 0010:__pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508) Code: 73 56 3a ff 90 c3 cc cc cc cc 8b 05 bb 1f 48 01 85 c0 74 05 c3 cc cc cc cc 8b 17 48 89 fe 48 c7 c7 30 20 ce 8f e8 ad 56 42 ff <0f> 0b c3 cc cc cc cc 0f 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffa8d200604cb8 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9d1ef60e0908 RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffff9d1ef60e0900 RBP: ffff9d181cd5c280 R08: 0000000000000000 R09: 00000000ffff7fff R10: ffffa8d200604b68 R11: ffffffff907dcdc8 R12: 0000000000000000 R13: ffff9d181cd5c660 R14: ffff9d1813a3f330 R15: 0000000000001000 FS: 00007fa110184640(0000) GS:ffff9d1ef60c0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 000000011f65e000 CR4: 00000000000006f0 Call Trace: <IRQ> _raw_spin_unlock (kernel/locking/spinlock.c:186) inet_csk_reqsk_queue_add (net/ipv4/inet_connection_sock.c:1321) inet_csk_complete_hashdance (net/ipv4/inet_connection_sock.c:1358) tcp_check_req (net/ipv4/tcp_minisocks.c:868) tcp_v4_rcv (net/ipv4/tcp_ipv4.c:2260) ip_protocol_deliver_rcu (net/ipv4/ip_input.c:205) ip_local_deliver_finish (net/ipv4/ip_input.c:234) __netif_receive_skb_one_core (net/core/dev.c:5529) process_backlog (./include/linux/rcupdate.h:779) __napi_poll (net/core/dev.c:6533) net_rx_action (net/core/dev.c:6604) __do_softirq (./arch/x86/include/asm/jump_label.h:27) do_softirq (kernel/softirq.c:454 kernel/softirq.c:441) </IRQ> <TASK> __local_bh_enable_ip (kernel/softirq.c:381) __dev_queue_xmit (net/core/dev.c:4374) ip_finish_output2 (./include/net/neighbour.h:540 net/ipv4/ip_output.c:235) __ip_queue_xmit (net/ipv4/ip_output.c:535) __tcp_transmit_skb (net/ipv4/tcp_output.c:1462) tcp_rcv_synsent_state_process (net/ipv4/tcp_input.c:6469) tcp_rcv_state_process (net/ipv4/tcp_input.c:6657) tcp_v4_do_rcv (net/ipv4/tcp_ipv4.c:1929) __release_sock (./include/net/sock.h:1121 net/core/sock.c:2968) release_sock (net/core/sock.c:3536) inet_wait_for_connect (net/ipv4/af_inet.c:609) __inet_stream_connect (net/ipv4/af_inet.c:702) inet_stream_connect (net/ipv4/af_inet.c:748) __sys_connect (./include/linux/file.h:45 net/socket.c:2064) __x64_sys_connect (net/socket.c:2073 net/socket.c:2070 net/socket.c:2070) do_syscall_64 (arch/x86/entry/common.c:51 arch/x86/entry/common.c:82) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) RIP: 0033:0x7fa10ff05a3d Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ab a3 0e 00 f7 d8 64 89 01 48 RSP: 002b:00007fa110183de8 EFLAGS: 00000202 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 0000000020000054 RCX: 00007fa10ff05a3d RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000003 RBP: 00007fa110183e20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 00007fa110184640 R13: 0000000000000000 R14: 00007fa10fe8b060 R15: 00007fff73e23b20 </TASK>

The issue triggering process is analyzed as follows: Thread A Thread B tcp_v4_rcv //receive ack TCP packet inet_shutdown tcp_check_req tcp_disconnect //disconnect sock ... tcp_set_state(sk, TCP_CLOSE) inet_csk_complete_hashdance ... inet_csk_reqsk_queue_add
---truncated---

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.18%Up 0.1 points since Mar 1, 2024

What each source reports

CVE List Score used 7.8

tcp: make sure init the accept_queue's spinlocks once

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

Record: CVE-2024-26614
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

EUVDEUVD-2024-23876 7.8

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

Record: EUVD-2024-23876
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-jc3j-vf3f-q43p 5.5

In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the...

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

Record: GHSA-jc3j-vf3f-q43p
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-667
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

Record: CVE-2024-26614
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-667
Updated: 2026-11-02

OSVBELL-CVE-2024-26614 7.8

Record: BELL-CVE-2024-26614
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

tcp: make sure init the accept_queue's spinlocks once

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

Record: CVE-2024-26614
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 46 moreShow less

OSVDEBIAN-CVE-2024-26614 7.8

In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the accept_queue's spinlocks once When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted value 0x0! WARNING: CPU: 19 PID: 21160 at __pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508) Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 RIP: 0010:__pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508) Code: 73 56 3a ff 90 c3 cc cc cc cc 8b 05 bb 1f 48 01 85 c0 74 05 c3 cc cc cc cc 8b 17 48 89 fe 48 c7 c7 30 20 ce 8f e8 ad 56 42 ff <0f> 0b c3 cc cc cc cc 0f 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffa8d200604cb8 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9d1ef60e0908 RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffff9d1ef60e0900 RBP: ffff9d181cd5c280 R08: 0000000000000000 R09: 00000000ffff7fff R10: ffffa8d200604b68 R11: ffffffff907dcdc8 R12: 0000000000000000 R13: ffff9d181cd5c660 R14: ffff9d1813a3f330 R15: 0000000000001000 FS: 00007fa110184640(0000) GS:ffff9d1ef60c0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 000000011f65e000 CR4: 00000000000006f0 Call Trace: <IRQ> _raw_spin_unlock (kernel/locking/spinlock.c:186) inet_csk_reqsk_queue_add (net/ipv4/inet_connection_sock.c:1321) inet_csk_complete_hashdance (net/ipv4/inet_connection_sock.c:1358) tcp_check_req (net/ipv4/tcp_minisocks.c:868) tcp_v4_rcv (net/ipv4/tcp_ipv4.c:2260) ip_protocol_deliver_rcu (net/ipv4/ip_input.c:205) ip_local_deliver_finish (net/ipv4/ip_input.c:234) __netif_receive_skb_one_core (net/core/dev.c:5529) process_backlog (./include/linux/rcupdate.h:779) __napi_poll (net/core/dev.c:6533) net_rx_action (net/core/dev.c:6604) __do_softirq (./arch/x86/include/asm/jump_label.h:27) do_softirq (kernel/softirq.c:454 kernel/softirq.c:441) </IRQ> <TASK> __local_bh_enable_ip (kernel/softirq.c:381) __dev_queue_xmit (net/core/dev.c:4374) ip_finish_output2 (./include/net/neighbour.h:540 net/ipv4/ip_output.c:235) __ip_queue_xmit (net/ipv4/ip_output.c:535) __tcp_transmit_skb (net/ipv4/tcp_output.c:1462) tcp_rcv_synsent_state_process (net/ipv4/tcp_input.c:6469) tcp_rcv_state_process (net/ipv4/tcp_input.c:6657) tcp_v4_do_rcv (net/ipv4/tcp_ipv4.c:1929) __release_sock (./include/net/sock.h:1121 net/core/sock.c:2968) release_sock (net/core/sock.c:3536) inet_wait_for_connect (net/ipv4/af_inet.c:609) __inet_stream_connect (net/ipv4/af_inet.c:702) inet_stream_connect (net/ipv4/af_inet.c:748) __sys_connect (./include/linux/file.h:45 net/socket.c:2064) __x64_sys_connect (net/socket.c:2073 net/socket.c:2070 net/socket.c:2070) do_syscall_64 (arch/x86/entry/common.c:51 arch/x86/entry/common.c:82) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:129) RIP: 0033:0x7fa10ff05a3d Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d ab a3 0e 00 f7 d8 64 89 01 48 RSP: 002b:00007fa110183de8 EFLAGS: 00000202 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 0000000020000054 RCX: 00007fa10ff05a3d RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000003 RBP: 00007fa110183e20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 00007fa110184640 R13: 0000000000000000 R14: 00007fa10fe8b060 R15: 00007fff73e23b20 </TASK> The issue triggering process is analyzed as follows: Thread A Thread B tcp_v4_rcv //receive ack TCP packet inet_shutdown tcp_check_req tcp_disconnect //disconnect sock ... tcp_set_state(sk, TCP_CLOSE) inet_csk_complete_hashdance ... inet_csk_reqsk_queue_add ---truncated---

Record: DEBIAN-CVE-2024-26614
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1520 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.(CVE-2024-25739)

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: sii902x: Fix probing race issue

A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge:

[ 53.271356] sii902x_get_edid+0x34/0x70 [sii902x] [ 53.276066] sii902x_bridge_get_edid+0x14/0x20 [sii902x] [ 53.281381] drm_bridge_get_edid+0x20/0x34 [drm] [ 53.286305] drm_bridge_connector_get_modes+0x8c/0xcc [drm_kms_helper] [ 53.292955] drm_helper_probe_single_connector_modes+0x190/0x538 [drm_kms_helper] [ 53.300510] drm_client_modeset_probe+0x1f0/0xbd4 [drm] [ 53.305958] __drm_fb_helper_initial_config_and_unlock+0x50/0x510 [drm_kms_helper] [ 53.313611] drm_fb_helper_initial_config+0x48/0x58 [drm_kms_helper] [ 53.320039] drm_fbdev_dma_client_hotplug+0x84/0xd4 [drm_dma_helper] [ 53.326401] drm_client_register+0x5c/0xa0 [drm] [ 53.331216] drm_fbdev_dma_setup+0xc8/0x13c [drm_dma_helper] [ 53.336881] tidss_probe+0x128/0x264 [tidss] [ 53.341174] platform_probe+0x68/0xc4 [ 53.344841] really_probe+0x188/0x3c4 [ 53.348501] __driver_probe_device+0x7c/0x16c [ 53.352854] driver_probe_device+0x3c/0x10c [ 53.357033] __device_attach_driver+0xbc/0x158 [ 53.361472] bus_for_each_drv+0x88/0xe8 [ 53.365303] __device_attach+0xa0/0x1b4 [ 53.369135] device_initial_probe+0x14/0x20 [ 53.373314] bus_probe_device+0xb0/0xb4 [ 53.377145] deferred_probe_work_func+0xcc/0x124 [ 53.381757] process_one_work+0x1f0/0x518 [ 53.385770] worker_thread+0x1e8/0x3dc [ 53.389519] kthread+0x11c/0x120 [ 53.392750] ret_from_fork+0x10/0x20

The issue here is as follows:

tidss probes, but is deferred as sii902x is still missing.
sii902x starts probing and enters sii902x_init().
sii902x calls drm_bridge_add(). Now the sii902x bridge is ready from DRM's perspective.
sii902x calls sii902x_audio_codec_init() and platform_device_register_data()
The registration of the audio platform device causes probing of the deferred devices.
tidss probes, which eventually causes sii902x_bridge_get_edid() to be called.
sii902x_bridge_get_edid() tries to use the i2c to read the edid. However, the sii902x driver has not set up the i2c part yet, leading to the crash.

Fix this by moving the drm_bridge_add() to the end of the sii902x_init(), which is also at the very end of sii902x_probe().(CVE-2024-26607)

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

Record: OESA-2024-1520
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1524 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.(CVE-2024-25739)

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: sii902x: Fix probing race issue

A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge:

The issue here is as follows:

tidss probes, but is deferred as sii902x is still missing.
sii902x starts probing and enters sii902x_init().
sii902x calls drm_bridge_add(). Now the sii902x bridge is ready from DRM's perspective.
sii902x calls sii902x_audio_codec_init() and platform_device_register_data()
The registration of the audio platform device causes probing of the deferred devices.
tidss probes, which eventually causes sii902x_bridge_get_edid() to be called.
sii902x_bridge_get_edid() tries to use the i2c to read the edid. However, the sii902x driver has not set up the i2c part yet, leading to the crash.

Fix this by moving the drm_bridge_add() to the end of the sii902x_init(), which is also at the very end of sii902x_probe().(CVE-2024-26607)

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

Record: OESA-2024-1524
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1536 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.(CVE-2024-25739)

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: sii902x: Fix probing race issue

A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge:

The issue here is as follows:

tidss probes, but is deferred as sii902x is still missing.
sii902x starts probing and enters sii902x_init().
sii902x calls drm_bridge_add(). Now the sii902x bridge is ready from DRM's perspective.
sii902x calls sii902x_audio_codec_init() and platform_device_register_data()
The registration of the audio platform device causes probing of the deferred devices.
tidss probes, which eventually causes sii902x_bridge_get_edid() to be called.
sii902x_bridge_get_edid() tries to use the i2c to read the edid. However, the sii902x driver has not set up the i2c part yet, leading to the crash.

Fix this by moving the drm_bridge_add() to the end of the sii902x_init(), which is also at the very end of sii902x_probe().(CVE-2024-26607)

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

Record: OESA-2024-1536
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1541 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

pstore/ram: Fix crash when setting number of cpus to an odd number

When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 = BASE addr of zone1 = BASE + zone_size addr of zone2 = BASE + zone_size*2 ... The address of zone1/3/5/7 will be mapped to non-alignment va. Eventually crashes will occur when accessing these va.

So, use ALIGN_DOWN() to make sure the zone size is even to avoid this bug.(CVE-2023-52619)

A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

(CVE-2024-24860)

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.(CVE-2024-25739)

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: sii902x: Fix probing race issue

A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge:

The issue here is as follows:

tidss probes, but is deferred as sii902x is still missing.
sii902x starts probing and enters sii902x_init().
sii902x calls drm_bridge_add(). Now the sii902x bridge is ready from DRM's perspective.
sii902x calls sii902x_audio_codec_init() and platform_device_register_data()
The registration of the audio platform device causes probing of the deferred devices.
tidss probes, which eventually causes sii902x_bridge_get_edid() to be called.
sii902x_bridge_get_edid() tries to use the i2c to read the edid. However, the sii902x driver has not set up the i2c part yet, leading to the crash.

Fix this by moving the drm_bridge_add() to the end of the sii902x_init(), which is also at the very end of sii902x_probe().(CVE-2024-26607)

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

Record: OESA-2024-1541
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1617 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate.

Note, writing '0' to kvmclock MSR doesn't clear memory location, it just prevents hypervisor from updating the location so for the short while after write and while CPU is still alive, the clock remains usable and correct so we don't need to switch to some other clocksource.(CVE-2021-47110)

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

Remove the reason of null pointer dereference in sync VSI filters. Added new I40E_VSI_RELEASING flag to signalize deleting and releasing of VSI resources to sync this thread with sync filters subtask. Without this patch it is possible to start update the VSI filter list after VSI is removed, that's causing a kernel oops.(CVE-2021-47184)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

CPU: 0 PID: 7789 Comm: stress Not tainted 6.0.0-rc1-00002-g0d53d2e882f9 #3 Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 Call Trace: <TASK> .. __mutex_lock+0xe5/0xc30 .. z_erofs_do_read_page+0x8ce/0x1560 .. z_erofs_readahead+0x31c/0x580 .. Freed by task 7787 kasan_save_stack+0x1e/0x40 kasan_set_track+0x20/0x30 kasan_set_free_info+0x20/0x40 __kasan_slab_free+0x10c/0x190 kmem_cache_free+0xed/0x380 rcu_core+0x3d5/0xc90 __do_softirq+0x12d/0x389

Last potentially related work creation: kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x97/0xb0 call_rcu+0x3d/0x3f0 erofs_shrink_workstation+0x11f/0x210 erofs_shrink_scan+0xdc/0x170 shrink_slab.constprop.0+0x296/0x530 drop_slab+0x1c/0x70 drop_caches_sysctl_handler+0x70/0x80 proc_sys_call_handler+0x20a/0x2f0 vfs_write+0x555/0x6c0 ksys_write+0xbe/0x160 do_syscall_64+0x3b/0x90

The root cause is that erofs_workgroup_unfreeze() doesn't reset to orig_val thus it causes a race that the pcluster reuses unexpectedly before freeing.

Since UP platforms are quite rare now, such path becomes unnecessary. Let's drop such specific-designed path directly instead.(CVE-2022-48674)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.(CVE-2023-52615)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: disallow timeout for anonymous sets

Never used from userspace, disallow these parameters.(CVE-2023-52620)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix a suspicious RCU usage warning

I received the following warning while running cthon against an ontap server running pNFS:

[ 57.202521] ============================= [ 57.202522] WARNING: suspicious RCU usage [ 57.202523] 6.7.0-rc3-g2cc14f52aeb7 #41492 Not tainted [ 57.202525] ----------------------------- [ 57.202525] net/sunrpc/xprtmultipath.c:349 RCU-list traversed in non-reader section!! [ 57.202527] other info that might help us debug this:

[ 57.202528] …

Record: OESA-2024-1617
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1618 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

tun: avoid double free in tun_free_netdev

Avoid double free in tun_free_netdev() by moving the dev->tstats and tun->security allocs to a new ndo_init routine (tun_net_init()) that will be called by register_netdevice(). ndo_init is paired with the desctructor (tun_free_netdev()), so if there's an error in register_netdevice() the destructor will handle the frees.

BUG: KASAN: double-free or invalid-free in selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605

CPU: 0 PID: 25750 Comm: syz-executor416 Not tainted 5.16.0-rc2-syzk #1 Hardware name: Red Hat KVM, BIOS Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x89/0xb5 lib/dump_stack.c:106 print_address_description.constprop.9+0x28/0x160 mm/kasan/report.c:247 kasan_report_invalid_free+0x55/0x80 mm/kasan/report.c:372 ____kasan_slab_free mm/kasan/common.c:346 [inline] __kasan_slab_free+0x107/0x120 mm/kasan/common.c:374 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:1723 [inline] slab_free_freelist_hook mm/slub.c:1749 [inline] slab_free mm/slub.c:3513 [inline] kfree+0xac/0x2d0 mm/slub.c:4561 selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605 security_tun_dev_free_security+0x4f/0x90 security/security.c:2342 tun_free_netdev+0xe6/0x150 drivers/net/tun.c:2215 netdev_run_todo+0x4df/0x840 net/core/dev.c:10627 rtnl_unlock+0x13/0x20 net/core/rtnetlink.c:112 __tun_chr_ioctl+0x80c/0x2870 drivers/net/tun.c:3302 tun_chr_ioctl+0x2f/0x40 drivers/net/tun.c:3311 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x19d/0x220 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3a/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae(CVE-2021-47082)

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate.

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

Last potentially related work creation: …

Record: OESA-2024-1618
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:5101 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:5101
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:5102 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:5102
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:3935 7.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:3935
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-26614 5.7

Record: UBUNTU-CVE-2024-26614
CVSS 4.0: 5.7 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVALSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
[almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
[Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
(JIRA:AlmaLinux-31798)
(JIRA:AlmaLinux-10263)
(JIRA:AlmaLinux-40901)
(JIRA:AlmaLinux-43547)
(JIRA:AlmaLinux-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:AlmaLinux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: ALSA-2024:5101
Updated: 2026-11-02

OSVALSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: ALSA-2024:5102
Updated: 2026-11-02

OSVCLSA-2024-1716269479 No score

Fix of 42 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-47233
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
CVE-url: https://ubuntu.com/security/CVE-2023-52601
- jfs: Fix memleak in dbAdjCtl
CVE-url: https://ubuntu.com/security/CVE-2024-26801
- Bluetooth: Avoid potential use-after-free in hci_error_reset
CVE-url: https://ubuntu.com/security/CVE-2024-26805
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
CVE-url: https://ubuntu.com/security/CVE-2023-52566
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
CVE-url: https://ubuntu.com/security/CVE-2024-26622
- tomoyo: fix UAF write bug in tomoyo_write_control()
CVE-url: https://ubuntu.com/security/CVE-2024-26614
- tcp: make sure init the accept_queue's spinlocks once
- ipv6: init the accept_queue's spinlocks in inet6_create
CVE-url: https://ubuntu.com/security/CVE-2023-52530
- wifi: mac80211: fix potential key use-after-free
CVE-url: https://ubuntu.com/security/CVE-2023-52524
- net: nfc: llcp: Add lock when modifying device list
CVE-url: https://ubuntu.com/security/CVE-2021-47173
- misc/uss720: fix memory leak in uss720_probe
Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47171
- net: usb: fix possible use-after-free in smsc75xx_bind
Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) // CVE- url: https://ubuntu.com/security/CVE-2021-47171
- net: usb: fix memory leak in smsc75xx_bind
CVE-url: https://ubuntu.com/security/CVE-2024-26910
- timers: Get rid of del_singleshot_timer_sync()
CVE-url: https://ubuntu.com/security/CVE-2023-52595
- rt2x00: clear IV's on start to fix AP mode regression
- wifi: rt2x00: restart beacon queue when hardware reset
CVE-url: https://ubuntu.com/security/CVE-2024-26696
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
CVE-url: https://ubuntu.com/security/CVE-2024-26685
- nilfs2: fix potential bug in end_buffer_async_write
CVE-url: https://ubuntu.com/security/CVE-2024-26625
- llc: call sock_orphan() at release time
CVE-url: https://ubuntu.com/security/CVE-2023-52615
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
CVE-url: https://ubuntu.com/security/CVE-2023-52486
- drm: Don't unref the same fb many times by mistake due to deadlock handling
CVE-url: https://ubuntu.com/security/CVE-2024-26697
- nilfs2: fix data corruption in dsync block recovery for small block sizes
CVE-url: https://ubuntu.com/security/CVE-2024-26679
- inet: read sk->sk_family once in inet_recv_error()
CVE-url: https://ubuntu.com/security/CVE-2023-52622
- ext4: remove unnecessary check from alloc_flex_gd()
- ext4: avoid online resizing failures due to oversized flex bg
CVE-url: https://ubuntu.com/security/CVE-2024-26635
- llc: Drop support for ETH_P_TR_802_2.
CVE-url: https://ubuntu.com/security/CVE-2023-52594
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
CVE-url: https://ubuntu.com/security/CVE-2024-26720
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
CVE-url: https://ubuntu.com/security/CVE-2024-26825
- nfc: nci: free rx_data_reassembly skb on NCI device cleanup
CVE-url: https://ubuntu.com/security/CVE-2024-26671
- blk-mq: fix IO hang from sbitmap wakeup race
CVE-url: https://ubuntu.com/security/CVE-2024-26675
- ppp_async: limit MRU to 64K
CVE-url: https://ubuntu.com/security/CVE-2023-52602
- jfs: fix slab-out-of-bounds Read in dtSearch
CVE-url: https://ubuntu.com/security/CVE-2024-26704
- ext4: fix double-free of blocks due to wrong extents moved_len
CVE-url: https://ubuntu.com/security/CVE-2023-52619
- linux/kernel.h: Add ALIGN_DOWN macro …

Record: CLSA-2024-1716269479
Updated: 2026-11-02

OSVCLSA-2024-1716269925 No score

Fix of 42 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-47233
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
CVE-url: https://ubuntu.com/security/CVE-2023-52601
- jfs: Fix memleak in dbAdjCtl
CVE-url: https://ubuntu.com/security/CVE-2024-26801
- Bluetooth: Avoid potential use-after-free in hci_error_reset
CVE-url: https://ubuntu.com/security/CVE-2024-26805
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
CVE-url: https://ubuntu.com/security/CVE-2023-52566
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
CVE-url: https://ubuntu.com/security/CVE-2024-26622
- tomoyo: fix UAF write bug in tomoyo_write_control()
CVE-url: https://ubuntu.com/security/CVE-2024-26614
- tcp: make sure init the accept_queue's spinlocks once
- ipv6: init the accept_queue's spinlocks in inet6_create
CVE-url: https://ubuntu.com/security/CVE-2023-52530
- wifi: mac80211: fix potential key use-after-free
CVE-url: https://ubuntu.com/security/CVE-2023-52524
- net: nfc: llcp: Add lock when modifying device list
CVE-url: https://ubuntu.com/security/CVE-2021-47173
- misc/uss720: fix memory leak in uss720_probe
Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47171
- net: usb: fix possible use-after-free in smsc75xx_bind
Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) // CVE- url: https://ubuntu.com/security/CVE-2021-47171
- net: usb: fix memory leak in smsc75xx_bind
CVE-url: https://ubuntu.com/security/CVE-2024-26910
- timers: Get rid of del_singleshot_timer_sync()
CVE-url: https://ubuntu.com/security/CVE-2023-52595
- rt2x00: clear IV's on start to fix AP mode regression
- wifi: rt2x00: restart beacon queue when hardware reset
CVE-url: https://ubuntu.com/security/CVE-2024-26696
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
CVE-url: https://ubuntu.com/security/CVE-2024-26685
- nilfs2: fix potential bug in end_buffer_async_write
CVE-url: https://ubuntu.com/security/CVE-2024-26625
- llc: call sock_orphan() at release time
CVE-url: https://ubuntu.com/security/CVE-2023-52615
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
CVE-url: https://ubuntu.com/security/CVE-2023-52486
- drm: Don't unref the same fb many times by mistake due to deadlock handling
CVE-url: https://ubuntu.com/security/CVE-2024-26697
- nilfs2: fix data corruption in dsync block recovery for small block sizes
CVE-url: https://ubuntu.com/security/CVE-2024-26679
- inet: read sk->sk_family once in inet_recv_error()
CVE-url: https://ubuntu.com/security/CVE-2023-52622
- ext4: remove unnecessary check from alloc_flex_gd()
- ext4: avoid online resizing failures due to oversized flex bg
CVE-url: https://ubuntu.com/security/CVE-2024-26635
- llc: Drop support for ETH_P_TR_802_2.
CVE-url: https://ubuntu.com/security/CVE-2023-52594
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
CVE-url: https://ubuntu.com/security/CVE-2024-26720
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
CVE-url: https://ubuntu.com/security/CVE-2024-26825
- nfc: nci: free rx_data_reassembly skb on NCI device cleanup
CVE-url: https://ubuntu.com/security/CVE-2024-26671
- blk-mq: fix IO hang from sbitmap wakeup race
CVE-url: https://ubuntu.com/security/CVE-2024-26675
- ppp_async: limit MRU to 64K
CVE-url: https://ubuntu.com/security/CVE-2023-52602
- jfs: fix slab-out-of-bounds Read in dtSearch
CVE-url: https://ubuntu.com/security/CVE-2024-26704
- ext4: fix double-free of blocks due to wrong extents moved_len
CVE-url: https://ubuntu.com/security/CVE-2023-52619
- linux/kernel.h: Add ALIGN_DOWN macro …

Record: CLSA-2024-1716269925
Updated: 2026-11-02

OSVCLSA-2024-1716270232 No score

Fix of 48 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-47233
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
CVE-url: https://ubuntu.com/security/CVE-2023-52601
- jfs: Fix memleak in dbAdjCtl
CVE-url: https://ubuntu.com/security/CVE-2024-26801
- Bluetooth: Avoid potential use-after-free in hci_error_reset
CVE-url: https://ubuntu.com/security/CVE-2024-26805
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
CVE-url: https://ubuntu.com/security/CVE-2024-26735
- ipv6: sr: fix possible use-after-free and null-ptr-deref
CVE-url: https://ubuntu.com/security/CVE-2023-52566
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
CVE-url: https://ubuntu.com/security/CVE-2021-46981
- nbd: Fix NULL pointer in flush_workqueue
CVE-url: https://ubuntu.com/security/CVE-2024-26622
- tomoyo: fix UAF write bug in tomoyo_write_control()
CVE-url: https://ubuntu.com/security/CVE-2024-26614
- tcp: make sure init the accept_queue's spinlocks once
- ipv6: init the accept_queue's spinlocks in inet6_create
CVE-url: https://ubuntu.com/security/CVE-2023-52530
- wifi: mac80211: fix potential key use-after-free
CVE-url: https://ubuntu.com/security/CVE-2023-52524
- net: nfc: llcp: Add lock when modifying device list
CVE-url: https://ubuntu.com/security/CVE-2021-47173
- misc/uss720: fix memory leak in uss720_probe
CVE-url: https://ubuntu.com/security/CVE-2024-26910
- timers: Get rid of del_singleshot_timer_sync()
- timers: Update kernel-doc for various functions
- timers: Use del_timer_sync() even on UP
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Rename del_timer() to timer_delete()
- timers: Silently ignore timers with a NULL function
- timers: Split [try_to_]del_timer_sync to prepare for shutdown mode
- timers: Add shutdown mechanism to the internal functions
- timers: Provide timer_shutdown_sync
- netfilter: ipset: fix performance regression in swap operation
CVE-url: https://ubuntu.com/security/CVE-2023-52595
- rt2x00: clear IV's on start to fix AP mode regression
- wifi: rt2x00: restart beacon queue when hardware reset
CVE-url: https://ubuntu.com/security/CVE-2023-52617
- switchtec: Improve MRPC efficiency by enabling write combining
- switchtec: Add MRPC DMA mode support
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
CVE-url: https://ubuntu.com/security/CVE-2024-26696
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
CVE-url: https://ubuntu.com/security/CVE-2024-26685
- nilfs2: fix potential bug in end_buffer_async_write
CVE-url: https://ubuntu.com/security/CVE-2024-26625
- llc: call sock_orphan() at release time
CVE-url: https://ubuntu.com/security/CVE-2023-52615
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
CVE-url: https://ubuntu.com/security/CVE-2023-52486
- drm: Don't unref the same fb many times by mistake due to deadlock handling
CVE-url: https://ubuntu.com/security/CVE-2024-26920
- tracing/trigger: Fix to return error if failed to alloc snapshot
CVE-url: https://ubuntu.com/security/CVE-2024-26697
- nilfs2: fix data corruption in dsync block recovery for small block sizes
CVE-url: https://ubuntu.com/security/CVE-2024-26679
- inet: read sk->sk_family once in inet_recv_error()
CVE-url: https://ubuntu.com/security/CVE-2023-52622
- ext4: remove unnecessary check from alloc_flex_gd()
- ext4: avoid online resizing failures due to oversized flex bg
CVE-url: https://ubuntu.com/security/CVE-2024-26635
- llc: Drop support for ETH_P_TR_802_2.
CVE-url: https://ubuntu.com/security/CVE-2023-52594
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
CVE-url:…

Record: CLSA-2024-1716270232
Updated: 2026-11-02

OSVCLSA-2024-1716270655 No score

Fix of 48 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-47233
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
CVE-url: https://ubuntu.com/security/CVE-2023-52601
- jfs: Fix memleak in dbAdjCtl
CVE-url: https://ubuntu.com/security/CVE-2024-26801
- Bluetooth: Avoid potential use-after-free in hci_error_reset
CVE-url: https://ubuntu.com/security/CVE-2024-26805
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
CVE-url: https://ubuntu.com/security/CVE-2024-26735
- ipv6: sr: fix possible use-after-free and null-ptr-deref
CVE-url: https://ubuntu.com/security/CVE-2023-52566
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
CVE-url: https://ubuntu.com/security/CVE-2021-46981
- nbd: Fix NULL pointer in flush_workqueue
CVE-url: https://ubuntu.com/security/CVE-2024-26622
- tomoyo: fix UAF write bug in tomoyo_write_control()
CVE-url: https://ubuntu.com/security/CVE-2024-26614
- tcp: make sure init the accept_queue's spinlocks once
- ipv6: init the accept_queue's spinlocks in inet6_create
CVE-url: https://ubuntu.com/security/CVE-2023-52530
- wifi: mac80211: fix potential key use-after-free
CVE-url: https://ubuntu.com/security/CVE-2023-52524
- net: nfc: llcp: Add lock when modifying device list
CVE-url: https://ubuntu.com/security/CVE-2021-47173
- misc/uss720: fix memory leak in uss720_probe
CVE-url: https://ubuntu.com/security/CVE-2024-26910
- timers: Get rid of del_singleshot_timer_sync()
- timers: Update kernel-doc for various functions
- timers: Use del_timer_sync() even on UP
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Rename del_timer() to timer_delete()
- timers: Silently ignore timers with a NULL function
- timers: Split [try_to_]del_timer_sync to prepare for shutdown mode
- timers: Add shutdown mechanism to the internal functions
- timers: Provide timer_shutdown_sync
- netfilter: ipset: fix performance regression in swap operation
CVE-url: https://ubuntu.com/security/CVE-2023-52595
- rt2x00: clear IV's on start to fix AP mode regression
- wifi: rt2x00: restart beacon queue when hardware reset
CVE-url: https://ubuntu.com/security/CVE-2023-52617
- switchtec: Improve MRPC efficiency by enabling write combining
- switchtec: Add MRPC DMA mode support
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
CVE-url: https://ubuntu.com/security/CVE-2024-26696
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
CVE-url: https://ubuntu.com/security/CVE-2024-26685
- nilfs2: fix potential bug in end_buffer_async_write
CVE-url: https://ubuntu.com/security/CVE-2024-26625
- llc: call sock_orphan() at release time
CVE-url: https://ubuntu.com/security/CVE-2023-52615
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
CVE-url: https://ubuntu.com/security/CVE-2023-52486
- drm: Don't unref the same fb many times by mistake due to deadlock handling
CVE-url: https://ubuntu.com/security/CVE-2024-26920
- tracing/trigger: Fix to return error if failed to alloc snapshot
CVE-url: https://ubuntu.com/security/CVE-2024-26697
- nilfs2: fix data corruption in dsync block recovery for small block sizes
CVE-url: https://ubuntu.com/security/CVE-2024-26679
- inet: read sk->sk_family once in inet_recv_error()
CVE-url: https://ubuntu.com/security/CVE-2023-52622
- ext4: remove unnecessary check from alloc_flex_gd()
- ext4: avoid online resizing failures due to oversized flex bg
CVE-url: https://ubuntu.com/security/CVE-2024-26635
- llc: Drop support for ETH_P_TR_802_2.
CVE-url: https://ubuntu.com/security/CVE-2023-52594
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
CVE-url:…

Record: CLSA-2024-1716270655
Updated: 2026-11-02

OSVCLSA-2024-1716270851 No score

Fix of 48 CVEs

[ Ubuntu: 4.15.0-228.239 ]

CVE-url: https://ubuntu.com/security/CVE-2023-47233
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
CVE-url: https://ubuntu.com/security/CVE-2023-52601
- jfs: Fix memleak in dbAdjCtl
CVE-url: https://ubuntu.com/security/CVE-2024-26801
- Bluetooth: Avoid potential use-after-free in hci_error_reset
CVE-url: https://ubuntu.com/security/CVE-2024-26805
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
CVE-url: https://ubuntu.com/security/CVE-2024-26735
- ipv6: sr: fix possible use-after-free and null-ptr-deref
CVE-url: https://ubuntu.com/security/CVE-2023-52566
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
CVE-url: https://ubuntu.com/security/CVE-2021-46981
- nbd: Fix NULL pointer in flush_workqueue
CVE-url: https://ubuntu.com/security/CVE-2024-26622
- tomoyo: fix UAF write bug in tomoyo_write_control()
CVE-url: https://ubuntu.com/security/CVE-2024-26614
- tcp: make sure init the accept_queue's spinlocks once
- ipv6: init the accept_queue's spinlocks in inet6_create
CVE-url: https://ubuntu.com/security/CVE-2023-52530
- wifi: mac80211: fix potential key use-after-free
CVE-url: https://ubuntu.com/security/CVE-2023-52524
- net: nfc: llcp: Add lock when modifying device list
CVE-url: https://ubuntu.com/security/CVE-2021-47173
- misc/uss720: fix memory leak in uss720_probe
CVE-url: https://ubuntu.com/security/CVE-2024-26910
- timers: Get rid of del_singleshot_timer_sync()
- timers: Update kernel-doc for various functions
- timers: Use del_timer_sync() even on UP
- timers: Rename del_timer_sync() to timer_delete_sync()
- timers: Rename del_timer() to timer_delete()
- timers: Silently ignore timers with a NULL function
- timers: Split [try_to_]del_timer_sync to prepare for shutdown mode
- timers: Add shutdown mechanism to the internal functions
- timers: Provide timer_shutdown_sync
- netfilter: ipset: fix performance regression in swap operation
CVE-url: https://ubuntu.com/security/CVE-2023-52595
- rt2x00: clear IV's on start to fix AP mode regression
- wifi: rt2x00: restart beacon queue when hardware reset
CVE-url: https://ubuntu.com/security/CVE-2023-52617
- switchtec: Improve MRPC efficiency by enabling write combining
- switchtec: Add MRPC DMA mode support
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
CVE-url: https://ubuntu.com/security/CVE-2024-26696
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
CVE-url: https://ubuntu.com/security/CVE-2024-26685
- nilfs2: fix potential bug in end_buffer_async_write
CVE-url: https://ubuntu.com/security/CVE-2024-26625
- llc: call sock_orphan() at release time
CVE-url: https://ubuntu.com/security/CVE-2023-52615
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
CVE-url: https://ubuntu.com/security/CVE-2023-52486
- drm: Don't unref the same fb many times by mistake due to deadlock handling
CVE-url: https://ubuntu.com/security/CVE-2024-26920
- tracing/trigger: Fix to return error if failed to alloc snapshot
CVE-url: https://ubuntu.com/security/CVE-2024-26697
- nilfs2: fix data corruption in dsync block recovery for small block sizes
CVE-url: https://ubuntu.com/security/CVE-2024-26679
- inet: read sk->sk_family once in inet_recv_error()
CVE-url: https://ubuntu.com/security/CVE-2023-52622
- ext4: remove unnecessary check from alloc_flex_gd()
- ext4: avoid online resizing failures due to oversized flex bg
CVE-url: https://ubuntu.com/security/CVE-2024-26635
- llc: Drop support for ETH_P_TR_802_2.
CVE-url: https://ubuntu.com/security/CVE-2023-52594
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() *…

Record: CLSA-2024-1716270851
Updated: 2026-11-02

OSVCLSA-2024-1725872696 No score

kernel: Fix of 43 CVEs

netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
ata: libata-core: Fix double free on error {CVE-2024-41087}
drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
net/sched: flower: Fix chain template offload {CVE-2024-26669}
ipv6: Remove extra counter pull before gc {CVE-2023-52340}
ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
net: add a route cache full diagnostic message {CVE-2023-52340}
Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
tcp_metrics: validate source addr length {CVE-2024-42154}
net: fix out-of-bounds access in ops_init {CVE-2024-36883}
tap: add missing verification for short frame {CVE-2024-41090}
tun: add missing verification for short frame {CVE-2024-41091}
iommu: Fix potential use-after-free during probe {CVE-2022-48796}
nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
gfs2: Wake up when sd_glock_disposal becomes zero {CVE-2024-38570}
gfs2: Remove ill-placed consistency check {CVE-2024-38570}
gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
gfs2: Don't call dlm after protocol is unmounted {CVE-2024-38570}
gfs2: Don't skip dlm unlock if glock has an lvb {CVE-2024-38570}
netfilter: nf_tables: release mutex after nft_gc_seq_end…

Record: CLSA-2024-1725872696
Updated: 2026-11-02

OSVCLSA-2024-1725876080 No score

kernel: Fix of 45 CVEs

dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956}
userfaultfd: fix a race between writeprotect and exit_mmap() {CVE-2021-47461}
netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
ata: libata-core: Fix double free on error {CVE-2024-41087}
drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
net/sched: flower: Fix chain template offload {CVE-2024-26669}
ipv6: Remove extra counter pull before gc {CVE-2023-52340}
ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
net: add a route cache full diagnostic message {CVE-2023-52340}
Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
tcp_metrics: validate source addr length {CVE-2024-42154}
net: fix out-of-bounds access in ops_init {CVE-2024-36883}
tap: add missing verification for short frame {CVE-2024-41090}
tun: add missing verification for short frame {CVE-2024-41091}
iommu: Fix potential use-after-free during probe {CVE-2022-48796}
nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
gfs2: Remove ill-placed consistency check {CVE-2024-38570}
gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925} -…

Record: CLSA-2024-1725876080
Updated: 2026-11-02

OSVCLSA-2024-1727815919 No score

kernel: Fix of 73 CVEs

firmware: cs_dsp: Return error if block header overflows file {CVE-2024-42238}
scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124}
ftruncate: pass a signed offset {CVE-2024-42084}
firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files {CVE-2024-41056}
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035}
xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005}
drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
scsi: mpi3mr: Avoid memcpy field-spanning write WARNING {CVE-2024-36920}
dmaengine: idxd: Fix oops during rmmod on single-CPU platforms {CVE-2024-35989}
udp: do not accept non-tunnel GSO skbs landing in a tunnel {CVE-2024-35884}
nvme-fc: do not wait in vain when unloading module {CVE-2024-26846}
drm/amdgpu: Fix the null pointer when load rlc firmware {CVE-2024-26649}
Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683}
ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605}
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
phylib: fix potential use-after-free {CVE-2022-48754}
serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527}
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
mlxsw: thermal: Fix out-of-bounds memory accesses {CVE-2021-47441}
hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs {CVE-2021-47393}
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386}
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385}
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47384}
virtio-net: Add validation for used length {CVE-2021-47352}
fbmem: Do not delete the mode that is still in use {CVE-2021-47338}
watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
ACPI: fix NULL pointer dereference {CVE-2021-47289}
driver core: auxiliary bus: Fix memory leak when driver_register() fail {CVE-2021-47287}
Input: elantech - fix stack out of bound access in elantech_change_report_id() {CVE-2021-47097}
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts {CVE-2022-48866}
ipv6: prevent possible NULL dereference in rt6_probe() {CVE-2024-40960}
xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() {CVE-2024-40959}
wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941}
wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912}
wifi: cfg80211: Lock wiphy in cfg80211_get_station {CVE-2024-40911}
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages {CVE-2024-40904}
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet {CVE-2024-39506}
vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
crypto: bcm - Fix pointer arithmetic {CVE-2024-38579}
scsi: qedf: Ensure the copied buf is NUL terminated {CVE-2024-38559}
net: openvswitch: fix overwriting ct original tuple for ICMPv6…

Record: CLSA-2024-1727815919
Updated: 2026-11-02

OSVRLSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

Rocky Linux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux-23841)
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux-33437)
[Hyper-V][Rocky Linux-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux-40939)
(JIRA:Rocky Linux-31798)
(JIRA:Rocky Linux-10263)
(JIRA:Rocky Linux-40901)
(JIRA:Rocky Linux-43547)
(JIRA:Rocky Linux-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RLSA-2024:5101
Updated: 2026-11-02

OSVRLSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RLSA-2024:5102
Updated: 2026-11-02

OSVRXSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

Rocky Linux SIG Cloud8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux SIG Cloud-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux SIG Cloud-23841)
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux SIG Cloud-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux SIG Cloud-33437)
[Hyper-V][Rocky Linux SIG Cloud-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux SIG Cloud-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux SIG Cloud-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-40939)
(JIRA:Rocky Linux SIG Cloud-31798)
(JIRA:Rocky Linux SIG Cloud-10263)
(JIRA:Rocky Linux SIG Cloud-40901)
(JIRA:Rocky Linux SIG Cloud-43547)
(JIRA:Rocky Linux SIG Cloud-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux SIG Cloud-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RXSA-2024:5101
Updated: 2026-11-02

OSVSUSE-SU-2024:1454-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556).
CVE-2020-36782: Fixed a reference leak when pm_runtime_get_sync fails in i2c imx-lpi2c (bsc#1220560).
CVE-2020-36783: Fixed a reference leak when pm_runtime_get_sync fails in i2c img-scb (bsc#1220561).
CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
CVE-2021-46930: Fixed a list_head check warning caused by uninitialization of list_head in usb mtu3 (bsc#1220484).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46943: Fixed an oops in set_fmt error handling in media: staging/intel-ipu3 (bsc#1220583).
CVE-2021-46944: Fixed a memory leak in imu_fmt in media staging/intel-ipu3 (bsc#1220566).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46951: Fixed an integer underflow of efi_tpm_final_log_size in tpm_read_log_efi in tpm efi (bsc#1220615).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46961: Fixed an error on not enabling irqs when handling spurious interrups in irqchip/gic-v3 (bsc#1220529).
CVE-2021-46962: Fixed a resource leak in the remove function in mmc uniphier-sd (bsc#1220532).
CVE-2021-46963: Fixed a denial of service in qla2xxx_mqueuecommand() in scsi qla2xxx (bsc#1220536)
CVE-2021-46971: Fixed unconditional security_locked_down() call in perf/core (bsc#1220697).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON in userfaultfd (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47000: Fixed an inode leak on getattr error in __fh_to_dentry in ceph (bsc#1220669).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
CVE-2021-47020: Fixed a memory leak in stream config error path in soundwire stream (bsc#1220785).
CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
CVE-2021-47051: Fixed a PM reference leak in lpspi_prepare_xfer_hardware() in spi fsl-lpspi (bsc#1220764).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
CVE-2021-47058: Fixed a possible user-after-free in set debugfs_name in regmap (bsc#1220779).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed a potential…

Record: SUSE-SU-2024:1454-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1465-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556).
CVE-2020-36781: Fixed reference leak when pm_runtime_get_sync fails in i2c/imx (bsc#1220557).
CVE-2020-36782: Fixed a reference leak when pm_runtime_get_sync fails in i2c imx-lpi2c (bsc#1220560).
CVE-2020-36783: Fixed a reference leak when pm_runtime_get_sync fails in i2c img-scb (bsc#1220561).
CVE-2021-46908: Fixed incorrect permission flag for mixed signed bounds arithmetic in bpf (bsc#1220425).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46911: Fixed kernel panic (bsc#1220400).
CVE-2021-46914: Fixed unbalanced device enable/disable in suspend/resume in pci_disable_device() (bsc#1220465).
CVE-2021-46917: Fixed wq cleanup of WQCFG registers in idxd (bsc#1220432).
CVE-2021-46918: Fixed not clearing MSIX permission entry on shutdown in idxd (bsc#1220429).
CVE-2021-46919: Fixed wq size store permission state in idxd (bsc#1220414).
CVE-2021-46920: Fixed clobbering of SWERR overflow bit on writeback (bsc#1220426).
CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
CVE-2021-46922: Fixed TPM reservation for seal/unseal (bsc#1220475).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46943: Fixed an oops in set_fmt error handling in media: staging/intel-ipu3 (bsc#1220583).
CVE-2021-46944: Fixed a memory leak in imu_fmt in media staging/intel-ipu3 (bsc#1220566).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46951: Fixed an integer underflow of efi_tpm_final_log_size in tpm_read_log_efi in tpm efi (bsc#1220615).
CVE-2021-46956: Fixed memory leak in virtio_fs_probe() (bsc#1220516).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46959: Fixed use-after-free with devm_spi_alloc_* (bsc#1220734).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46961: Fixed spurious interrup handling (bsc#1220529).
CVE-2021-46962: Fixed a resource leak in the remove function in mmc uniphier-sd (bsc#1220532).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46971: Fixed unconditional security_locked_down() call (bsc#1220697).
CVE-2021-46976: Fixed crash in auto_retire in drm/i915 (bsc#1220621).
CVE-2021-46980: Fixed not retrieving all the PDOs instead of just the first 4 in usb/typec/ucsi (bsc#1220663).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46983: Fixed NULL pointer dereference when SEND is completed with error (bsc#1220639).
CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47000: Fixed an inode leak on getattr error in __fh_to_dentry in ceph (bsc#1220669).
CVE-2021-47001: Fixed cwnd update ordering in xprtrdma (bsc#1220670).
CVE-2021-47003: Fixed…

Record: SUSE-SU-2024:1465-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1466-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

NOTE: This update has been retracted due to a bug in the BHI CPU sidechannel mitigation, which led to incorrect selection of other CPU mitigations.

The following security bugs were fixed:

CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
CVE-2022-48628: Fixed possible lock in ceph (bsc#1220848).
CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
CVE-2023-52462: Fixed check for attempt to corrupt spilled pointer…

Record: SUSE-SU-2024:1466-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1480-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).
CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).
CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).
CVE-2022-48628: Fixed possible lock in ceph (bsc#1220848).
CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length (bsc#1220320).
CVE-2023-52462: Fixed check for attempt to corrupt spilled pointer (bsc#1220325).
CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register…

Record: SUSE-SU-2024:1480-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1489-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2020-36781: Fixed reference leak when pm_runtime_get_sync fails in i2c/imx (bsc#1220557).
CVE-2021-46911: Fixed kernel panic (bsc#1220400).
CVE-2021-46914: Fixed unbalanced device enable/disable in suspend/resume in pci_disable_device() (bsc#1220465).
CVE-2021-46917: Fixed wq cleanup of WQCFG registers in idxd (bsc#1220432).
CVE-2021-46918: Fixed not clearing MSIX permission entry on shutdown in idxd (bsc#1220429).
CVE-2021-46919: Fixed wq size store permission state in idxd (bsc#1220414).
CVE-2021-46920: Fixed clobbering of SWERR overflow bit on writeback (bsc#1220426).
CVE-2021-46922: Fixed TPM reservation for seal/unseal (bsc#1220475).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46956: Fixed memory leak in virtio_fs_probe() (bsc#1220516).
CVE-2021-46959: Fixed use-after-free with devm_spi_alloc_* (bsc#1220734).
CVE-2021-46961: Fixed spurious interrup handling (bsc#1220529).
CVE-2021-46971: Fixed unconditional security_locked_down() call (bsc#1220697).
CVE-2021-46976: Fixed crash in auto_retire in drm/i915 (bsc#1220621).
CVE-2021-46980: Fixed not retrieving all the PDOs instead of just the first 4 in usb/typec/ucsi (bsc#1220663).
CVE-2021-46983: Fixed NULL pointer dereference when SEND is completed with error (bsc#1220639).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-47001: Fixed cwnd update ordering in xprtrdma (bsc#1220670).
CVE-2021-47003: Fixed potential null dereference on pointer status in idxd_cmd_exec (bsc#1220677).
CVE-2021-47009: Fixed memory leak on object td (bsc#1220733).
CVE-2021-47014: Fixed wild memory access when clearing fragments in net/sched/act_ct (bsc#1220630).
CVE-2021-47017: Fixed use after free in ath10k_htc_send_bundle (bsc#1220678).
CVE-2021-47026: Fixed not destroying sysfs after removing session from active list (bsc#1220685).
CVE-2021-47035: Fixed wrong WO permissions on second-level paging entries in iommu/vt-d (bsc#1220688).
CVE-2021-47038: Fixed deadlock between hci_dev->lock and socket lock in bluetooth (bsc#1220753).
CVE-2021-47044: Fixed shift-out-of-bounds in load_balance() in sched/fair (bsc#1220759).
CVE-2021-47046: Fixed off by one in hdmi_14_process_transaction() (bsc#1220758).
CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47109: Fixed NUD_NOARP entries to be forced GCed (bsc#1221534).
CVE-2021-47130: Fixed freeing unallocated p2pmem in nvmet (bsc#1221552).
CVE-2021-47137: Fixed memory corruption in RX ring in net/lantiq (bsc#1221932).
CVE-2021-47150: Fixed the potential memory leak in fec_enet_init() (bsc#1221973).
CVE-2021-47160: Fixed VLAN traffic leaks in dsa: mt7530 (bsc#1221974).
CVE-2021-47164: Fixed null pointer dereference accessing lag dev in net/mlx5e (bsc#1221978).
CVE-2021-47174: Fixed missing check in irq_fpu_usable() (bsc#1221990).
CVE-2021-47175: Fixed OOB access in net/sched/fq_pie (bsc#1222003).
CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660).
CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
CVE-2021-47189: Fixed denial of service due to memory…

Record: SUSE-SU-2024:1489-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1490-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660).
CVE-2021-47182: Fixed buffer length handling in scsi_mode_sense() in scsi core (bsc#1222662).
CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706).
CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length…

Record: SUSE-SU-2024:1490-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1641-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 LTSS kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).
CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
CVE-2024-26727: Fixed assertion if a newly created btrfs subvolume already gets read (bsc#1222536).
CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs (HugeTLB pages) functionality (bsc#1219264).
CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479).
CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222117).
CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).
CVE-2023-52607: Fixed NULL pointer dereference in pgtable_cache_add kasprintf() (bsc#1221061).
CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088).
CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).
CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).
CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions (bsc#1222878)
CVE-2021-47195: Fixed use-after-free inside SPI via add_lock mutex (bsc#1222832).
CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706).
CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
CVE-2021-47183:…

Record: SUSE-SU-2024:1641-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1643-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509).
CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47113: Abort…

Record: SUSE-SU-2024:1643-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1646-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47114: Fixed a data corruption by fallocate in ocfs2 (bsc#1221548).
CVE-2021-47117: Fixed a crash in ext4_es_cache_extent as ext4_split_extent_at failed in ext4 (bsc#1221575).
CVE-2021-47118: Fixed an use-after-free in init task's struct pid in pid (bsc#1221605).
CVE-2021-47119: Fixed a memory leak in ext4_fill_super in ext4 (bsc#1221608). -…

Record: SUSE-SU-2024:1646-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1647-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).
CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).
CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).
CVE-2021-47207: Fixed a null pointer dereference on pointer block in gus (bsc#1222790).
CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).
CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2023-52607: Fixed NULL pointer dereference in pgtable_cache_add kasprintf() (bsc#1221061).
CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).

The following non-security bugs were fixed:

Call flush_delayed_fput() from nfsd main-loop (bsc#1223380).
ibmvfc: make 'max_sectors' a module option (bsc#1216223).
scsi: Update max_hw_sectors on rescan (bsc#1216223).

Record: SUSE-SU-2024:1647-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1870-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509).
CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed double free of blk_mq_tag_set in dev remove after table load fails (bsc#1220554).
CVE-2021-46939: Fixed possible hung in trace_clock_global() (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed possible data corruption in md/raid1 when ending a failed write request (bsc#1220662).
CVE-2021-46958: Fixed race between transaction aborts and fsyncs that could lead to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed wrong error code from smb2_get_enc_key() (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed NULL pointer in flush_workqueue (bsc#1220611).
CVE-2021-46988: Fixed possible crash in userfaultfd due to unreleased page (bsc#1220706).
CVE-2021-46990: Fixed crashes when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed a use after free bug in enic_hard_start_xmit() (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed RX consumer index logic in the error path in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed resolved pte update for kernel memory on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed null pointer dereference in lpfc_prep_els_iocb() (bsc#1220640).
CVE-2021-47049: Fixed Use after free in __vmbus_open() (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed uninitialized lock in adf_vf2pf_shutdown() (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed possible use-after-free in panel_bridge_detach() (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47114: Fixed data corruption by fallocate in ocfs2 (bsc#1221548).
CVE-2021-47117: Fixed bug on in ext4_es_cache_extent() as ext4_split_extent_at() failed (bsc#1221575).
CVE-2021-47118: Fixed possible use-after-free when initializing cad_pid (bsc#1221605). -…

Record: SUSE-SU-2024:1870-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2023-6270: Fixed a use-after-free issue in…

Record: SUSE-SU-2024:2135-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2203-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26632: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635).
CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26704: Fixed a…

Record: SUSE-SU-2024:2203-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…

Record: SUSE-SU-2024:2973-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
CVE-2024-35890:…

Record: SUSE-SU-2025:20008-1
Updated: 2026-11-02

OSVUSN-6766-1 No score

linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-23849)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
S390 architecture;
Core kernel;
Block layer subsystem;
Android drivers;
Power management core;
Bus devices;
Hardware random number generator core;
Cryptographic API;
Device frequency;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Media drivers;
Network drivers;
PCI driver for MicroSemi Switchtec;
PHY drivers;
SCSI drivers;
DesignWare USB3 driver;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
NTFS3 file system;
Pstore file system;
SMB network file system;
Memory management;
CAN network layer;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Multipath TCP;
Netfilter;
NFC subsystem;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
Unix domain sockets;
Realtek audio codecs; (CVE-2023-52594, CVE-2023-52601, CVE-2024-26826, CVE-2023-52622, CVE-2024-26665, CVE-2023-52493, CVE-2023-52633, CVE-2024-26684, CVE-2024-26663, CVE-2023-52618, CVE-2023-52588, CVE-2023-52637, CVE-2024-26825, CVE-2023-52606, CVE-2024-26594, CVE-2024-26625, CVE-2024-26720, CVE-2024-26614, CVE-2023-52627, CVE-2023-52602, CVE-2024-26673, CVE-2024-26685, CVE-2023-52638, CVE-2023-52498, CVE-2023-52619, CVE-2024-26910, CVE-2024-26689, CVE-2023-52583, CVE-2024-26676, CVE-2024-26671, CVE-2024-26704, CVE-2024-26608, CVE-2024-26610, CVE-2024-26592, CVE-2023-52599, CVE-2023-52595, CVE-2024-26660, CVE-2023-52617, CVE-2024-26645, CVE-2023-52486, CVE-2023-52631, CVE-2023-52607, CVE-2023-52608, CVE-2024-26722, CVE-2024-26615, CVE-2023-52615, CVE-2024-26636, CVE-2023-52642, CVE-2023-52587, CVE-2024-26712, CVE-2024-26675, CVE-2023-52614, CVE-2024-26606, CVE-2024-26916, CVE-2024-26600, CVE-2024-26679, CVE-2024-26829, CVE-2024-26641, CVE-2023-52623, CVE-2024-26627, CVE-2024-26696, CVE-2024-26640, CVE-2024-26635, CVE-2023-52491, CVE-2024-26664, CVE-2024-26602, CVE-2023-52604, CVE-2024-26717, CVE-2023-52643, CVE-2024-26593, CVE-2023-52598, CVE-2024-26668, CVE-2023-52435, CVE-2023-52597, CVE-2024-26715, CVE-2024-26707, CVE-2023-52635, CVE-2024-26695, CVE-2024-26698, CVE-2023-52494, CVE-2024-26920, CVE-2024-26808, CVE-2023-52616, CVE-2023-52492, CVE-2024-26702, CVE-2024-26644, CVE-2023-52489, CVE-2024-26697)

Record: USN-6766-1
Updated: 2026-11-02

OSVUSN-6766-2 No score

linux-hwe-5.15, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
S390 architecture;
Core kernel;
Block layer subsystem;
Android drivers;
Power management core;
Bus devices;
Hardware random number generator core;
Cryptographic API;
Device frequency;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Media drivers;
Network drivers;
PCI driver for MicroSemi Switchtec;
PHY drivers;
SCSI drivers;
DesignWare USB3 driver;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
NTFS3 file system;
Pstore file system;
SMB network file system;
Memory management;
CAN network layer;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Multipath TCP;
Netfilter;
NFC subsystem;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
Unix domain sockets;
Realtek audio codecs; (CVE-2023-52594, CVE-2023-52601, CVE-2024-26826, CVE-2023-52622, CVE-2024-26665, CVE-2023-52493, CVE-2023-52633, CVE-2024-26684, CVE-2024-26663, CVE-2023-52618, CVE-2023-52588, CVE-2023-52637, CVE-2024-26825, CVE-2023-52606, CVE-2024-26594, CVE-2024-26625, CVE-2024-26720, CVE-2024-26614, CVE-2023-52627, CVE-2023-52602, CVE-2024-26673, CVE-2024-26685, CVE-2023-52638, CVE-2023-52498, CVE-2023-52619, CVE-2024-26910, CVE-2024-26689, CVE-2023-52583, CVE-2024-26676, CVE-2024-26671, CVE-2024-26704, CVE-2024-26608, CVE-2024-26610, CVE-2024-26592, CVE-2023-52599, CVE-2023-52595, CVE-2024-26660, CVE-2023-52617, CVE-2024-26645, CVE-2023-52486, CVE-2023-52631, CVE-2023-52607, CVE-2023-52608, CVE-2024-26722, CVE-2024-26615, CVE-2023-52615, CVE-2024-26636, CVE-2023-52642, CVE-2023-52587, CVE-2024-26712, CVE-2024-26675, CVE-2023-52614, CVE-2024-26606, CVE-2024-26916, CVE-2024-26600, CVE-2024-26679, CVE-2024-26829, CVE-2024-26641, CVE-2023-52623, CVE-2024-26627, CVE-2024-26696, CVE-2024-26640, CVE-2024-26635, CVE-2023-52491, CVE-2024-26664, CVE-2024-26602, CVE-2023-52604, CVE-2024-26717, CVE-2023-52643, CVE-2024-26593, CVE-2023-52598, CVE-2024-26668, CVE-2023-52435, CVE-2023-52597, CVE-2024-26715, CVE-2024-26707, CVE-2023-52635, CVE-2024-26695, CVE-2024-26698, CVE-2023-52494, CVE-2024-26920, CVE-2024-26808, CVE-2023-52616, CVE-2023-52492, CVE-2024-26702, CVE-2024-26644, CVE-2023-52489, CVE-2024-26697)

Record: USN-6766-2
Updated: 2026-11-02

OSVUSN-6766-3 No score

linux-aws, linux-aws-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
S390 architecture;
Core kernel;
Block layer subsystem;
Android drivers;
Power management core;
Bus devices;
Hardware random number generator core;
Cryptographic API;
Device frequency;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Media drivers;
Network drivers;
PCI driver for MicroSemi Switchtec;
PHY drivers;
SCSI drivers;
DesignWare USB3 driver;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
NTFS3 file system;
Pstore file system;
SMB network file system;
Memory management;
CAN network layer;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Multipath TCP;
Netfilter;
NFC subsystem;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
Unix domain sockets;
Realtek audio codecs; (CVE-2023-52594, CVE-2023-52601, CVE-2024-26826, CVE-2023-52622, CVE-2024-26665, CVE-2023-52493, CVE-2023-52633, CVE-2024-26684, CVE-2024-26663, CVE-2023-52618, CVE-2023-52588, CVE-2023-52637, CVE-2024-26825, CVE-2023-52606, CVE-2024-26594, CVE-2024-26625, CVE-2024-26720, CVE-2024-26614, CVE-2023-52627, CVE-2023-52602, CVE-2024-26673, CVE-2024-26685, CVE-2023-52638, CVE-2023-52498, CVE-2023-52619, CVE-2024-26910, CVE-2024-26689, CVE-2023-52583, CVE-2024-26676, CVE-2024-26671, CVE-2024-26704, CVE-2024-26608, CVE-2024-26610, CVE-2024-26592, CVE-2023-52599, CVE-2023-52595, CVE-2024-26660, CVE-2023-52617, CVE-2024-26645, CVE-2023-52486, CVE-2023-52631, CVE-2023-52607, CVE-2023-52608, CVE-2024-26722, CVE-2024-26615, CVE-2023-52615, CVE-2024-26636, CVE-2023-52642, CVE-2023-52587, CVE-2024-26712, CVE-2024-26675, CVE-2023-52614, CVE-2024-26606, CVE-2024-26916, CVE-2024-26600, CVE-2024-26679, CVE-2024-26829, CVE-2024-26641, CVE-2023-52623, CVE-2024-26627, CVE-2024-26696, CVE-2024-26640, CVE-2024-26635, CVE-2023-52491, CVE-2024-26664, CVE-2024-26602, CVE-2023-52604, CVE-2024-26717, CVE-2023-52643, CVE-2024-26593, CVE-2023-52598, CVE-2024-26668, CVE-2023-52435, CVE-2023-52597, CVE-2024-26715, CVE-2024-26707, CVE-2023-52635, CVE-2024-26695, CVE-2024-26698, CVE-2023-52494, CVE-2024-26920, CVE-2024-26808, CVE-2023-52616, CVE-2023-52492, CVE-2024-26702, CVE-2024-26644, CVE-2023-52489, CVE-2024-26697)

Record: USN-6766-3
Updated: 2026-11-02

OSVUSN-6774-1 No score

linux, linux-aws, linux-aws-6.5, linux-azure, linux-azure-6.5, linux-gcp, linux-gcp-6.5, linux-hwe-6.5, linux-laptop, linux-lowlatency, linux-lowlatency-hwe-6.5, linux-nvidia-6.5, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-raspi, linux-signed, linux-signed-aws, linux-signed-aws-6.5, linux-starfive, linux-starfive-6.5 vulnerabilities

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Hardware random number generator core;
Ext4 file system;
JFS file system;
Bluetooth subsystem;
Networking core;
IPv4 networking;
Logical Link layer;
Netlink;
Tomoyo security module; (CVE-2024-26704, CVE-2023-52615, CVE-2024-26805, CVE-2023-52604, CVE-2024-26614, CVE-2023-52602, CVE-2024-26635, CVE-2024-26622, CVE-2023-52601, CVE-2024-26801)

Record: USN-6774-1
Updated: 2026-11-02

OSVUSN-6776-1 No score

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Networking core;
IPv4 networking;
MAC80211 subsystem;
Tomoyo security module; (CVE-2024-26614, CVE-2023-52530, CVE-2024-26622)

Record: USN-6776-1
Updated: 2026-11-02

OSVUSN-6777-1 No score

linux, linux-aws, linux-azure-4.15, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Block layer subsystem;
Userspace I/O drivers;
Ceph distributed file system;
Ext4 file system;
JFS file system;
NILFS2 file system;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
Logical Link layer;
MAC80211 subsystem;
Netlink;
NFC subsystem;
Tomoyo security module; (CVE-2023-52524, CVE-2023-52530, CVE-2023-52601, CVE-2023-52439, CVE-2024-26635, CVE-2023-52602, CVE-2024-26614, CVE-2024-26704, CVE-2023-52604, CVE-2023-52566, CVE-2021-46981, CVE-2024-26622, CVE-2024-26735, CVE-2024-26805, CVE-2024-26801, CVE-2023-52583)

Record: USN-6777-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-rt` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-kvm` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`linux-lts` Alpaquita:23	6.1.74-r0 up to 6.1.81-r0	6.1.81-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`linux-buildinfo-4.4.0-256-tuxcare.els27-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-buildinfo-4.4.0-256-tuxcare.els27-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-cloud-tools-4.4.0-256-tuxcare.els27` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-cloud-tools-4.4.0-256-tuxcare.els27-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-cloud-tools-4.4.0-256-tuxcare.els27-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-cloud-tools-common` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-cloud-tools-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-cloud-tools-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-crashdump` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-doc` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-headers-4.4.0-256-tuxcare.els27` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-headers-4.4.0-256-tuxcare.els27-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-headers-4.4.0-256-tuxcare.els27-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-headers-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-headers-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-image-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-image-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-image-unsigned-4.4.0-256-tuxcare.els27-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-image-unsigned-4.4.0-256-tuxcare.els27-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-libc-dev` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-modules-4.4.0-256-tuxcare.els27-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-modules-4.4.0-256-tuxcare.els27-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-modules-extra-4.4.0-256-tuxcare.els27-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-source` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-source-4.4.0` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-tools-4.4.0-256-tuxcare.els27` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-tools-4.4.0-256-tuxcare.els27-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-tools-4.4.0-256-tuxcare.els27-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-tools-common` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-tools-generic` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-tools-host` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0-256.290	4.4.0-256.290
`linux-tools-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 42 CVEs	before 4.4.0.256.290	4.4.0.256.290
`linux-buildinfo-4.15.0-228-tuxcare.els16-generic` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0-228.239	4.15.0-228.239
`linux-buildinfo-4.15.0-228-tuxcare.els16-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0-228.239	4.15.0-228.239
`linux-cloud-tools-4.15.0-228-tuxcare.els16` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0-228.239	4.15.0-228.239
`linux-cloud-tools-4.15.0-228-tuxcare.els16-generic` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0-228.239	4.15.0-228.239
`linux-cloud-tools-4.15.0-228-tuxcare.els16-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0-228.239	4.15.0-228.239
`linux-cloud-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0-228.239	4.15.0-228.239
`linux-cloud-tools-generic` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0.228.239	4.15.0.228.239
`linux-cloud-tools-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0.228.239	4.15.0.228.239
`linux-crashdump` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0.228.239	4.15.0.228.239
`linux-doc` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0-228.239	4.15.0-228.239
`linux-generic` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0.228.239	4.15.0.228.239
`linux-headers-4.15.0-228-tuxcare.els16` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0-228.239	4.15.0-228.239
`linux-headers-4.15.0-228-tuxcare.els16-generic` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0-228.239	4.15.0-228.239
`linux-headers-4.15.0-228-tuxcare.els16-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0-228.239	4.15.0-228.239
`linux-headers-generic` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0.228.239	4.15.0.228.239
`linux-headers-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0.228.239	4.15.0.228.239
`linux-image-generic` TuxCare:Ubuntu:18.04 From an advisory covering 48 CVEs	before 4.15.0.228.239	4.15.0.228.239
`Kernel` Linux	3.7.0 up to 5.10.210, 5.11.0 up to 5.15.149, 5.16.0 up to 6.1.76, 6.2.0 up to 6.6.15, 6.7.0 up to 6.7.3	5.10.2105.15.1496.1.766.6.156.7.3
`linux` Debian:12	before 6.1.76-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 12 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-1~bpo11+1	6.1.76-1
`linux` Debian:13	before 6.6.15-1	6.6.15-1
`linux` Debian:14	before 6.6.15-1	6.6.15-1
`linux-5.10` Debian:10 From an advisory covering 344 CVEs	before 5.10.216-1~deb10u1, plus listed versions 5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1 Show 8 moreShow less 5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1	5.10.216-1~deb10u1
`linux` Debian:11 From an advisory covering 246 CVEs	before 5.10.216-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 34 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.216-1
`kernel` openEuler:22.03-LTS-SP2 From an advisory covering 18 CVEs	before 5.10.0-153.53.0.131.oe2203sp2	5.10.0-153.53.0.131.oe2203sp2
`kernel` openEuler:22.03-LTS From an advisory covering 18 CVEs	before 5.10.0-60.136.0.163.oe2203	5.10.0-60.136.0.163.oe2203
`kernel` openEuler:22.03-LTS-SP1 From an advisory covering 18 CVEs	before 5.10.0-136.74.0.154.oe2203sp1	5.10.0-136.74.0.154.oe2203sp1
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 23 CVEs	before 5.10.0-198.0.0.111.oe2203sp3	5.10.0-198.0.0.111.oe2203sp3
`kernel` openEuler:20.03-LTS-SP1 From an advisory covering 61 CVEs	before 4.19.90-2405.3.0.0249.oe1	4.19.90-2405.3.0.0249.oe1
`kernel` openEuler:20.03-LTS-SP4 From an advisory covering 63 CVEs	before 4.19.90-2405.3.0.0276.oe2003sp4	4.19.90-2405.3.0.0276.oe2003sp4
`bpftool` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel` Rocky Linux:8 From an advisory covering 160 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel` Rocky Linux:8 From an advisory covering 160 CVEs	before 0:4.18.0-553.16.1.el8_10.cloud.0.1	0:4.18.0-553.16.1.el8_10.cloud.0.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-livepatch-SLE15-SP2_Update_47` SUSE:Linux Enterprise Live Patching 15 SP2 From an advisory covering 114 CVEs	before 1-150200.5.3.3	1-150200.5.3.3
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1.150200.9.95.3	5.3.18-150200.24.188.1.150200.9.95.3
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-preempt` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1.150200.9.95.3	5.3.18-150200.24.188.1.150200.9.95.3
`kernel-docs` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-preempt` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1.150200.9.95.3	5.3.18-150200.24.188.1.150200.9.95.3
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-preempt` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 145 CVEs	before 5.3.18-150300.166.1	5.3.18-150300.166.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 145 CVEs	before 5.3.18-150300.166.1	5.3.18-150300.166.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 145 CVEs	before 5.3.18-150300.166.1	5.3.18-150300.166.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 145 CVEs	before 5.3.18-150300.166.1	5.3.18-150300.166.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 149 CVEs	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 149 CVEs	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-livepatch-SLE15-SP5-RT_Update_13` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 149 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 149 CVEs	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 149 CVEs	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 149 CVEs	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 149 CVEs	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 149 CVEs	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 149 CVEs	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 149 CVEs	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 149 CVEs	before 5.14.21-150500.13.47.1	5.14.21-150500.13.47.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1.150500.6.25.7	5.14.21-150500.55.59.1.150500.6.25.7
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1.150500.6.25.7	5.14.21-150500.55.59.1.150500.6.25.7
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-livepatch-SLE15-SP5_Update_12` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 150 CVEs	before 1-150500.11.7.1	1-150500.11.7.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1.150500.6.25.7	5.14.21-150500.55.59.1.150500.6.25.7
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 150 CVEs	before 5.14.21-150500.55.59.1	5.14.21-150500.55.59.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 183 CVEs	before 5.14.21-150500.33.48.1	5.14.21-150500.33.48.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 183 CVEs	before 5.14.21-150500.33.48.1	5.14.21-150500.33.48.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 183 CVEs	before 5.14.21-150500.33.48.1	5.14.21-150500.33.48.1
`kernel-default` openSUSE:Leap Micro 5.3 From an advisory covering 90 CVEs	before 5.14.21-150400.24.119.1	5.14.21-150400.24.119.1
`kernel-default-base` openSUSE:Leap Micro 5.3 From an advisory covering 90 CVEs	before 5.14.21-150400.24.119.1.150400.24.56.1	5.14.21-150400.24.119.1.150400.24.56.1
`kernel-default` openSUSE:Leap Micro 5.4 From an advisory covering 90 CVEs	before 5.14.21-150400.24.119.1	5.14.21-150400.24.119.1
`kernel-default-base` openSUSE:Leap Micro 5.4 From an advisory covering 90 CVEs	before 5.14.21-150400.24.119.1.150400.24.56.1	5.14.21-150400.24.119.1.150400.24.56.1
`kernel-rt` openSUSE:Leap Micro 5.3 From an advisory covering 87 CVEs	before 5.14.21-150400.15.79.1	5.14.21-150400.15.79.1
`kernel-rt` openSUSE:Leap Micro 5.4 From an advisory covering 87 CVEs	before 5.14.21-150400.15.79.1	5.14.21-150400.15.79.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.1	6.4.0-150600.8.5.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3.150600.12.2.7	6.4.0-150600.23.7.3.150600.12.2.7
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.4	6.4.0-150600.23.7.4
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.2	6.4.0-150600.23.7.2
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`linux-aws` Ubuntu:Pro:14.04:LTS	before 4.4.0-1131.137, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	4.4.0-1131.137
`linux-azure` Ubuntu:Pro:14.04:LTS	before 4.15.0-1177.192~14.04.1, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	4.15.0-1177.192~14.04.1
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	before 4.4.0-254.288~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	4.4.0-254.288~14.04.1
`linux` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less 3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70	None known
`linux` Ubuntu:Pro:16.04:LTS	before 4.4.0-254.288, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	4.4.0-254.288
`linux-aws` Ubuntu:Pro:16.04:LTS	before 4.4.0-1169.184, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	4.4.0-1169.184
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-1168.181~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	4.15.0-1168.181~16.04.1
`linux-azure` Ubuntu:Pro:16.04:LTS	before 4.15.0-1177.192~16.04.1, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	4.15.0-1177.192~16.04.1
`linux-gcp` Ubuntu:Pro:16.04:LTS	before 4.15.0-1162.179~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	4.15.0-1162.179~16.04.1
`linux-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-225.237~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	4.15.0-225.237~16.04.1
`linux-kvm` Ubuntu:Pro:16.04:LTS	before 4.4.0-1132.142, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	4.4.0-1132.142
`linux-oracle` Ubuntu:Pro:16.04:LTS	before 4.15.0-1131.142~16.04.1, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	4.15.0-1131.142~16.04.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	before 4.4.0-1101.108, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	4.4.0-1101.108
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	before 4.15.0-225.237, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	4.15.0-225.237
`linux-aws` Ubuntu:Pro:18.04:LTS	before 4.15.0-1168.181, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	4.15.0-1168.181
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1125.135~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1125.135~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1177.192, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	4.15.0-1177.192
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1130.137~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1130.137~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1162.179, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	4.15.0-1162.179
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1129.138~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1129.138~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-182.202~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-182.202~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1072.77~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 43 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.1	5.4.0-1072.77~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	before 4.15.0-1152.157, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	4.15.0-1152.157
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	before 4.15.0-1131.142, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	4.15.0-1131.142
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1124.133~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1124.133~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1109.121~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1109.121~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2107.113, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	4.15.0-2107.113
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2086.92, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	4.15.0-2086.92
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-1123.134, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	4.15.0-1123.134
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2070.75, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 37 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.74	4.15.0-2070.75
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26614 is a high vulnerability (CVSS 7.8) in Debian Linux, published February 29, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in linux-lts 6.1.81-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 736 package rows, 1,346 versions, 6,594 references and the rest of 28 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 6 source records.