CVE-2024-26643
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released from the commit path.
Mingi Cho originally reported this issue in a different path in 6.1.x with a pipapo set with low timeouts which is not possible upstream since 7395dfacfff6 ("netfilter: nf_tables: use timestamp to check for set element timeout").
Fix this by setting on the dead flag for anonymous sets to skip async gc in this case.
According to 08e4c8c5919f ("netfilter: nf_tables: mark newset as dead on transaction abort"), Florian plans to accelerate abort path by releasing objects via workqueue, therefore, this sets on the dead flag for abort path too.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.8
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released from the commit path.
Mingi Cho originally reported this issue in a different path in 6.1.x with a pipapo set with low timeouts which is not possible upstream since 7395dfacfff6 ("netfilter: nf_tables: use timestamp to check for set element timeout").
Fix this by setting on the dead flag for anonymous sets to skip async gc in this case.
According to 08e4c8c5919f ("netfilter: nf_tables: mark newset as dead on transaction abort"), Florian plans to accelerate abort path by releasing objects via workqueue, therefore, this sets on the dead flag for abort path too.
- Record
CVE-2024-26643- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2024-23905
7.8
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released from the commit path.
Mingi Cho originally reported this issue in a different path in 6.1.x with a pipapo set with low timeouts which is not possible upstream since 7395dfacfff6 ("netfilter: nf_tables: use timestamp to check for set element timeout").
Fix this by setting on the dead flag for anonymous sets to skip async gc in this case.
According to 08e4c8c5919f ("netfilter: nf_tables: mark newset as dead on transaction abort"), Florian plans to accelerate abort path by releasing objects via workqueue, therefore, this sets on the dead flag for abort path too.
- Record
EUVD-2024-23905- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-ph5r-c8gc-xg6f
5.5
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark...
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released from the commit path.
Mingi Cho originally reported this issue in a different path in 6.1.x with a pipapo set with low timeouts which is not possible upstream since 7395dfacfff6 ("netfilter: nf_tables: use timestamp to check for set element timeout").
Fix this by setting on the dead flag for anonymous sets to skip async gc in this case.
According to 08e4c8c5919f ("netfilter: nf_tables: mark newset as dead on transaction abort"), Florian plans to accelerate abort path by releasing objects via workqueue, therefore, this sets on the dead flag for abort path too.
- Record
GHSA-ph5r-c8gc-xg6f- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-667
- Updated
- 2026-11-02
NVD
7.8
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released from the commit path.
Mingi Cho originally reported this issue in a different path in 6.1.x with a pipapo set with low timeouts which is not possible upstream since 7395dfacfff6 ("netfilter: nf_tables: use timestamp to check for set element timeout").
Fix this by setting on the dead flag for anonymous sets to skip async gc in this case.
According to 08e4c8c5919f ("netfilter: nf_tables: mark newset as dead on transaction abort"), Florian plans to accelerate abort path by releasing objects via workqueue, therefore, this sets on the dead flag for abort path too.
- Record
CVE-2024-26643- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-667
- Updated
- 2026-11-02
OSVBELL-CVE-2024-26643
5.5
- Record
BELL-CVE-2024-26643- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
7.8
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released from the commit path.
Mingi Cho originally reported this issue in a different path in 6.1.x with a pipapo set with low timeouts which is not possible upstream since 7395dfacfff6 ("netfilter: nf_tables: use timestamp to check for set element timeout").
Fix this by setting on the dead flag for anonymous sets to skip async gc in this case.
According to 08e4c8c5919f ("netfilter: nf_tables: mark newset as dead on transaction abort"), Florian plans to accelerate abort path by releasing objects via workqueue, therefore, this sets on the dead flag for abort path too.
- Record
CVE-2024-26643- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 45 moreShow less
OSVDEBIAN-CVE-2024-26643
5.5
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released from the commit path. Mingi Cho originally reported this issue in a different path in 6.1.x with a pipapo set with low timeouts which is not possible upstream since 7395dfacfff6 ("netfilter: nf_tables: use timestamp to check for set element timeout"). Fix this by setting on the dead flag for anonymous sets to skip async gc in this case. According to 08e4c8c5919f ("netfilter: nf_tables: mark newset as dead on transaction abort"), Florian plans to accelerate abort path by releasing objects via workqueue, therefore, this sets on the dead flag for abort path too.
- Record
DEBIAN-CVE-2024-26643- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2024-1682
0.0
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
In current code, when a PCI error state pci_channel_io_normal is detectd, it will report PCI_ERS_RESULT_CAN_RECOVER status to PCI driver, and PCI driver will continue the execution of PCI resume callback report_resume by pci_walk_bridge, and the callback will go into amdgpu_pci_resume finally, where write lock is releasd unconditionally without acquiring such lock first. In this case, a deadlock will happen when other threads start to acquire the read lock.
To fix this, add a member in amdgpu_device strucutre to cache pci_channel_state, and only continue the execution in amdgpu_pci_resume when it's pci_channel_io_frozen.(CVE-2021-47421)
In the Linux kernel, the following vulnerability has been resolved:
ptp: Fix possible memory leak in ptp_clock_register()
I got memory leak as follows when doing fault injection test:
unreferenced object 0xffff88800906c618 (size 8): comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 (age 13.188s) hex dump (first 8 bytes): 70 74 70 30 00 00 00 00 ptp0.... backtrace: [<00000000312ed458>] __kmalloc_track_caller+0x19f/0x3a0 [<0000000079f6e2ff>] kvasprintf+0xb5/0x150 [<0000000026aae54f>] kvasprintf_const+0x60/0x190 [<00000000f323a5f7>] kobject_set_name_vargs+0x56/0x150 [<000000004e35abdd>] dev_set_name+0xc0/0x100 [<00000000f20cfe25>] ptp_clock_register+0x9f4/0xd30 [ptp] [<000000008bb9f0de>] idt82p33_probe.cold+0x8b6/0x1561 [ptp_idt82p33]
When posix_clock_register() returns an error, the name allocated in dev_set_name() will be leaked, the put_device() should be used to give up the device reference, then the name will be freed in kobject_cleanup() and other memory will be freed in ptp_clock_release().(CVE-2021-47455)
In the Linux kernel, the following vulnerability has been resolved:
net: enetc: deny offload of tc-based TSN features on VF interfaces
TSN features on the ENETC (taprio, cbs, gate, police) are configured through a mix of command BD ring messages and port registers: enetc_port_rd(), enetc_port_wr().
Port registers are a region of the ENETC memory map which are only accessible from the PCIe Physical Function. They are not accessible from the Virtual Functions.
Moreover, attempting to access these registers crashes the kernel:
$ echo 1 > /sys/bus/pci/devices/0000:00:00.0/sriov_numvfs
pci 0000:00:01.0: [1957:ef00] type 00 class 0x020001
fsl_enetc_vf 0000:00:01.0: Adding to iommu group 15
fsl_enetc_vf 0000:00:01.0: enabling device (0000 -> 0002)
fsl_enetc_vf 0000:00:01.0 eno0vf0: renamed from eth0
$ tc qdisc replace dev eno0vf0 root taprio num_tc 8 map 0 1 2 3 4 5 6 7
queues 1@0 1@1 1@2 1@3 1@4 1@5 1@6 1@7 base-time 0
sched-entry S 0x7f 900000 sched-entry S 0x80 100000 flags 0x2
Unable to handle kernel paging request at virtual address ffff800009551a08
Internal error: Oops: 96000007 [#1] PREEMPT SMP
pc : enetc_setup_tc_taprio+0x170/0x47c
lr : enetc_setup_tc_taprio+0x16c/0x47c
Call trace:
enetc_setup_tc_taprio+0x170/0x47c
enetc_setup_tc+0x38/0x2dc
taprio_change+0x43c/0x970
taprio_init+0x188/0x1e0
qdisc_create+0x114/0x470
tc_modify_qdisc+0x1fc/0x6c0
rtnetlink_rcv_msg+0x12c/0x390
Split enetc_setup_tc() into separate functions for the PF and for the VF drivers. Also remove enetc_qos.o from being included into enetc-vf.ko, since it serves absolutely no purpose there.(CVE-2022-48645)
In the Linux kernel, the following vulnerability has been resolved:
drm/tegra: dsi: Add missing check for of_find_device_by_node
Add check for the return value of of_find_device_by_node() and return the error if it fails in order to avoid NULL pointer dereference.(CVE-2023-52650)
In the Linux kernel,…
- Record
OESA-2024-1682- CVSS 3.1
- 0.0 None
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2024:3306
6.1
Red Hat Security Advisory: kernel security and bug fix update
- Record
RHSA-2024:3306- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:3460
6.7
Red Hat Security Advisory: kernel-rt security and bug fix update
- Record
RHSA-2024:3460- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:3461
6.7
Red Hat Security Advisory: kernel security and bug fix update
- Record
RHSA-2024:3461- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:3618
7.8
Red Hat Security Advisory: kernel update
- Record
RHSA-2024:3618- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:3627
7.8
Red Hat Security Advisory: kernel-rt security and bug fix update
- Record
RHSA-2024:3627- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-26643
5.5
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout While the rhashtable set gc runs asynchronously, a race allows it to collect elements from anonymous sets with timeouts while it is being released from the commit path. Mingi Cho originally reported this issue in a different path in 6.1.x with a pipapo set with low timeouts which is not possible upstream since 7395dfacfff6 ("netfilter: nf_tables: use timestamp to check for set element timeout"). Fix this by setting on the dead flag for anonymous sets to skip async gc in this case. According to 08e4c8c5919f ("netfilter: nf_tables: mark newset as dead on transaction abort"), Florian plans to accelerate abort path by releasing objects via workqueue, therefore, this sets on the dead flag for abort path too.
- Record
UBUNTU-CVE-2024-26643- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2024:3306 No score
Moderate: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
- kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
- kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (CVE-2024-26673)
- kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)
- Record
ALSA-2024:3306- Updated
- 2026-11-02
OSVALSA-2024:3618 No score
Moderate: kernel update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
- kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
- kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
- kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
- kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
- kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)
- kernel: use after free in i2c (CVE-2019-25162)
- kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
- kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
- kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
- kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
- kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
- kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
- kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
- kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
- kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
- kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
- kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
- kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
- kernel: pid: take a reference when initializing
cad_pid(CVE-2021-47118) - kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
- kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
- kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
- kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
- kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
- kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
- kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
- kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
- kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
- kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
- kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
- kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
- kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
- kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
- kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
- kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)
- kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
- kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
- kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)
- kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)
- kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)
- kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)
- kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
- kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (CVE-2023-52594)
- kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)
- Record
ALSA-2024:3618- Updated
- 2026-11-02
OSVALSA-2024:3627 No score
Moderate: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
- kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
- kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
- kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
- kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
- kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
- kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)
- kernel: use after free in i2c (CVE-2019-25162)
- kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
- kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
- kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
- kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
- kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
- kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
- kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
- kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
- kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
- kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
- kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
- kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
- kernel: pid: take a reference when initializing
cad_pid(CVE-2021-47118) - kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
- kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
- kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
- kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
- kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
- kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
- kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
- kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
- kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
- kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
- kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
- kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
- kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
- kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
- kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
- kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)
- kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
- kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
- kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)
Bug Fix(es):
- kernel-rt: update RT source tree to the latest AlmaLinux-8.10.z kernel (JIRA:AlmaLinux-34640)
- kernel-rt: epoll_wait not reporting catching all events to application (JIRA:AlmaLinux-23022)
- Record
ALSA-2024:3627- Updated
- 2026-11-02
OSVCLSA-2024-1719231016 No score
kernel: Fix of 52 CVEs
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882}
- tls: fix use-after-free on failed backlog decryption {CVE-2024-26800}
- tls: separate no-async decryption request handling from async {CVE-2024-26584}
- tls: decrement decrypt_pending if no async completion will be called {CVE-2024-26584}
- net: tls: fix use-after-free with partial reads and async decrypt {CVE-2024-26582}
- net: tls: handle backlogging of crypto requests {CVE-2024-26584}
- net: tls: factor out tls_*crypt_async_wait()
- tap: tap_open(): correctly initialize socket uid {CVE-2023-1076}
- tun: tun_chr_open(): correctly initialize socket uid {CVE-2023-1076}
- net: add sock_init_data_uid() {CVE-2023-1076}
- netfilter: nf_tables: bail out on mismatching dynset and set expressions {CVE-2023-6622}
- drm/qxl: fix UAF on handle creation {CVE-2023-39198}
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
- USB: core: Fix deadlock in port "disable" sysfs attribute {CVE-2024-26933}
- USB: core: Add hub_get() and hub_put() routines {CVE-2024-26933}
- USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934}
- scsi: qla2xxx: Fix double free of fcport {CVE-2024-26929}
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020}
- net: ip_tunnel: prevent perpetual headroom growth {CVE-2024-26804}
- netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout {CVE-2024-26643}
- netfilter: nf_tables: disallow anonymous set with timeout flag {CVE-2024-26642}
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations {CVE-2024-26673}
- ipv6: sr: fix possible use-after-free and null-ptr-deref {CVE-2024-26735}
- fs: sysfs: Fix reference leak in sysfs_break_active_protection() {CVE-2024-26993}
- cifs: fix underflow in parse_server_interfaces() {CVE-2024-26828}
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path {CVE-2024-26595}
- mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code {CVE-2024-26595}
- mlxsw: spectrum_acl_tcam: Make fini symmetric to init {CVE-2024-26595}
- mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() {CVE-2024-26595}
- net: xfrm: Fix xfrm_address_filter OOB read {CVE-2023-39194}
- exfat: check if filename entries exceeds max filename length {CVE-2023-4273}
- xfrm: add NULL check in xfrm_update_ae_params {CVE-2023-3772}
- firmware: arm_scmi: Harden accesses to the reset domains {CVE-2022-48655}
- tcp: Reduce chance of collisions in inet6_hashfn(). {CVE-2023-1206}
- ipv4: fix null-deref in ipv4_link_failure {CVE-2023-42754}
- netfilter: nfnetlink_osf: avoid OOB read {CVE-2023-39189}
- netfilter: xt_sctp: validate the flag_info count {CVE-2023-39193}
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition {CVE-2023-33203}
- net/tls: tls_is_tx_ready() checked list_entry {CVE-2023-1075}
- HID: asus: use spinlock to safely schedule workers {CVE-2023-1079}
- HID: asus: use spinlock to protect concurrent accesses {CVE-2023-1079}
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map {CVE-2023-3358}
- gfs2: Don't deref jdesc in evict {CVE-2023-3212}
- fbcon: Check font dimension limits {CVE-2023-3161}
- KVM: nVMX: add missing consistency checks for CR0 and CR4 {CVE-2023-30456}
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition {CVE-2023-1855}
- Bluetooth: HCI: Fix global-out-of-bounds {CVE-2023-28866}
- HID: check empty report_list in hid_validate_values() {CVE-2023-1073}
- net: mpls: fix stale pointer if allocation fails during device rename {CVE-2023-26545}
- r8152: Rate limit overflow messages {CVE-2022-3594}
- drm/vmwgfx: Fix shader stage validation {CVE-2022-36402}
- Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895}
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern {CVE-2023-2269}
- mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() {CVE-2023-52562} -…
- Record
CLSA-2024-1719231016- Updated
- 2026-11-02
OSVCLSA-2024-1721658474 No score
Fix of 66 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-26810
- vfio/pci: Lock external INTx masking ops
- CVE-url: https://ubuntu.com/security/CVE-2024-38587
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- CVE-url: https://ubuntu.com/security/CVE-2024-39493
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
- CVE-url: https://ubuntu.com/security/CVE-2024-38381
- nfc: nci: Fix uninit-value in nci_rx_work
- CVE-url: https://ubuntu.com/security/CVE-2023-52620
- netfilter: nf_tables: disallow timeout for anonymous sets
- CVE-url: https://ubuntu.com/security/CVE-2024-35805
- dm snapshot: fix lockup in dm_exception_table_exit
- CVE-url: https://ubuntu.com/security/CVE-2024-26923
- af_unix: Fix garbage collector racing against connect()
- CVE-url: https://ubuntu.com/security/CVE-2024-35969
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- CVE-url: https://ubuntu.com/security/CVE-2024-26863
- hsr: Fix uninit-value access in hsr_get_node()
- CVE-url: https://ubuntu.com/security/CVE-2024-26993
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- CVE-url: https://ubuntu.com/security/CVE-2024-27388
- SUNRPC: fix some memleaks in gssx_dec_option_array
- CVE-url: https://ubuntu.com/security/CVE-2024-35886
- ipv6: Fix infinite recursion in fib6_dump_done().
- CVE-url: https://ubuntu.com/security/CVE-2024-35809
- PCI/PM: Drain runtime-idle callbacks before driver removal
- CVE-url: https://ubuntu.com/security/CVE-2024-26875
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- CVE-url: https://ubuntu.com/security/CVE-2024-26851
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- CVE-url: https://ubuntu.com/security/CVE-2024-35915
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- CVE-url: https://ubuntu.com/security/CVE-2024-26999
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood
- CVE-url: https://ubuntu.com/security/CVE-2023-52699
- sysv: don't call sb_bread() with pointers_lock held
- CVE-url: https://ubuntu.com/security/CVE-2024-35828
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- CVE-url: https://ubuntu.com/security/CVE-2024-27001
- comedi: vmk80xx: fix incomplete endpoint checking
- CVE-url: https://ubuntu.com/security/CVE-2024-27008
- drm: nv04: Fix out of bounds access
- CVE-url: https://ubuntu.com/security/CVE-2024-35935
- btrfs: send: handle path ref underflow in header iterate_inode_ref()
- CVE-url: https://ubuntu.com/security/CVE-2024-27059
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- CVE-url: https://ubuntu.com/security/CVE-2024-26974
- crypto: qat - resolve race condition during AER recovery
- CVE-url: https://ubuntu.com/security/CVE-2024-26965
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- CVE-url: https://ubuntu.com/security/CVE-2024-26931
- scsi: qla2xxx: Fix command flush on cable pull
- CVE-url: https://ubuntu.com/security/CVE-2024-35910
- mptcp: add sk_stop_timer_sync helper
- CVE-url: https://ubuntu.com/security/CVE-2024-35944
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- CVE-url: https://ubuntu.com/security/CVE-2024-35830
- media: tc358743: register v4l2 async device only after successful setup
- CVE-url: https://ubuntu.com/security/CVE-2024-26956
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- CVE-url: https://ubuntu.com/security/CVE-2024-35807
- ext4: fix corruption during on-line resize
- CVE-url: https://ubuntu.com/security/CVE-2024-26813
- vfio/platform: Create persistent IRQ handlers
- CVE-url: https://ubuntu.com/security/CVE-2023-52644
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- CVE-url:…
- Record
CLSA-2024-1721658474- Updated
- 2026-11-02
OSVCLSA-2024-1721659158 No score
Fix of 66 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-26810
- vfio/pci: Lock external INTx masking ops
- CVE-url: https://ubuntu.com/security/CVE-2024-38587
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- CVE-url: https://ubuntu.com/security/CVE-2024-39493
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
- CVE-url: https://ubuntu.com/security/CVE-2024-38381
- nfc: nci: Fix uninit-value in nci_rx_work
- CVE-url: https://ubuntu.com/security/CVE-2023-52620
- netfilter: nf_tables: disallow timeout for anonymous sets
- CVE-url: https://ubuntu.com/security/CVE-2024-35805
- dm snapshot: fix lockup in dm_exception_table_exit
- CVE-url: https://ubuntu.com/security/CVE-2024-26923
- af_unix: Fix garbage collector racing against connect()
- CVE-url: https://ubuntu.com/security/CVE-2024-35969
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- CVE-url: https://ubuntu.com/security/CVE-2024-26863
- hsr: Fix uninit-value access in hsr_get_node()
- CVE-url: https://ubuntu.com/security/CVE-2024-26993
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- CVE-url: https://ubuntu.com/security/CVE-2024-27388
- SUNRPC: fix some memleaks in gssx_dec_option_array
- CVE-url: https://ubuntu.com/security/CVE-2024-35886
- ipv6: Fix infinite recursion in fib6_dump_done().
- CVE-url: https://ubuntu.com/security/CVE-2024-35809
- PCI/PM: Drain runtime-idle callbacks before driver removal
- CVE-url: https://ubuntu.com/security/CVE-2024-26875
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- CVE-url: https://ubuntu.com/security/CVE-2024-26851
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- CVE-url: https://ubuntu.com/security/CVE-2024-35915
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- CVE-url: https://ubuntu.com/security/CVE-2024-26999
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood
- CVE-url: https://ubuntu.com/security/CVE-2023-52699
- sysv: don't call sb_bread() with pointers_lock held
- CVE-url: https://ubuntu.com/security/CVE-2024-35828
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- CVE-url: https://ubuntu.com/security/CVE-2024-27001
- comedi: vmk80xx: fix incomplete endpoint checking
- CVE-url: https://ubuntu.com/security/CVE-2024-27008
- drm: nv04: Fix out of bounds access
- CVE-url: https://ubuntu.com/security/CVE-2024-35935
- btrfs: send: handle path ref underflow in header iterate_inode_ref()
- CVE-url: https://ubuntu.com/security/CVE-2024-27059
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- CVE-url: https://ubuntu.com/security/CVE-2024-26974
- crypto: qat - resolve race condition during AER recovery
- CVE-url: https://ubuntu.com/security/CVE-2024-26965
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- CVE-url: https://ubuntu.com/security/CVE-2024-26931
- scsi: qla2xxx: Fix command flush on cable pull
- CVE-url: https://ubuntu.com/security/CVE-2024-35910
- mptcp: add sk_stop_timer_sync helper
- CVE-url: https://ubuntu.com/security/CVE-2024-35944
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- CVE-url: https://ubuntu.com/security/CVE-2024-35830
- media: tc358743: register v4l2 async device only after successful setup
- CVE-url: https://ubuntu.com/security/CVE-2024-26956
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- CVE-url: https://ubuntu.com/security/CVE-2024-35807
- ext4: fix corruption during on-line resize
- CVE-url: https://ubuntu.com/security/CVE-2024-26813
- vfio/platform: Create persistent IRQ handlers
- CVE-url: https://ubuntu.com/security/CVE-2023-52644
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- CVE-url:…
- Record
CLSA-2024-1721659158- Updated
- 2026-11-02
OSVCLSA-2024-1721659604 No score
Fix of 96 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-35902
- net/rds: fix possible cp null dereference
- CVE-url: https://ubuntu.com/security/CVE-2024-38587
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- CVE-url: https://ubuntu.com/security/CVE-2024-39493
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
- CVE-url: https://ubuntu.com/security/CVE-2024-38381
- nfc: nci: Fix uninit-value in nci_rx_work
- CVE-url: https://ubuntu.com/security/CVE-2024-26810
- vfio/pci: Lock external INTx masking ops
- CVE-url: https://ubuntu.com/security/CVE-2024-26687
- xen/events: close evtchn after mapping cleanup
- CVE-url: https://ubuntu.com/security/CVE-2024-35893
- net: sched: change type of reference and bind counters
- net: sched: act_skbmod: remove dependency on rtnl lock
- net/sched: act_skbmod: prevent kernel-infoleak
- CVE-url: https://ubuntu.com/security/CVE-2024-35823
- vt: preserve unicode values corresponding to screen characters
- vt: fix unicode buffer corruption when deleting characters
- CVE-url: https://ubuntu.com/security/CVE-2024-35805
- dm snapshot: Replace mutex with rw semaphore
- dm snapshot: fix lockup in dm_exception_table_exit
- CVE-url: https://ubuntu.com/security/CVE-2024-27004
- clk: core: clarify the check for runtime PM
- clk: Get runtime PM before walking tree during disable_unused
- CVE-url: https://ubuntu.com/security/CVE-2024-26852
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- CVE-url: https://ubuntu.com/security/CVE-2023-52620
- netfilter: nf_tables: disallow timeout for anonymous sets
- CVE-url: https://ubuntu.com/security/CVE-2024-25739
- ubi: Check for too small LEB size in VTBL code
- CVE-url: https://ubuntu.com/security/CVE-2024-27437
- genirq: Add IRQF_NO_AUTOEN for request_irq/nmi()
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- CVE-url: https://ubuntu.com/security/CVE-2022-48627
- vc: separate state
- vt: fix memory overlapping when deleting chars in the buffer
- CVE-url: https://ubuntu.com/security/CVE-2024-35910
- mptcp: add sk_stop_timer_sync helper
- tcp: properly terminate timers for kernel sockets
- CVE-url: https://ubuntu.com/security/CVE-2024-35969
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- CVE-url: https://ubuntu.com/security/CVE-2024-27024
- RDS: RDMA: Fix the NULL-ptr deref in rds_ib_get_mr
- net/rds: fix WARNING in rds_conn_connect_if_down
- CVE-url: https://ubuntu.com/security/CVE-2024-26863
- hsr: Fix uninit-value access in hsr_get_node()
- CVE-url: https://ubuntu.com/security/CVE-2024-26984
- nouveau: fix instmem race condition around ptr stores
- CVE-url: https://ubuntu.com/security/CVE-2024-36020
- i40e: fix vf may be used uninitialized in this function warning
- CVE-url: https://ubuntu.com/security/CVE-2024-35849
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- CVE-url: https://ubuntu.com/security/CVE-2024-27388
- SUNRPC: fix some memleaks in gssx_dec_option_array
- CVE-url: https://ubuntu.com/security/CVE-2024-35886
- ipv6: Fix infinite recursion in fib6_dump_done().
- CVE-url: https://ubuntu.com/security/CVE-2024-35809
- PCI/PM: Drain runtime-idle callbacks before driver removal
- CVE-url: https://ubuntu.com/security/CVE-2024-26875
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- CVE-url: https://ubuntu.com/security/CVE-2024-26851
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- CVE-url: https://ubuntu.com/security/CVE-2024-26999
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood
- CVE-url: https://ubuntu.com/security/CVE-2024-35819
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- CVE-url: https://ubuntu.com/security/CVE-2024-35806
- soc: fsl: qbman: Always disable interrupts when taking…
- Record
CLSA-2024-1721659604- Updated
- 2026-11-02
OSVCLSA-2024-1721660263 No score
Update of linux-meta
- Bump ABI 4.15.0-232
- Record
CLSA-2024-1721660263- Updated
- 2026-11-02
OSVMGASA-2024-0141 No score
Updated kernel, kmod-xtables-addons, kmod-virtualbox packages fix security vulnerabilities
Upstream kernel version 6.6.28 fix bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. dwarves is a new requirement to build the kernel. For information about the vulnerabilities see the links.
- Record
MGASA-2024-0141- Updated
- 2026-11-02
OSVMGASA-2024-0142 No score
Updated kernel-linus packages fix security vulnerabilities
Upstream kernel version 6.6.28 fix bugs and vulnerabilities. For information about the vulnerabilities see the links.
- Record
MGASA-2024-0142- Updated
- 2026-11-02
OSVRLSA-2024:3618 No score
Moderate: kernel update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
-
kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
-
kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
-
kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
-
kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
-
kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)
-
kernel: use after free in i2c (CVE-2019-25162)
-
kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
-
kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
-
kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
-
kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
-
kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
-
kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
-
kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
-
kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
-
kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
-
kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
-
kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
-
kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
-
kernel: pid: take a reference when initializing
cad_pid(CVE-2021-47118) -
kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
-
kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
-
kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
-
kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
-
kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
-
kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
-
kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
-
kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
-
kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
-
kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
-
kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
-
kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
-
kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
-
kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
-
kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
-
kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)
-
kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
-
kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
-
kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)
-
kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)
-
kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)
-
kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)
-
kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
-
kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (CVE-2023-52594)
-
kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)
- Record
RLSA-2024:3618- Updated
- 2026-11-02
OSVRLSA-2024:3627 No score
Moderate: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
-
kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240)
-
kernel: Information disclosure in vhost/vhost.c:vhost_new_msg() (CVE-2024-0340)
-
kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
-
kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
-
kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
-
kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer that cause loop forever (CVE-2024-26603)
-
kernel: use after free in i2c (CVE-2019-25162)
-
kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
-
kernel: media: dvbdev: Fix memory leak in dvb_media_device_free() (CVE-2020-36777)
-
kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors (CVE-2023-52477)
-
kernel: mtd: require write permissions for locking and badblock ioctls (CVE-2021-47055)
-
kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump (CVE-2024-26615)
-
kernel: vt: fix memory overlapping when deleting chars in the buffer (CVE-2022-48627)
-
kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
-
kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu() (CVE-2023-52565)
-
kernel: net: bridge: data races indata-races in br_handle_frame_finish() (CVE-2023-52578)
-
kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (CVE-2023-52528)
-
kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
-
kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
-
kernel: pid: take a reference when initializing
cad_pid(CVE-2021-47118) -
kernel: net/sched: act_ct: fix skb leak and crash on ooo frags (CVE-2023-52610)
-
kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643)
-
kernel: netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642)
-
kernel: i2c: i801: Don't generate an interrupt on bus reset (CVE-2021-47153)
-
kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659)
-
kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
-
kernel: wifi: mac80211: fix race condition on enabling fast-xmit (CVE-2024-26779)
-
kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter (CVE-2024-26744)
-
kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
-
kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (CVE-2021-47185)
-
kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (CVE-2024-26901)
-
kernel: RDMA/srpt: Do not register event handler until srpt device is fully setup (CVE-2024-26872)
-
kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
-
kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
-
kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934)
-
kernel: USB: core: Fix deadlock in port "disable" sysfs attribute (CVE-2024-26933)
-
kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993)
-
kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
-
kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059)
Bug Fix(es):
-
kernel-rt: update RT source tree to the latest Rocky Linux-8.10.z kernel (JIRA:Rocky Linux-34640)
-
kernel-rt: epoll_wait not reporting catching all events to application (JIRA:Rocky Linux-23022)
- Record
RLSA-2024:3627- Updated
- 2026-11-02
OSVSUSE-SU-2024:2008-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
- CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
- CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-42755: Check user supplied offsets (bsc#1215702).
- CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
- CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
- CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
- CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
- CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
- CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
- CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
- CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
- CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
- CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
- CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
- CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
- CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
- CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
- CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
- CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
- CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
- CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
- CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
- CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
- CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
- CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
- CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
- CVE-2024-27417: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721)
- CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
- CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
- CVE-2024-35791: Flush pages under…
- Record
SUSE-SU-2024:2008-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2010-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
- CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
- CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
- CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
- CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
- CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
- CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
- CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
- CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
- CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
- CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
- CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
- CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
- CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
- CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
- CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
- CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).
The following non-security bugs were fixed:
- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
- af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
- btrfs: do not start relocation until in progress drops are done (bsc#1222251).
- btrfs: do not start relocation until in progress drops are done (bsc#1222251).
- cifs: add missing spinlock around tcon refcount (bsc#1213476).
- cifs: avoid dup prefix path in dfs_get_automount_devname() (bsc#1213476).
- cifs: avoid race conditions with parallel reconnects (bsc#1213476).
- cifs: avoid re-lookups in dfs_cache_find() (bsc#1213476).
- cifs: avoid use of global locks for high contention data (bsc#1213476).
- cifs: check only tcon status on tcon related functions (bsc#1213476).
- cifs: do all necessary checks for credits within or before locking (bsc#1213476).
- cifs: do not block in dfs_cache_noreq_update_tgthint() (bsc#1213476).
- cifs: do not refresh cached referrals from unactive mounts (bsc#1213476).
- cifs: do not take exclusive lock for updating target hints (bsc#1213476).
- cifs: fix confusing debug message (bsc#1213476).
- cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1213476).
- cifs: fix potential deadlock in cache_refresh_path() (bsc#1213476).
- cifs: fix refresh of cached referrals (bsc#1213476).
- cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1213476).
- cifs: fix source pathname comparison of dfs supers (bsc#1213476).
- cifs: fix status checks in cifs_tree_connect (bsc#1213476).
- cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1213476).
- cifs: get rid of dns resolve worker (bsc#1213476).
- cifs: get rid of mount options string parsing (bsc#1213476).
- cifs: handle cache lookup errors different than -ENOENT (bsc#1213476).
- cifs: ignore ipc reconnect failures during dfs failover (bsc#1213476).
- cifs: match even the scope id for ipv6 addresses (bsc#1213476).
- cifs: optimize reconnect of nested links (bsc#1213476).
- cifs: prevent data race in smb2_reconnect() (bsc#1213476). -…
- Record
SUSE-SU-2024:2010-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2019-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
- CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
- CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
- CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
- CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
- CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
- CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
- CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
- CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
- CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
- CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
- CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
- CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
- CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-35869: Guarantee refcounted children from parent session (bsc#1224679).
- CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
- CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2023-42755: Check user supplied offsets (bsc#1215702).
- CVE-2024-35964: Fixed not validating setsockopt user input (bsc#1224581).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
- CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
- CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
- CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
- CVE-2024-35860: struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531).
- CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
- CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
- CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
- CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
- CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
- CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
- CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
- CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
- CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios (bsc#1224530).
- CVE-2024-35852: Fixed memory leak when canceling rehash work (bsc#1224502).
- CVE-2024-36006: Fixed incorrect list API usage (bsc#1224541).
- CVE-2024-36007: Fixed warning during rehash (bsc#1224543).
- CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
- CVE-2024-35907: Call request_irq() after NAPI initialized (bsc#1224492).
- CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
- CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure…
- Record
SUSE-SU-2024:2019-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2135-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
- CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
- CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
- CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
- CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
- CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
- CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
- CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
- CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
- CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
- CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
- CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
- CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
- CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
- CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
- CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
- CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
- CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
- CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
- CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
- CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
- CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
- CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
- CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
- CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
- CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
- CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
- CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
- CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
- CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
- CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
- CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
- CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
- CVE-2023-6270: Fixed a use-after-free issue in…
- Record
SUSE-SU-2024:2135-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2183-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
- CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
- CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
- CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
- CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
- CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
- CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
- CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
- CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
- CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
- CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
- CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
- CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
- CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
- CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
- CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
- CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).
The following non-security bugs were fixed:
- NFC: nxp: add NXP1002 (bsc#1185589).
- PCI: rpaphp: Add MODULE_DESCRIPTION (bsc#1176869 ltc#188243).
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
- af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
- btrfs: do not start relocation until in progress drops are done (bsc#1222251).
- md: Replace snprintf with scnprintf (git-fixes).
- netfilter: nf_tables: GC transaction race with abort path (git-fixes).
- netfilter: nf_tables: GC transaction race with netns dismantle (git-fixes).
- netfilter: nf_tables: defer gc run if previous batch is still pending (git-fixes).
- netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (git-fixes).
- netfilter: nf_tables: fix kdoc warnings after gc rework (git-fixes).
- netfilter: nf_tables: fix memleak when more than 255 elements expired (git-fixes).
- netfilter: nf_tables: mark newset as dead on transaction abort (git-fixes).
- netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (git-fixes).
- netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure (git-fixes).
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (git-fixes).
- netfilter: nf_tables: skip dead set elements in netlink dump (git-fixes).
- netfilter: nf_tables: use correct lock to protect gc_list (git-fixes).
- netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (git-fixes).
- netfilter: nft_set_rbtree: Add missing expired checks (git-fixes).
- netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match (git-fixes).
- netfilter: nft_set_rbtree: Detect partial overlaps on insertion (git-fixes).
- netfilter: nft_set_rbtree: Do not account for expired elements on insertion (git-fixes).
- netfilter: nft_set_rbtree: Drop spurious condition for overlap detection on insertion (git-fixes).
- netfilter: nft_set_rbtree: Handle outcomes of tree rotations in overlap detection (git-fixes).
- netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start() (git-fixes). -…
- Record
SUSE-SU-2024:2183-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2185-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
- CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
- CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
- CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
- CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
- CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
- CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
- CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
- CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
- CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
- CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
- CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
- CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
- CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
- CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
- CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).
The following non-security bugs were fixed:
- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
- af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
- btrfs: do not start relocation until in progress drops are done (bsc#1222251).
- btrfs: do not start relocation until in progress drops are done (bsc#1222251).
- cifs: add missing spinlock around tcon refcount (bsc#1213476).
- cifs: avoid dup prefix path in dfs_get_automount_devname() (bsc#1213476).
- cifs: avoid race conditions with parallel reconnects (bsc#1213476).
- cifs: avoid re-lookups in dfs_cache_find() (bsc#1213476).
- cifs: avoid use of global locks for high contention data (bsc#1213476).
- cifs: check only tcon status on tcon related functions (bsc#1213476).
- cifs: do all necessary checks for credits within or before locking (bsc#1213476).
- cifs: do not block in dfs_cache_noreq_update_tgthint() (bsc#1213476).
- cifs: do not refresh cached referrals from unactive mounts (bsc#1213476).
- cifs: do not take exclusive lock for updating target hints (bsc#1213476).
- cifs: fix confusing debug message (bsc#1213476).
- cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1213476).
- cifs: fix potential deadlock in cache_refresh_path() (bsc#1213476).
- cifs: fix refresh of cached referrals (bsc#1213476).
- cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1213476).
- cifs: fix source pathname comparison of dfs supers (bsc#1213476).
- cifs: fix status checks in cifs_tree_connect (bsc#1213476).
- cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1213476).
- cifs: get rid of dns resolve worker (bsc#1213476).
- cifs: get rid of mount options string parsing (bsc#1213476).
- cifs: handle cache lookup errors different than -ENOENT (bsc#1213476).
- cifs: ignore ipc reconnect failures during dfs failover (bsc#1213476).
- cifs: match even the scope id for ipv6 addresses (bsc#1213476).
- cifs: optimize reconnect of nested links (bsc#1213476).
- cifs: prevent data race in smb2_reconnect() (bsc#1213476). -…
- Record
SUSE-SU-2024:2185-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2190-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
- CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
- CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
- CVE-2023-42755: Check user supplied offsets (bsc#1215702).
- CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
- CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
- CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
- CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
- CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
- CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
- CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
- CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
- CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
- CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
- CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
- CVE-2024-26700: Fixed drm/amd/display: Fix MST Null Ptr for RV (bsc#1222870)
- CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
- CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
- CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
- CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)
- CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)
- CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
- CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)
- CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
- CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
- CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).
- CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
- CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
- CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
- CVE-2024-27042: Fixed potential out-of-bounds access in…
- Record
SUSE-SU-2024:2190-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2203-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
- CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
- CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
- CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
- CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
- CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
- CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
- CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
- CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
- CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
- CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
- CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
- CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
- CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
- CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
- CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
- CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
- CVE-2024-26632: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635).
- CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
- CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
- CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
- CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
- CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
- CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
- CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
- CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
- CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
- CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
- CVE-2024-26704: Fixed a…
- Record
SUSE-SU-2024:2203-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2973-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
- CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
- CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
- CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
- CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
- CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
- CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
- CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
- CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
- CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
- CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
- CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
- CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
- CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
- CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
- CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
- CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
- CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
- CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
- CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
- CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
- CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
- CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
- CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
- CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
- CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
- CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
- CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…
- Record
SUSE-SU-2024:2973-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02588-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
- CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38289: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (bsc#1246287).
The following non-security bugs were fixed:
- Revert 'hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).'
- Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
- Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (bsc#1244523).
- net: usb: usbnet: restore usb%d name exception for local mac addresses (bsc#1234480 bsc#1246555).
- Record
SUSE-SU-2025:02588-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02849-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
- CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
- CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
- CVE-2025-38477: net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (bsc#1247314).
- CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
- CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
- CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
The following non-security bugs were fixed:
- Revert 'hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).'
- Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
- Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
- Record
SUSE-SU-2025:02849-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02851-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
- CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
- CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
- CVE-2025-38477: net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (bsc#1247314).
- CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
- CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
- CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
The following non-security bugs were fixed:
- Revert 'hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).'
- Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
- Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
- Record
SUSE-SU-2025:02851-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02852-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
- CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
- CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38289: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (bsc#1246287).
- CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
- CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
- CVE-2025-38477: net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (bsc#1247314).
- CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
- CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
- CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
The following non-security bugs were fixed:
- Revert 'hugetlb: unshare some PMDs when splitting VMAs' (bsc#1245431).
- Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
- Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (bsc#1244523).
- net: usb: usbnet: restore usb%d name exception for local mac addresses (bsc#1234480 bsc#1246555).
- Record
SUSE-SU-2025:02852-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20008-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
- CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
- CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
- CVE-2024-35890:…
- Record
SUSE-SU-2025:20008-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20028-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
- CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…
- Record
SUSE-SU-2025:20028-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:2588-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
- CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38289: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (bsc#1246287).
The following non-security bugs were fixed:
- Revert 'hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).'
- Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
- Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (bsc#1244523).
- net: usb: usbnet: restore usb%d name exception for local mac addresses (bsc#1234480 bsc#1246555).
- Record
SUSE-SU-2025:2588-1- Updated
- 2026-11-02
OSVUSN-6868-1 No score
linux, linux-aws, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities
Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- Netfilter; (CVE-2024-26925, CVE-2024-26643)
- Record
USN-6868-1- Updated
- 2026-11-02
OSVUSN-6868-2 No score
linux-aws-5.4 vulnerabilities
Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- Netfilter; (CVE-2024-26925, CVE-2024-26643)
- Record
USN-6868-2- Updated
- 2026-11-02
OSVUSN-6869-1 No score
linux, linux-gcp, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-xilinx-zynqmp vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem:
- Netfilter; (CVE-2024-26924, CVE-2024-26643)
- Record
USN-6869-1- Updated
- 2026-11-02
OSVUSN-6870-1 No score
linux-aws, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-oracle, linux-oracle-5.15 vulnerabilities
It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem:
- Netfilter; (CVE-2024-26643, CVE-2024-26924)
- Record
USN-6870-1- Updated
- 2026-11-02
OSVUSN-6870-2 No score
linux-aws-5.15 vulnerabilities
It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem:
- Netfilter; (CVE-2024-26643, CVE-2024-26924)
- Record
USN-6870-2- Updated
- 2026-11-02
OSVUSN-6871-1 No score
linux-hwe-5.15 vulnerabilities
It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)
It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)
It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)
It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)
Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- RISC-V architecture;
- x86 architecture;
- ACPI drivers;
- Block layer subsystem;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Cryptographic API;
- DMA engine subsystem;
- EFI core;
- GPU drivers;
- InfiniBand drivers;
- IOMMU subsystem;
- Multiple devices driver;
- Media drivers;
- MMC subsystem;
- Network drivers;
- NTB driver;
- NVME drivers;
- PCI subsystem;
- MediaTek PM domains;
- Power supply drivers;
- SPI subsystem;
- Media staging drivers;
- TCM subsystem;
- USB subsystem;
- Framebuffer layer;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- Network file system client;
- NTFS3 file system;
- Diskquota system;
- SMB network file system;
- BPF subsystem;
- Netfilter;
- TLS protocol;
- io_uring subsystem;
- Bluetooth subsystem;
- Memory management;
- Ethernet bridge;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- L2TP protocol;
- MAC80211 subsystem;
- Multipath TCP;
- Netlink;
- NET/ROM layer;
- Packet sockets;
- RDS protocol;
- Sun RPC protocol;
- Unix domain sockets;
- Wireless networking;
- USB sound devices; (CVE-2024-26901, CVE-2024-35844, CVE-2024-27024, CVE-2024-26835, CVE-2024-26879, CVE-2024-26846, CVE-2024-35829, CVE-2024-26804, CVE-2024-26802, CVE-2024-27039, CVE-2024-27075, CVE-2024-27076, CVE-2024-26863, CVE-2024-27046, CVE-2024-26776, CVE-2024-26875, CVE-2024-26885, CVE-2024-26583, CVE-2024-26777, CVE-2024-26803, CVE-2024-27047, CVE-2024-26748, CVE-2024-27044, CVE-2024-27416, CVE-2024-26906, CVE-2024-27405, CVE-2024-26749, CVE-2024-27436, CVE-2024-26895, CVE-2023-52662, CVE-2024-26772, CVE-2023-52645, CVE-2024-26787, CVE-2024-26788, CVE-2023-52497, CVE-2024-26795, CVE-2024-26763, CVE-2024-27414, CVE-2024-26870, CVE-2024-27412, CVE-2024-27078, CVE-2024-27388, CVE-2024-26894, CVE-2023-52641, CVE-2024-27053, CVE-2024-26584, CVE-2024-26752, CVE-2024-35845, CVE-2024-26884, CVE-2024-26782, CVE-2024-26859, CVE-2024-26809, CVE-2024-27038, CVE-2024-26897, CVE-2024-26750, CVE-2023-52644, CVE-2024-26848, CVE-2024-26833, CVE-2024-26801, CVE-2024-26872, CVE-2023-52620, CVE-2023-52652, CVE-2024-26839, CVE-2024-26851, CVE-2024-26805, CVE-2024-26659, CVE-2024-26791, CVE-2023-52640, CVE-2024-26883, CVE-2024-26737, CVE-2024-27028, CVE-2024-26603, CVE-2024-27073, CVE-2024-26792, CVE-2024-35830, CVE-2024-26585, CVE-2024-27045, CVE-2024-26880,…
- Record
USN-6871-1- Updated
- 2026-11-02
OSVUSN-6872-1 No score
linux, linux-gcp, linux-gcp-6.5, linux-laptop, linux-nvidia-6.5, linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem:
- Netfilter; (CVE-2024-26809, CVE-2024-26643, CVE-2024-26925, CVE-2024-26924)
- Record
USN-6872-1- Updated
- 2026-11-02
OSVUSN-6872-2 No score
linux-lowlatency, linux-lowlatency-hwe-6.5 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem:
- Netfilter; (CVE-2024-26809, CVE-2024-26643, CVE-2024-26925, CVE-2024-26924)
- Record
USN-6872-2- Updated
- 2026-11-02
OSVUSN-6873-1 No score
linux-aws, linux-aws-6.5, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-starfive vulnerabilities
It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem:
- Netfilter; (CVE-2024-26643, CVE-2024-26925, CVE-2024-26924, CVE-2024-26809)
- Record
USN-6873-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bpftoolAlmaLinux:9 From an advisory covering 5 CVEs |
before 7.3.0-427.18.1.el9_4 | 7.3.0-427.18.1.el9_4 |
kernelAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64kAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-debugAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-debug-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-debug-develAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-debug-devel-matchedAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-debug-modulesAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-debug-modules-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-64k-debug-modules-extraAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-develAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-devel-matchedAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-modulesAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-modules-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-64k-modules-extraAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-abi-stablelistsAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-cross-headersAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-debugAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-debug-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-debug-develAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-debug-devel-matchedAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-debug-modulesAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-debug-modules-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-debug-modules-extraAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-debug-uki-virtAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-develAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-devel-matchedAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-docAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-headersAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-modulesAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-modules-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-modules-extraAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rtAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rt-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rt-debugAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rt-debug-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rt-debug-develAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rt-debug-modulesAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rt-debug-modules-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rt-debug-modules-extraAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rt-develAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rt-modulesAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rt-modules-coreAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-rt-modules-extraAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-toolsAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-tools-libsAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
kernel-tools-libs-develAlmaLinux:9 From an advisory covering 5 CVEs |
before 5.14.0-427.18.1.el9_4 | 5.14.0-427.18.1.el9_4 |
linux-ltsAlpaquita:23 |
6.1.82-r0 up to 6.1.89-r0 | 6.1.89-r0 |
linux-ltsAlpaquita:25 |
6.6.89-r0 up to 6.12.41-r0 | 6.12.41-r0 |
linux-ltsAlpaquita:stream |
6.6.100-r0 up to 6.12.41-r0 | 6.12.41-r0 |
bpftoolTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 7.0.0-284.30.1.el9_2.tuxcare.els4 | 7.0.0-284.30.1.el9_2.tuxcare.els4 |
kernelTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-abi-stablelistsTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-coreTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-cross-headersTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-debugTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-debug-coreTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-debug-develTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-debug-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-debug-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-debug-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-debug-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-debug-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-debug-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-debug-uki-virtTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-develTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-docTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-headersTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-ipaclones-internalTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-selftests-internalTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-toolsTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-tools-libsTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-tools-libs-develTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
kernel-uki-virtTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
perfTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
python3-perfTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
rtlaTuxCare:AlmaLinux:9.2 From an advisory covering 52 CVEs |
before 5.14.0-284.30.1.el9_2.tuxcare.els4 | 5.14.0-284.30.1.el9_2.tuxcare.els4 |
linux-buildinfo-4.4.0-260-tuxcare.els31-genericTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0-260.294 | 4.4.0-260.294 |
linux-buildinfo-4.4.0-260-tuxcare.els31-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0-260.294 | 4.4.0-260.294 |
linux-cloud-tools-4.4.0-260-tuxcare.els31TuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0-260.294 | 4.4.0-260.294 |
linux-cloud-tools-4.4.0-260-tuxcare.els31-genericTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0-260.294 | 4.4.0-260.294 |
linux-cloud-tools-4.4.0-260-tuxcare.els31-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0-260.294 | 4.4.0-260.294 |
linux-cloud-tools-commonTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0-260.294 | 4.4.0-260.294 |
linux-cloud-tools-genericTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0.260.294 | 4.4.0.260.294 |
linux-cloud-tools-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0.260.294 | 4.4.0.260.294 |
linux-crashdumpTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0.260.294 | 4.4.0.260.294 |
linux-docTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0-260.294 | 4.4.0-260.294 |
linux-genericTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0.260.294 | 4.4.0.260.294 |
linux-headers-4.4.0-260-tuxcare.els31TuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0-260.294 | 4.4.0-260.294 |
linux-headers-4.4.0-260-tuxcare.els31-genericTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0-260.294 | 4.4.0-260.294 |
linux-headers-4.4.0-260-tuxcare.els31-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0-260.294 | 4.4.0-260.294 |
linux-headers-genericTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0.260.294 | 4.4.0.260.294 |
linux-headers-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 66 CVEs |
before 4.4.0.260.294 | 4.4.0.260.294 |
KernelLinux |
before 5.4.274, 5.5.0 up to 5.10.215, 5.11.0 up to 5.15.154, 5.16.0 up to 6.1.84, 6.2.0 up to 6.6.24, 6.5.0 up to 6.7.12 | 5.4.2745.10.2155.15.1546.1.846.6.246.7.12 |
linuxDebian:12 |
before 6.1.85-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 14 moreShow less6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1 |
6.1.85-1 |
linuxDebian:13 |
before 6.7.12-1 | 6.7.12-1 |
linuxDebian:14 |
before 6.7.12-1 | 6.7.12-1 |
linux-5.10Debian:10 From an advisory covering 344 CVEs |
before 5.10.216-1~deb10u1, plus listed versions 5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1 Show 8 moreShow less5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1 |
5.10.216-1~deb10u1 |
linuxDebian:12 From an advisory covering 19 CVEs |
before 6.1.85-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 14 moreShow less6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1 |
6.1.85-1 |
linuxDebian:11 From an advisory covering 246 CVEs |
before 5.10.216-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 34 moreShow less5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2 |
5.10.216-1 |
kernelMageia:9 From an advisory covering 16 CVEs |
before 6.6.28-1.mga9 | 6.6.28-1.mga9 |
kmod-xtables-addonsMageia:9 From an advisory covering 16 CVEs |
before 3.24-57.mga9 | 3.24-57.mga9 |
kmod-virtualboxMageia:9 From an advisory covering 16 CVEs |
before 7.0.14-47.mga9 | 7.0.14-47.mga9 |
dwarvesMageia:9 From an advisory covering 16 CVEs |
before 1.26-2.mga9 | 1.26-2.mga9 |
kernel-linusMageia:9 From an advisory covering 16 CVEs |
before 6.6.28-1.mga9 | 6.6.28-1.mga9 |
kernelopenEuler:22.03-LTS-SP3 From an advisory covering 86 CVEs |
before 5.10.0-201.0.0.114.oe2203sp3 | 5.10.0-201.0.0.114.oe2203sp3 |
bpftool-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:7.3.0-427.18.1.el9_4 | 0:7.3.0-427.18.1.el9_4 |
kernel-64k-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-debug-develRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-debug-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-develRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-debug-develRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-debug-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-develRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-docRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-rt-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-rt-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-tools-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-zfcpdump-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-zfcpdump-develRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-zfcpdump-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
libperf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
perfRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
perf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
python3-perf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
rtlaRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
rvRed Hat:enterprise_linux:9::appstream From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
bpftoolRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:7.3.0-427.18.1.el9_4 | 0:7.3.0-427.18.1.el9_4 |
bpftool-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:7.3.0-427.18.1.el9_4 | 0:7.3.0-427.18.1.el9_4 |
kernelRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64kRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-debugRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-debug-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-debug-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-debug-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-debug-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-debug-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-64k-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-abi-stablelistsRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-debugRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernel-debug-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 5 CVEs |
before 0:5.14.0-427.18.1.el9_4 | 0:5.14.0-427.18.1.el9_4 |
kernelRocky Linux:8 From an advisory covering 57 CVEs |
before 0:4.18.0-553.5.1.el8_10 | 0:4.18.0-553.5.1.el8_10 |
kernel-rtRocky Linux:8 From an advisory covering 53 CVEs |
before 0:4.18.0-553.5.1.rt7.346.el8_10 | 0:4.18.0-553.5.1.rt7.346.el8_10 |
kernel-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-livepatch-SLE15-SP5-RT_Update_16SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 561 CVEs |
before 1-150500.11.3.1 | 1-150500.11.3.1 |
kernel-rtSUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-rt_debugSUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-source-rtSUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-rtopenSUSE:Leap 15.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-rt_debugopenSUSE:Leap 15.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-source-rtopenSUSE:Leap 15.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-syms-rtopenSUSE:Leap 15.5 From an advisory covering 561 CVEs |
before 5.14.21-150500.13.58.1 | 5.14.21-150500.13.58.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.1 From an advisory covering 186 CVEs |
before 5.3.18-150300.172.1 | 5.3.18-150300.172.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.1 From an advisory covering 186 CVEs |
before 5.3.18-150300.172.1 | 5.3.18-150300.172.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.2 From an advisory covering 186 CVEs |
before 5.3.18-150300.172.1 | 5.3.18-150300.172.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.2 From an advisory covering 186 CVEs |
before 5.3.18-150300.172.1 | 5.3.18-150300.172.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-source-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-syms-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-azureopenSUSE:Leap 15.5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-source-azureopenSUSE:Leap 15.5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-syms-azureopenSUSE:Leap 15.5 From an advisory covering 541 CVEs |
before 5.14.21-150500.33.57.1 | 5.14.21-150500.33.57.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 428 CVEs |
before 6.4.0-150600.8.5.4 | 6.4.0-150600.8.5.4 |
kernel-source-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 428 CVEs |
before 6.4.0-150600.8.5.4 | 6.4.0-150600.8.5.4 |
kernel-syms-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 428 CVEs |
before 6.4.0-150600.8.5.1 | 6.4.0-150600.8.5.1 |
kernel-azureopenSUSE:Leap 15.6 From an advisory covering 428 CVEs |
before 6.4.0-150600.8.5.4 | 6.4.0-150600.8.5.4 |
kernel-source-azureopenSUSE:Leap 15.6 From an advisory covering 428 CVEs |
before 6.4.0-150600.8.5.4 | 6.4.0-150600.8.5.4 |
kernel-syms-azureopenSUSE:Leap 15.6 From an advisory covering 428 CVEs |
before 6.4.0-150600.8.5.1 | 6.4.0-150600.8.5.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP2 From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-livepatch-SLE15-SP2_Update_49SUSE:Linux Enterprise Live Patching 15 SP2 From an advisory covering 130 CVEs |
before 1-150200.5.3.1 | 1-150200.5.3.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP2 From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1.150200.9.99.1 | 5.3.18-150200.24.194.1.150200.9.99.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-preemptSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1.150200.9.99.1 | 5.3.18-150200.24.194.1.150200.9.99.1 |
kernel-docsSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-preemptSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1.150200.9.99.1 | 5.3.18-150200.24.194.1.150200.9.99.1 |
kernel-docsSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-obs-buildSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-preemptSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 130 CVEs |
before 5.3.18-150200.24.194.1 | 5.3.18-150200.24.194.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 186 CVEs |
before 5.3.18-150300.59.164.1 | 5.3.18-150300.59.164.1 |
kernel-livepatch-SLE15-SP3_Update_45SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 186 CVEs |
before 1-150300.7.3.1 | 1-150300.7.3.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP3 From an advisory covering 186 CVEs |
before 5.3.18-150300.59.164.1 | 5.3.18-150300.59.164.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 186 CVEs |
before 5.3.18-150300.59.164.1 | 5.3.18-150300.59.164.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 186 CVEs |
before 5.3.18-150300.59.164.1 | 5.3.18-150300.59.164.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 186 CVEs |
before 5.3.18-150300.59.164.1.150300.18.96.1 | 5.3.18-150300.59.164.1.150300.18.96.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 186 CVEs |
before 5.3.18-150300.59.164.1 | 5.3.18-150300.59.164.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 186 CVEs |
before 5.3.18-150300.59.164.1 | 5.3.18-150300.59.164.1 |
dtb-aarch64openSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-64kbopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-debugopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-defaultopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-default-baseopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1.150500.6.31.1 | 5.14.21-150500.55.68.1.150500.6.31.1 |
kernel-docsopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-kvmsmallopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-obs-buildopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-obs-qaopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-sourceopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-symsopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
kernel-zfcpdumpopenSUSE:Leap 15.5 From an advisory covering 557 CVEs |
before 5.14.21-150500.55.68.1 | 5.14.21-150500.55.68.1 |
dtb-aarch64openSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.1 | 6.4.0-150600.23.7.1 |
kernel-64kbopenSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.3 | 6.4.0-150600.23.7.3 |
kernel-debugopenSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.3 | 6.4.0-150600.23.7.3 |
kernel-defaultopenSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.3 | 6.4.0-150600.23.7.3 |
kernel-default-baseopenSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.3.150600.12.2.7 | 6.4.0-150600.23.7.3.150600.12.2.7 |
kernel-docsopenSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.4 | 6.4.0-150600.23.7.4 |
kernel-kvmsmallopenSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.3 | 6.4.0-150600.23.7.3 |
kernel-obs-buildopenSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.3 | 6.4.0-150600.23.7.3 |
kernel-obs-qaopenSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.1 | 6.4.0-150600.23.7.1 |
kernel-sourceopenSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.2 | 6.4.0-150600.23.7.2 |
kernel-symsopenSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.1 | 6.4.0-150600.23.7.1 |
kernel-zfcpdumpopenSUSE:Leap 15.6 From an advisory covering 408 CVEs |
before 6.4.0-150600.23.7.3 | 6.4.0-150600.23.7.3 |
kernel-rtopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
kernel-rt_debugopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
kernel-source-rtopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
kernel-syms-rtopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
linux-hwe-edgeUbuntu:16.04:LTS |
All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 |
None known |
linux-aws-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 |
None known |
linux-aws-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 |
None known |
linux-aws-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1127.137~18.04.2, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2 |
5.4.0-1127.137~18.04.2 |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-azure-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 |
None known |
linux-azure-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1132.139~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1 |
5.4.0-1132.139~18.04.1 |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-gcp-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 |
None known |
linux-gcp-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1132.141~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2 |
5.4.0-1132.141~18.04.1 |
linux-gke-4.15Ubuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 |
None known |
linux-gke-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 |
None known |
linux-gkeop-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-hwe-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-187.207~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1 |
5.4.0-187.207~18.04.1 |
linux-ibm-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1074.79~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1 |
5.4.0-1074.79~18.04.1 |
linux-oemUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 |
None known |
linux-oracle-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 |
None known |
linux-oracle-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 |
None known |
linux-oracle-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1126.135~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1 |
5.4.0-1126.135~18.04.1 |
linux-raspi-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1111.123~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1 |
5.4.0-1111.123~18.04.1 |
linuxUbuntu:20.04:LTS |
before 5.4.0-187.207, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110 |
5.4.0-187.207 |
linux-awsUbuntu:20.04:LTS |
before 5.4.0-1127.137, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78 |
5.4.0-1127.137 |
linux-aws-5.15Ubuntu:20.04:LTS |
before 5.15.0-1064.70~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 34 moreShow less5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.1 |
5.15.0-1064.70~20.04.1 |
linux-azureUbuntu:20.04:LTS |
before 5.4.0-1132.139, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87 |
5.4.0-1132.139 |
linux-azure-5.15Ubuntu:20.04:LTS |
before 5.15.0-1067.76~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 37 moreShow less5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.1 |
5.15.0-1067.76~20.04.1 |
linux-bluefieldUbuntu:20.04:LTS |
before 5.4.0-1087.94, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92 |
5.4.0-1087.94 |
linux-gcpUbuntu:20.04:LTS |
before 5.4.0-1131.140, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80 |
5.4.0-1131.140 |
linux-gcp-5.15Ubuntu:20.04:LTS |
before 5.15.0-1065.73~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 35 moreShow less5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.1 |
5.15.0-1065.73~20.04.1 |
linux-gkeopUbuntu:20.04:LTS |
before 5.4.0-1094.98, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77 |
5.4.0-1094.98 |
linux-gkeop-5.15Ubuntu:20.04:LTS |
before 5.15.0-1047.54~20.04.1, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 31 moreShow less5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.1 |
5.15.0-1047.54~20.04.1 |
linux-hwe-5.15Ubuntu:20.04:LTS |
before 5.15.0-113.123~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 34 moreShow less5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.1 |
5.15.0-113.123~20.04.1 |
linux-ibmUbuntu:20.04:LTS |
before 5.4.0-1074.79, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 45 moreShow less5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71 |
5.4.0-1074.79 |
linux-ibm-5.15Ubuntu:20.04:LTS |
before 5.15.0-1057.60~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 15 moreShow less5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.1 |
5.15.0-1057.60~20.04.1 |
linux-intel-iotg-5.15Ubuntu:20.04:LTS |
before 5.15.0-1059.65~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 25 moreShow less5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.1 |
5.15.0-1059.65~20.04.1 |
linux-iotUbuntu:20.04:LTS |
before 5.4.0-1039.40, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 25 moreShow less5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.39 |
5.4.0-1039.40 |
linux-kvmUbuntu:20.04:LTS |
before 5.4.0-1115.122, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 45 moreShow less5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78 |
5.4.0-1115.122 |
linux-lowlatency-hwe-5.15Ubuntu:20.04:LTS |
before 5.15.0-113.123~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 34 moreShow less5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.1 |
5.15.0-113.123~20.04.1 |
linux-nvidia-tegra-5.15Ubuntu:20.04:LTS |
before 5.15.0-1027.27~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 7 moreShow less5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.1 |
5.15.0-1027.27~20.04.1 |
linux-oracleUbuntu:20.04:LTS |
before 5.4.0-1126.135, plus listed versions 5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7 Show 45 moreShow less5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1061.655.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1066.715.4.0-1067.725.4.0-1069.755.4.0-1070.765.4.0-1071.775.4.0-1073.795.4.0-1076.83 |
5.4.0-1126.135 |
linux-oracle-5.15Ubuntu:20.04:LTS |
before 5.15.0-1062.68~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 33 moreShow less5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.1 |
5.15.0-1062.68~20.04.1 |
linux-raspiUbuntu:20.04:LTS |
before 5.4.0-1111.123, plus listed versions 5.4.0-1007.75.4.0-1008.85.4.0-1011.115.4.0-1012.125.4.0-1013.13 Show 45 moreShow less5.4.0-1015.155.4.0-1016.175.4.0-1018.205.4.0-1019.215.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1029.325.4.0-1030.335.4.0-1032.355.4.0-1033.365.4.0-1034.375.4.0-1035.385.4.0-1036.395.4.0-1038.415.4.0-1041.455.4.0-1042.465.4.0-1043.475.4.0-1044.485.4.0-1045.495.4.0-1046.505.4.0-1047.525.4.0-1048.535.4.0-1050.565.4.0-1052.585.4.0-1053.605.4.0-1055.625.4.0-1056.635.4.0-1058.655.4.0-1059.675.4.0-1060.685.4.0-1062.705.4.0-1065.755.4.0-1066.765.4.0-1068.785.4.0-1069.795.4.0-1070.805.4.0-1071.815.4.0-1073.845.4.0-1074.855.4.0-1077.885.4.0-1078.89 |
5.4.0-1111.123 |
linux-riscv-5.15Ubuntu:20.04:LTS |
before 5.15.0-1060.64~20.04.1, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 32 moreShow less5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.1 |
5.15.0-1060.64~20.04.1 |
linux-xilinx-zynqmpUbuntu:20.04:LTS |
before 5.4.0-1046.50, plus listed versions 5.4.0-1020.245.4.0-1021.255.4.0-1022.265.4.0-1023.275.4.0-1024.28 Show 21 moreShow less5.4.0-1025.295.4.0-1026.305.4.0-1027.315.4.0-1028.325.4.0-1029.335.4.0-1030.345.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1035.395.4.0-1036.405.4.0-1037.415.4.0-1038.425.4.0-1039.435.4.0-1040.445.4.0-1041.455.4.0-1042.465.4.0-1043.475.4.0-1044.485.4.0-1045.49 |
5.4.0-1046.50 |
linux-aws-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 |
None known |
linux-aws-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1 |
None known |
linux-aws-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-26643 is a high vulnerability (CVSS 7.8) in Debian Linux, published March 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. Fixed in linux-lts 6.1.89-r0.
References
git.kernel.org/stable/c/d75a589bb92af1abf3b779cfcd1977ca11b27033
git.kernel.org/stable/c/edcf1a3f182ecf8b6b805f0ce90570ea98c5f6bf
git.kernel.org/stable/c/e2d45f467096e931044f0ab7634499879d851a5c
git.kernel.org/stable/c/291cca35818bd52a407bc37ab45a15816039e363
git.kernel.org/stable/c/406b0241d0eb598a0b330ab20ae325537d8d8163
git.kernel.org/stable/c/b2d6f9a5b1cf968f1eaa71085ceeb09c2cb276b1
Show 194 moreShow less
git.kernel.org/stable/c/5224afbc30c3ca9ba23e752f0f138729b2c48dd8
git.kernel.org/stable/c/552705a3650bbf46a22b1adedc1b04181490fc36
lists.debian.org/debian-lts-announce/2024/06/msg00017.html
cert-portal.siemens.com/productcert/html/ssa-265688.html
nvd.nist.gov/vuln/detail/CVE-2024-26643
github.com/advisories/GHSA-ph5r-c8gc-xg6f
access.redhat.com/errata/RHSA-2024:3306
bugzilla.redhat.com/2270879
bugzilla.redhat.com/2270881
bugzilla.redhat.com/2272816
bugzilla.redhat.com/2273423
errata.almalinux.org/9/ALSA-2024-3306.html
redhat.com/security/data/cve/CVE-2024-26642.html
redhat.com/security/data/cve/CVE-2024-26643.html
redhat.com/security/data/cve/CVE-2024-26673.html
redhat.com/security/data/cve/CVE-2024-26804.html
redhat.com/security/data/cve/CVE-2024-35890.html
access.redhat.com/errata/RHSA-2024:3618
access.redhat.com/security/cve/CVE-2019-25162
access.redhat.com/security/cve/CVE-2020-36777
access.redhat.com/security/cve/CVE-2021-46934
access.redhat.com/security/cve/CVE-2021-47013
access.redhat.com/security/cve/CVE-2021-47055
access.redhat.com/security/cve/CVE-2021-47118
access.redhat.com/security/cve/CVE-2021-47153
access.redhat.com/security/cve/CVE-2021-47171
access.redhat.com/security/cve/CVE-2021-47185
access.redhat.com/security/cve/CVE-2022-48627
access.redhat.com/security/cve/CVE-2022-48669
access.redhat.com/security/cve/CVE-2023-52439
access.redhat.com/security/cve/CVE-2023-52445
access.redhat.com/security/cve/CVE-2023-52477
access.redhat.com/security/cve/CVE-2023-52513
access.redhat.com/security/cve/CVE-2023-52520
access.redhat.com/security/cve/CVE-2023-52528
bugzilla.redhat.com/2250843
bugzilla.redhat.com/2257406
bugzilla.redhat.com/2263875
bugzilla.redhat.com/2265271
bugzilla.redhat.com/2265646
bugzilla.redhat.com/2265654
bugzilla.redhat.com/2265833
bugzilla.redhat.com/2266296
bugzilla.redhat.com/2266446
bugzilla.redhat.com/2266746
bugzilla.redhat.com/2266841
bugzilla.redhat.com/2267038
bugzilla.redhat.com/2267185
bugzilla.redhat.com/2267355
errata.almalinux.org/8/ALSA-2024-3618.html
redhat.com/security/data/cve/CVE-2023-54170.html
redhat.com/security/data/cve/CVE-2024-26782.html
errata.almalinux.org/8/ALSA-2024-3627.html
docs.bell-sw.com/security/cves/CVE-2024-26643
errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1719231016.html
errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1721658474.html
errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1721659158.html
errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2024-1721659604.html
errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2024-1721660263.html
github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26643.json
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
security-tracker.debian.org/tracker/CVE-2024-26643
advisories.mageia.org/MGASA-2024-0141.html
bugs.mageia.org/show_bug.cgi?id=33107
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.23
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.24
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.25
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.26
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.27
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.28
advisories.mageia.org/MGASA-2024-0142.html
bugs.mageia.org/show_bug.cgi?id=33111
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1682
nvd.nist.gov/vuln/detail/CVE-2021-47421
nvd.nist.gov/vuln/detail/CVE-2021-47455
nvd.nist.gov/vuln/detail/CVE-2022-48645
nvd.nist.gov/vuln/detail/CVE-2023-52650
nvd.nist.gov/vuln/detail/CVE-2023-52652
nvd.nist.gov/vuln/detail/CVE-2023-52653
nvd.nist.gov/vuln/detail/CVE-2023-52656
nvd.nist.gov/vuln/detail/CVE-2023-52664
nvd.nist.gov/vuln/detail/CVE-2023-52674
nvd.nist.gov/vuln/detail/CVE-2023-52683
nvd.nist.gov/vuln/detail/CVE-2023-52698
nvd.nist.gov/vuln/detail/CVE-2023-52804
nvd.nist.gov/vuln/detail/CVE-2023-52805
nvd.nist.gov/vuln/detail/CVE-2023-52809
nvd.nist.gov/vuln/detail/CVE-2023-52817
nvd.nist.gov/vuln/detail/CVE-2023-52818
nvd.nist.gov/vuln/detail/CVE-2023-52835
nvd.nist.gov/vuln/detail/CVE-2023-52840
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3306.json
cve.org/CVERecord?id=CVE-2024-26642
lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26642-3549@gregkh/T
cve.org/CVERecord?id=CVE-2024-26643
lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26643-4f9d@gregkh/T
cve.org/CVERecord?id=CVE-2024-26673
lore.kernel.org/linux-cve-announce/2024040212-CVE-2024-26673-b2d3@gregkh/T
cve.org/CVERecord?id=CVE-2024-26804
lore.kernel.org/linux-cve-announce/2024040404-CVE-2024-26804-a6ff@gregkh/T
cve.org/CVERecord?id=CVE-2024-35890
lore.kernel.org/linux-cve-announce/2024051948-CVE-2024-35890-beaa@gregkh/T
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3460.json
cve.org/CVERecord?id=CVE-2024-26735
lore.kernel.org/linux-cve-announce/2024040359-CVE-2024-26735-462f@gregkh/T
cve.org/CVERecord?id=CVE-2024-26828
lore.kernel.org/linux-cve-announce/2024041703-CVE-2024-26828-b2be@gregkh/T
cve.org/CVERecord?id=CVE-2024-26993
lore.kernel.org/linux-cve-announce/2024050144-CVE-2024-26993-fe52@gregkh/T
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3461.json
issues.redhat.com/browse/RHEL-35576
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3618.json
cve.org/CVERecord?id=CVE-2019-25162
lore.kernel.org/linux-cve-announce/2024022602-CVE-2019-25162-70ae@gregkh
cve.org/CVERecord?id=CVE-2020-36777
lore.kernel.org/linux-cve-announce/[email protected]/T
cve.org/CVERecord?id=CVE-2021-46934
lore.kernel.org/linux-cve-announce/2024022750-CVE-2021-46934-79c8@gregkh/T
cve.org/CVERecord?id=CVE-2021-47013
lore.kernel.org/linux-cve-announce/2024022831-CVE-2021-47013-034a@gregkh/T
cve.org/CVERecord?id=CVE-2021-47055
lore.kernel.org/linux-cve-announce/2024022950-CVE-2021-47055-6927@gregkh/T
cve.org/CVERecord?id=CVE-2021-47118
lore.kernel.org/linux-cve-announce/2024031509-CVE-2021-47118-faf2@gregkh/T
cve.org/CVERecord?id=CVE-2021-47153
lore.kernel.org/linux-cve-announce/2024032501-CVE-2021-47153-8c75@gregkh/T
cve.org/CVERecord?id=CVE-2021-47171
lore.kernel.org/linux-cve-announce/2024032536-CVE-2021-47171-f223@gregkh/T
cve.org/CVERecord?id=CVE-2021-47185
lore.kernel.org/linux-cve-announce/2024041033-CVE-2021-47185-c363@gregkh/T
cve.org/CVERecord?id=CVE-2022-48627
lore.kernel.org/linux-cve-announce/2024030252-CVE-2022-48627-c7bf@gregkh/T
people.redhat.com/~hkario/marvin
securitypitfalls.wordpress.com/2023/10/16/experiment-with-side-channel-attacks-yourself
bugzilla.openanolis.cn/show_bug.cgi?id=7975
patchwork.kernel.org/project/linux-raid/patch/[email protected]
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=b82a8dbd3d2f4563156f7150c6f2ecab6e960b30
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3627.json
errata.rockylinux.org/RLSA-2024:3618
errata.rockylinux.org/RLSA-2024:3627
suse.com/support/update/announcement/2024/suse-su-20242008-1
bugzilla.suse.com/1065729
bugzilla.suse.com/1141539
bugzilla.suse.com/1174585
bugzilla.suse.com/1181674
bugzilla.suse.com/1187716
bugzilla.suse.com/1190569
bugzilla.suse.com/1191949
bugzilla.suse.com/1192107
bugzilla.suse.com/1193983
bugzilla.suse.com/1194288
bugzilla.suse.com/1194869
bugzilla.suse.com/1196956
bugzilla.suse.com/1197915
bugzilla.suse.com/1200465
bugzilla.suse.com/1205205
bugzilla.suse.com/1207284
bugzilla.suse.com/1207361
bugzilla.suse.com/1207948
suse.com/security/cve/CVE-2020-36788
suse.com/security/cve/CVE-2021-39698
suse.com/security/cve/CVE-2021-4148
suse.com/security/cve/CVE-2021-42327
suse.com/security/cve/CVE-2021-43056
suse.com/security/cve/CVE-2021-43527
suse.com/security/cve/CVE-2021-47200
suse.com/security/cve/CVE-2021-47358
suse.com/security/cve/CVE-2021-47359
suse.com/security/cve/CVE-2021-47360
suse.com/security/cve/CVE-2021-47361
suse.com/security/cve/CVE-2021-47362
suse.com/security/cve/CVE-2021-47363
suse.com/security/cve/CVE-2021-47364
suse.com/security/cve/CVE-2021-47365
suse.com/security/cve/CVE-2021-47366
suse.com/security/cve/CVE-2021-47367
ubuntu.com/security/CVE-2024-26643
ubuntu.com/security/notices/USN-6868-1
ubuntu.com/security/notices/USN-6869-1
ubuntu.com/security/notices/USN-6870-1
ubuntu.com/security/notices/USN-6871-1
ubuntu.com/security/notices/USN-6872-1
ubuntu.com/security/notices/USN-6873-1
ubuntu.com/security/notices/USN-6874-1
ubuntu.com/security/notices/USN-6872-2
ubuntu.com/security/notices/USN-6873-2
ubuntu.com/security/notices/USN-6870-2
ubuntu.com/security/notices/USN-6868-2
ubuntu.com/security/notices/USN-6892-1
ubuntu.com/security/notices/USN-6896-1
ubuntu.com/security/notices/USN-6900-1
ubuntu.com/security/notices/USN-6919-1
ubuntu.com/security/notices/USN-6927-1
ubuntu.com/security/CVE-2024-2201
Left out here: 687 package rows, 489 versions, 3,451 references and the rest of 17 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 7 source records.