Every CVE Search/ Get API key

CVE-2024-26698

hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove

4.7 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove

In commit ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel"), napi_disable was getting called for all channels, including all subchannels without confirming if they are enabled or not.

This caused hv_netvsc getting hung at napi_disable, when netvsc_probe() has finished running but nvdev->subchan_work has not started yet. netvsc_subchan_work() -> rndis_set_subchannel() has not created the sub-channels and because of that netvsc_sc_open() is not running. netvsc_remove() calls cancel_work_sync(&nvdev->subchan_work), for which netvsc_subchan_work did not run.

netif_napi_add() sets the bit NAPI_STATE_SCHED because it ensures NAPI cannot be scheduled. Then netvsc_sc_open() -> napi_enable will clear the NAPIF_STATE_SCHED bit, so it can be scheduled. napi_disable() does the opposite.

Now during netvsc_device_remove(), when napi_disable is called for those subchannels, napi_disable gets stuck on infinite msleep.

This fix addresses this problem by ensuring that napi_disable() is not getting called for non-enabled NAPI struct. But netif_napi_del() is still necessary for these non-enabled NAPI struct for cleanup purpose.

Call trace: [ 654.559417] task:modprobe state:D stack: 0 pid: 2321 ppid: 1091 flags:0x00004002 [ 654.568030] Call Trace: [ 654.571221] <TASK> [ 654.573790] __schedule+0x2d6/0x960 [ 654.577733] schedule+0x69/0xf0 [ 654.581214] schedule_timeout+0x87/0x140 [ 654.585463] ? __bpf_trace_tick_stop+0x20/0x20 [ 654.590291] msleep+0x2d/0x40 [ 654.593625] napi_disable+0x2b/0x80 [ 654.597437] netvsc_device_remove+0x8a/0x1f0 [hv_netvsc] [ 654.603935] rndis_filter_device_remove+0x194/0x1c0 [hv_netvsc] [ 654.611101] ? do_wait_intr+0xb0/0xb0 [ 654.615753] netvsc_remove+0x7c/0x120 [hv_netvsc] [ 654.621675] vmbus_remove+0x27/0x40 [hv_vmbus]

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.18%Up 0.1 points since Apr 4, 2024
90%50%10%1%

What each source reports

NVD Score used 4.7

In the Linux kernel, the following vulnerability has been resolved:

hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove

In commit ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel"), napi_disable was getting called for all channels, including all subchannels without confirming if they are enabled or not.

This caused hv_netvsc getting hung at napi_disable, when netvsc_probe() has finished running but nvdev->subchan_work has not started yet. netvsc_subchan_work() -> rndis_set_subchannel() has not created the sub-channels and because of that netvsc_sc_open() is not running. netvsc_remove() calls cancel_work_sync(&nvdev->subchan_work), for which netvsc_subchan_work did not run.

netif_napi_add() sets the bit NAPI_STATE_SCHED because it ensures NAPI cannot be scheduled. Then netvsc_sc_open() -> napi_enable will clear the NAPIF_STATE_SCHED bit, so it can be scheduled. napi_disable() does the opposite.

Now during netvsc_device_remove(), when napi_disable is called for those subchannels, napi_disable gets stuck on infinite msleep.

This fix addresses this problem by ensuring that napi_disable() is not getting called for non-enabled NAPI struct. But netif_napi_del() is still necessary for these non-enabled NAPI struct for cleanup purpose.

Call trace: [ 654.559417] task:modprobe state:D stack: 0 pid: 2321 ppid: 1091 flags:0x00004002 [ 654.568030] Call Trace: [ 654.571221] <TASK> [ 654.573790] __schedule+0x2d6/0x960 [ 654.577733] schedule+0x69/0xf0 [ 654.581214] schedule_timeout+0x87/0x140 [ 654.585463] ? __bpf_trace_tick_stop+0x20/0x20 [ 654.590291] msleep+0x2d/0x40 [ 654.593625] napi_disable+0x2b/0x80 [ 654.597437] netvsc_device_remove+0x8a/0x1f0 [hv_netvsc] [ 654.603935] rndis_filter_device_remove+0x194/0x1c0 [hv_netvsc] [ 654.611101] ? do_wait_intr+0xb0/0xb0 [ 654.615753] netvsc_remove+0x7c/0x120 [hv_netvsc] [ 654.621675] vmbus_remove+0x27/0x40 [hv_vmbus]

Record
CVE-2024-26698
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-362
Updated
2026-11-02
CVE List No score

hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove

In the Linux kernel, the following vulnerability has been resolved:

hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove

In commit ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel"), napi_disable was getting called for all channels, including all subchannels without confirming if they are enabled or not.

This caused hv_netvsc getting hung at napi_disable, when netvsc_probe() has finished running but nvdev->subchan_work has not started yet. netvsc_subchan_work() -> rndis_set_subchannel() has not created the sub-channels and because of that netvsc_sc_open() is not running. netvsc_remove() calls cancel_work_sync(&nvdev->subchan_work), for which netvsc_subchan_work did not run.

netif_napi_add() sets the bit NAPI_STATE_SCHED because it ensures NAPI cannot be scheduled. Then netvsc_sc_open() -> napi_enable will clear the NAPIF_STATE_SCHED bit, so it can be scheduled. napi_disable() does the opposite.

Now during netvsc_device_remove(), when napi_disable is called for those subchannels, napi_disable gets stuck on infinite msleep.

This fix addresses this problem by ensuring that napi_disable() is not getting called for non-enabled NAPI struct. But netif_napi_del() is still necessary for these non-enabled NAPI struct for cleanup purpose.

Call trace: [ 654.559417] task:modprobe state:D stack: 0 pid: 2321 ppid: 1091 flags:0x00004002 [ 654.568030] Call Trace: [ 654.571221] <TASK> [ 654.573790] __schedule+0x2d6/0x960 [ 654.577733] schedule+0x69/0xf0 [ 654.581214] schedule_timeout+0x87/0x140 [ 654.585463] ? __bpf_trace_tick_stop+0x20/0x20 [ 654.590291] msleep+0x2d/0x40 [ 654.593625] napi_disable+0x2b/0x80 [ 654.597437] netvsc_device_remove+0x8a/0x1f0 [hv_netvsc] [ 654.603935] rndis_filter_device_remove+0x194/0x1c0 [hv_netvsc] [ 654.611101] ? do_wait_intr+0xb0/0xb0 [ 654.615753] netvsc_remove+0x7c/0x120 [hv_netvsc] [ 654.621675] vmbus_remove+0x27/0x40 [hv_vmbus]

Record
CVE-2024-26698
Updated
2026-11-02
EUVDEUVD-2024-23960 No score

In the Linux kernel, the following vulnerability has been resolved:

hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove

In commit ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel"), napi_disable was getting called for all channels, including all subchannels without confirming if they are enabled or not.

This caused hv_netvsc getting hung at napi_disable, when netvsc_probe() has finished running but nvdev->subchan_work has not started yet. netvsc_subchan_work() -> rndis_set_subchannel() has not created the sub-channels and because of that netvsc_sc_open() is not running. netvsc_remove() calls cancel_work_sync(&nvdev->subchan_work), for which netvsc_subchan_work did not run.

netif_napi_add() sets the bit NAPI_STATE_SCHED because it ensures NAPI cannot be scheduled. Then netvsc_sc_open() -> napi_enable will clear the NAPIF_STATE_SCHED bit, so it can be scheduled. napi_disable() does the opposite.

Now during netvsc_device_remove(), when napi_disable is called for those subchannels, napi_disable gets stuck on infinite msleep.

This fix addresses this problem by ensuring that napi_disable() is not getting called for non-enabled NAPI struct. But netif_napi_del() is still necessary for these non-enabled NAPI struct for cleanup purpose.

Call trace: [ 654.559417] task:modprobe state:D stack: 0 pid: 2321 ppid: 1091 flags:0x00004002 [ 654.568030] Call Trace: [ 654.571221] <TASK> [ 654.573790] __schedule+0x2d6/0x960 [ 654.577733] schedule+0x69/0xf0 [ 654.581214] schedule_timeout+0x87/0x140 [ 654.585463] ? __bpf_trace_tick_stop+0x20/0x20 [ 654.590291] msleep+0x2d/0x40 [ 654.593625] napi_disable+0x2b/0x80 [ 654.597437] netvsc_device_remove+0x8a/0x1f0 [hv_netvsc] [ 654.603935] rndis_filter_device_remove+0x194/0x1c0 [hv_netvsc] [ 654.611101] ? do_wait_intr+0xb0/0xb0 [ 654.615753] netvsc_remove+0x7c/0x120 [hv_netvsc] [ 654.621675] vmbus_remove+0x27/0x40 [hv_vmbus]

Record
EUVD-2024-23960
Updated
2026-11-02
GitHub AdvisoriesGHSA-7g56-3wmh-7x3p 4.7

In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix race...

In the Linux kernel, the following vulnerability has been resolved:

hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove

In commit ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel"), napi_disable was getting called for all channels, including all subchannels without confirming if they are enabled or not.

This caused hv_netvsc getting hung at napi_disable, when netvsc_probe() has finished running but nvdev->subchan_work has not started yet. netvsc_subchan_work() -> rndis_set_subchannel() has not created the sub-channels and because of that netvsc_sc_open() is not running. netvsc_remove() calls cancel_work_sync(&nvdev->subchan_work), for which netvsc_subchan_work did not run.

netif_napi_add() sets the bit NAPI_STATE_SCHED because it ensures NAPI cannot be scheduled. Then netvsc_sc_open() -> napi_enable will clear the NAPIF_STATE_SCHED bit, so it can be scheduled. napi_disable() does the opposite.

Now during netvsc_device_remove(), when napi_disable is called for those subchannels, napi_disable gets stuck on infinite msleep.

This fix addresses this problem by ensuring that napi_disable() is not getting called for non-enabled NAPI struct. But netif_napi_del() is still necessary for these non-enabled NAPI struct for cleanup purpose.

Call trace: [ 654.559417] task:modprobe state:D stack: 0 pid: 2321 ppid: 1091 flags:0x00004002 [ 654.568030] Call Trace: [ 654.571221] <TASK> [ 654.573790] __schedule+0x2d6/0x960 [ 654.577733] schedule+0x69/0xf0 [ 654.581214] schedule_timeout+0x87/0x140 [ 654.585463] ? __bpf_trace_tick_stop+0x20/0x20 [ 654.590291] msleep+0x2d/0x40 [ 654.593625] napi_disable+0x2b/0x80 [ 654.597437] netvsc_device_remove+0x8a/0x1f0 [hv_netvsc] [ 654.603935] rndis_filter_device_remove+0x194/0x1c0 [hv_netvsc] [ 654.611101] ? do_wait_intr+0xb0/0xb0 [ 654.615753] netvsc_remove+0x7c/0x120 [hv_netvsc] [ 654.621675] vmbus_remove+0x27/0x40 [hv_vmbus]

Record
GHSA-7g56-3wmh-7x3p
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-362
Updated
2026-11-02
OSVBELL-CVE-2024-26698 4.7
Record
BELL-CVE-2024-26698
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-26698 4.7

In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove In commit ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel"), napi_disable was getting called for all channels, including all subchannels without confirming if they are enabled or not. This caused hv_netvsc getting hung at napi_disable, when netvsc_probe() has finished running but nvdev->subchan_work has not started yet. netvsc_subchan_work() -> rndis_set_subchannel() has not created the sub-channels and because of that netvsc_sc_open() is not running. netvsc_remove() calls cancel_work_sync(&nvdev->subchan_work), for which netvsc_subchan_work did not run. netif_napi_add() sets the bit NAPI_STATE_SCHED because it ensures NAPI cannot be scheduled. Then netvsc_sc_open() -> napi_enable will clear the NAPIF_STATE_SCHED bit, so it can be scheduled. napi_disable() does the opposite. Now during netvsc_device_remove(), when napi_disable is called for those subchannels, napi_disable gets stuck on infinite msleep. This fix addresses this problem by ensuring that napi_disable() is not getting called for non-enabled NAPI struct. But netif_napi_del() is still necessary for these non-enabled NAPI struct for cleanup purpose. Call trace: [ 654.559417] task:modprobe state:D stack: 0 pid: 2321 ppid: 1091 flags:0x00004002 [ 654.568030] Call Trace: [ 654.571221] <TASK> [ 654.573790] __schedule+0x2d6/0x960 [ 654.577733] schedule+0x69/0xf0 [ 654.581214] schedule_timeout+0x87/0x140 [ 654.585463] ? __bpf_trace_tick_stop+0x20/0x20 [ 654.590291] msleep+0x2d/0x40 [ 654.593625] napi_disable+0x2b/0x80 [ 654.597437] netvsc_device_remove+0x8a/0x1f0 [hv_netvsc] [ 654.603935] rndis_filter_device_remove+0x194/0x1c0 [hv_netvsc] [ 654.611101] ? do_wait_intr+0xb0/0xb0 [ 654.615753] netvsc_remove+0x7c/0x120 [hv_netvsc] [ 654.621675] vmbus_remove+0x27/0x40 [hv_vmbus]

Record
DEBIAN-CVE-2024-26698
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 30 moreShow less
OSVOESA-2024-1520 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.(CVE-2024-25739)

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: sii902x: Fix probing race issue

A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge:

[ 53.271356] sii902x_get_edid+0x34/0x70 [sii902x] [ 53.276066] sii902x_bridge_get_edid+0x14/0x20 [sii902x] [ 53.281381] drm_bridge_get_edid+0x20/0x34 [drm] [ 53.286305] drm_bridge_connector_get_modes+0x8c/0xcc [drm_kms_helper] [ 53.292955] drm_helper_probe_single_connector_modes+0x190/0x538 [drm_kms_helper] [ 53.300510] drm_client_modeset_probe+0x1f0/0xbd4 [drm] [ 53.305958] __drm_fb_helper_initial_config_and_unlock+0x50/0x510 [drm_kms_helper] [ 53.313611] drm_fb_helper_initial_config+0x48/0x58 [drm_kms_helper] [ 53.320039] drm_fbdev_dma_client_hotplug+0x84/0xd4 [drm_dma_helper] [ 53.326401] drm_client_register+0x5c/0xa0 [drm] [ 53.331216] drm_fbdev_dma_setup+0xc8/0x13c [drm_dma_helper] [ 53.336881] tidss_probe+0x128/0x264 [tidss] [ 53.341174] platform_probe+0x68/0xc4 [ 53.344841] really_probe+0x188/0x3c4 [ 53.348501] __driver_probe_device+0x7c/0x16c [ 53.352854] driver_probe_device+0x3c/0x10c [ 53.357033] __device_attach_driver+0xbc/0x158 [ 53.361472] bus_for_each_drv+0x88/0xe8 [ 53.365303] __device_attach+0xa0/0x1b4 [ 53.369135] device_initial_probe+0x14/0x20 [ 53.373314] bus_probe_device+0xb0/0xb4 [ 53.377145] deferred_probe_work_func+0xcc/0x124 [ 53.381757] process_one_work+0x1f0/0x518 [ 53.385770] worker_thread+0x1e8/0x3dc [ 53.389519] kthread+0x11c/0x120 [ 53.392750] ret_from_fork+0x10/0x20

The issue here is as follows:

  • tidss probes, but is deferred as sii902x is still missing.
  • sii902x starts probing and enters sii902x_init().
  • sii902x calls drm_bridge_add(). Now the sii902x bridge is ready from DRM's perspective.
  • sii902x calls sii902x_audio_codec_init() and platform_device_register_data()
  • The registration of the audio platform device causes probing of the deferred devices.
  • tidss probes, which eventually causes sii902x_bridge_get_edid() to be called.
  • sii902x_bridge_get_edid() tries to use the i2c to read the edid. However, the sii902x driver has not set up the i2c part yet, leading to the crash.

Fix this by moving the drm_bridge_add() to the end of the sii902x_init(), which is also at the very end of sii902x_probe().(CVE-2024-26607)

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted value 0x0! WARNING: CPU: 19 PID: 21160 at __pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508) Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 RIP: 0010:__pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508) Code: 73 56 3a ff 90 c3 cc cc cc cc 8b 05 bb 1f 48 01 85 c0 74 05 c3 cc cc cc cc 8b 17 48 89 fe 48 c7 c7 30 20 ce 8f e8 ad 56 42 ff <0f> 0b c3 cc cc cc cc 0f 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffa8d200604cb8 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9d1ef60e0908 RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffff9d1ef60e0900 RBP: ffff9d181cd5c280 R08: 0000000000000000 R09: 00000000ffff7fff R10: ffffa8d200604b68 R11: ffffffff907dcdc8 R12: 0000000000000000 R13: ffff9d181cd5c660 R14: ffff9d1813a3f330 R15: 0000000000001000 FS: 00007fa110184640(0000) GS:ffff9d1ef60c0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 000000011f65e000 CR4: 00000000000006f0 Call Trace: <IRQ> …

Record
OESA-2024-1520
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1524 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.(CVE-2024-25739)

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: sii902x: Fix probing race issue

A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge:

[ 53.271356] sii902x_get_edid+0x34/0x70 [sii902x] [ 53.276066] sii902x_bridge_get_edid+0x14/0x20 [sii902x] [ 53.281381] drm_bridge_get_edid+0x20/0x34 [drm] [ 53.286305] drm_bridge_connector_get_modes+0x8c/0xcc [drm_kms_helper] [ 53.292955] drm_helper_probe_single_connector_modes+0x190/0x538 [drm_kms_helper] [ 53.300510] drm_client_modeset_probe+0x1f0/0xbd4 [drm] [ 53.305958] __drm_fb_helper_initial_config_and_unlock+0x50/0x510 [drm_kms_helper] [ 53.313611] drm_fb_helper_initial_config+0x48/0x58 [drm_kms_helper] [ 53.320039] drm_fbdev_dma_client_hotplug+0x84/0xd4 [drm_dma_helper] [ 53.326401] drm_client_register+0x5c/0xa0 [drm] [ 53.331216] drm_fbdev_dma_setup+0xc8/0x13c [drm_dma_helper] [ 53.336881] tidss_probe+0x128/0x264 [tidss] [ 53.341174] platform_probe+0x68/0xc4 [ 53.344841] really_probe+0x188/0x3c4 [ 53.348501] __driver_probe_device+0x7c/0x16c [ 53.352854] driver_probe_device+0x3c/0x10c [ 53.357033] __device_attach_driver+0xbc/0x158 [ 53.361472] bus_for_each_drv+0x88/0xe8 [ 53.365303] __device_attach+0xa0/0x1b4 [ 53.369135] device_initial_probe+0x14/0x20 [ 53.373314] bus_probe_device+0xb0/0xb4 [ 53.377145] deferred_probe_work_func+0xcc/0x124 [ 53.381757] process_one_work+0x1f0/0x518 [ 53.385770] worker_thread+0x1e8/0x3dc [ 53.389519] kthread+0x11c/0x120 [ 53.392750] ret_from_fork+0x10/0x20

The issue here is as follows:

  • tidss probes, but is deferred as sii902x is still missing.
  • sii902x starts probing and enters sii902x_init().
  • sii902x calls drm_bridge_add(). Now the sii902x bridge is ready from DRM's perspective.
  • sii902x calls sii902x_audio_codec_init() and platform_device_register_data()
  • The registration of the audio platform device causes probing of the deferred devices.
  • tidss probes, which eventually causes sii902x_bridge_get_edid() to be called.
  • sii902x_bridge_get_edid() tries to use the i2c to read the edid. However, the sii902x driver has not set up the i2c part yet, leading to the crash.

Fix this by moving the drm_bridge_add() to the end of the sii902x_init(), which is also at the very end of sii902x_probe().(CVE-2024-26607)

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted value 0x0! WARNING: CPU: 19 PID: 21160 at __pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508) Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 RIP: 0010:__pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508) Code: 73 56 3a ff 90 c3 cc cc cc cc 8b 05 bb 1f 48 01 85 c0 74 05 c3 cc cc cc cc 8b 17 48 89 fe 48 c7 c7 30 20 ce 8f e8 ad 56 42 ff <0f> 0b c3 cc cc cc cc 0f 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffa8d200604cb8 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9d1ef60e0908 RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffff9d1ef60e0900 RBP: ffff9d181cd5c280 R08: 0000000000000000 R09: 00000000ffff7fff R10: ffffa8d200604b68 R11: ffffffff907dcdc8 R12: 0000000000000000 R13: ffff9d181cd5c660 R14: ffff9d1813a3f330 R15: 0000000000001000 FS: 00007fa110184640(0000) GS:ffff9d1ef60c0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 000000011f65e000 CR4: 00000000000006f0 Call Trace: <IRQ> …

Record
OESA-2024-1524
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1536 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.(CVE-2024-25739)

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: sii902x: Fix probing race issue

A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge:

[ 53.271356] sii902x_get_edid+0x34/0x70 [sii902x] [ 53.276066] sii902x_bridge_get_edid+0x14/0x20 [sii902x] [ 53.281381] drm_bridge_get_edid+0x20/0x34 [drm] [ 53.286305] drm_bridge_connector_get_modes+0x8c/0xcc [drm_kms_helper] [ 53.292955] drm_helper_probe_single_connector_modes+0x190/0x538 [drm_kms_helper] [ 53.300510] drm_client_modeset_probe+0x1f0/0xbd4 [drm] [ 53.305958] __drm_fb_helper_initial_config_and_unlock+0x50/0x510 [drm_kms_helper] [ 53.313611] drm_fb_helper_initial_config+0x48/0x58 [drm_kms_helper] [ 53.320039] drm_fbdev_dma_client_hotplug+0x84/0xd4 [drm_dma_helper] [ 53.326401] drm_client_register+0x5c/0xa0 [drm] [ 53.331216] drm_fbdev_dma_setup+0xc8/0x13c [drm_dma_helper] [ 53.336881] tidss_probe+0x128/0x264 [tidss] [ 53.341174] platform_probe+0x68/0xc4 [ 53.344841] really_probe+0x188/0x3c4 [ 53.348501] __driver_probe_device+0x7c/0x16c [ 53.352854] driver_probe_device+0x3c/0x10c [ 53.357033] __device_attach_driver+0xbc/0x158 [ 53.361472] bus_for_each_drv+0x88/0xe8 [ 53.365303] __device_attach+0xa0/0x1b4 [ 53.369135] device_initial_probe+0x14/0x20 [ 53.373314] bus_probe_device+0xb0/0xb4 [ 53.377145] deferred_probe_work_func+0xcc/0x124 [ 53.381757] process_one_work+0x1f0/0x518 [ 53.385770] worker_thread+0x1e8/0x3dc [ 53.389519] kthread+0x11c/0x120 [ 53.392750] ret_from_fork+0x10/0x20

The issue here is as follows:

  • tidss probes, but is deferred as sii902x is still missing.
  • sii902x starts probing and enters sii902x_init().
  • sii902x calls drm_bridge_add(). Now the sii902x bridge is ready from DRM's perspective.
  • sii902x calls sii902x_audio_codec_init() and platform_device_register_data()
  • The registration of the audio platform device causes probing of the deferred devices.
  • tidss probes, which eventually causes sii902x_bridge_get_edid() to be called.
  • sii902x_bridge_get_edid() tries to use the i2c to read the edid. However, the sii902x driver has not set up the i2c part yet, leading to the crash.

Fix this by moving the drm_bridge_add() to the end of the sii902x_init(), which is also at the very end of sii902x_probe().(CVE-2024-26607)

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted value 0x0! WARNING: CPU: 19 PID: 21160 at __pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508) Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 RIP: 0010:__pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508) Code: 73 56 3a ff 90 c3 cc cc cc cc 8b 05 bb 1f 48 01 85 c0 74 05 c3 cc cc cc cc 8b 17 48 89 fe 48 c7 c7 30 20 ce 8f e8 ad 56 42 ff <0f> 0b c3 cc cc cc cc 0f 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 RSP: 0018:ffffa8d200604cb8 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff9d1ef60e0908 RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffff9d1ef60e0900 RBP: ffff9d181cd5c280 R08: 0000000000000000 R09: 00000000ffff7fff R10: ffffa8d200604b68 R11: ffffffff907dcdc8 R12: 0000000000000000 R13: ffff9d181cd5c660 R14: ffff9d1813a3f330 R15: 0000000000001000 FS: 00007fa110184640(0000) GS:ffff9d1ef60c0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 000000011f65e000 CR4: 00000000000006f0 Call Trace: <IRQ> …

Record
OESA-2024-1536
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1541 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

pstore/ram: Fix crash when setting number of cpus to an odd number

When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 = BASE addr of zone1 = BASE + zone_size addr of zone2 = BASE + zone_size*2 ... The address of zone1/3/5/7 will be mapped to non-alignment va. Eventually crashes will occur when accessing these va.

So, use ALIGN_DOWN() to make sure the zone size is even to avoid this bug.(CVE-2023-52619)

A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

(CVE-2024-24860)

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.(CVE-2024-25739)

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: sii902x: Fix probing race issue

A null pointer dereference crash has been observed rarely on TI platforms using sii9022 bridge:

[ 53.271356] sii902x_get_edid+0x34/0x70 [sii902x] [ 53.276066] sii902x_bridge_get_edid+0x14/0x20 [sii902x] [ 53.281381] drm_bridge_get_edid+0x20/0x34 [drm] [ 53.286305] drm_bridge_connector_get_modes+0x8c/0xcc [drm_kms_helper] [ 53.292955] drm_helper_probe_single_connector_modes+0x190/0x538 [drm_kms_helper] [ 53.300510] drm_client_modeset_probe+0x1f0/0xbd4 [drm] [ 53.305958] __drm_fb_helper_initial_config_and_unlock+0x50/0x510 [drm_kms_helper] [ 53.313611] drm_fb_helper_initial_config+0x48/0x58 [drm_kms_helper] [ 53.320039] drm_fbdev_dma_client_hotplug+0x84/0xd4 [drm_dma_helper] [ 53.326401] drm_client_register+0x5c/0xa0 [drm] [ 53.331216] drm_fbdev_dma_setup+0xc8/0x13c [drm_dma_helper] [ 53.336881] tidss_probe+0x128/0x264 [tidss] [ 53.341174] platform_probe+0x68/0xc4 [ 53.344841] really_probe+0x188/0x3c4 [ 53.348501] __driver_probe_device+0x7c/0x16c [ 53.352854] driver_probe_device+0x3c/0x10c [ 53.357033] __device_attach_driver+0xbc/0x158 [ 53.361472] bus_for_each_drv+0x88/0xe8 [ 53.365303] __device_attach+0xa0/0x1b4 [ 53.369135] device_initial_probe+0x14/0x20 [ 53.373314] bus_probe_device+0xb0/0xb4 [ 53.377145] deferred_probe_work_func+0xcc/0x124 [ 53.381757] process_one_work+0x1f0/0x518 [ 53.385770] worker_thread+0x1e8/0x3dc [ 53.389519] kthread+0x11c/0x120 [ 53.392750] ret_from_fork+0x10/0x20

The issue here is as follows:

  • tidss probes, but is deferred as sii902x is still missing.
  • sii902x starts probing and enters sii902x_init().
  • sii902x calls drm_bridge_add(). Now the sii902x bridge is ready from DRM's perspective.
  • sii902x calls sii902x_audio_codec_init() and platform_device_register_data()
  • The registration of the audio platform device causes probing of the deferred devices.
  • tidss probes, which eventually causes sii902x_bridge_get_edid() to be called.
  • sii902x_bridge_get_edid() tries to use the i2c to read the edid. However, the sii902x driver has not set up the i2c part yet, leading to the crash.

Fix this by moving the drm_bridge_add() to the end of the sii902x_init(), which is also at the very end of sii902x_probe().(CVE-2024-26607)

In the Linux kernel, the following vulnerability has been resolved:

tcp: make sure init the accept_queue's spinlocks once

When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted value 0x0! WARNING: CPU: 19 PID: 21160 at __pv_queued_spin_unlock_slowpath (kernel/locking/qspinlock_paravirt.h:508) Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 RIP:…

Record
OESA-2024-1541
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:4823 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:4823
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:4831 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2024:4831
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:5101 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:5101
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:6297 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:6297
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:6993 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:6993
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-26698 4.7

In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove In commit ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel"), napi_disable was getting called for all channels, including all subchannels without confirming if they are enabled or not. This caused hv_netvsc getting hung at napi_disable, when netvsc_probe() has finished running but nvdev->subchan_work has not started yet. netvsc_subchan_work() -> rndis_set_subchannel() has not created the sub-channels and because of that netvsc_sc_open() is not running. netvsc_remove() calls cancel_work_sync(&nvdev->subchan_work), for which netvsc_subchan_work did not run. netif_napi_add() sets the bit NAPI_STATE_SCHED because it ensures NAPI cannot be scheduled. Then netvsc_sc_open() -> napi_enable will clear the NAPIF_STATE_SCHED bit, so it can be scheduled. napi_disable() does the opposite. Now during netvsc_device_remove(), when napi_disable is called for those subchannels, napi_disable gets stuck on infinite msleep. This fix addresses this problem by ensuring that napi_disable() is not getting called for non-enabled NAPI struct. But netif_napi_del() is still necessary for these non-enabled NAPI struct for cleanup purpose. Call trace: [ 654.559417] task:modprobe state:D stack: 0 pid: 2321 ppid: 1091 flags:0x00004002 [ 654.568030] Call Trace: [ 654.571221] <TASK> [ 654.573790] __schedule+0x2d6/0x960 [ 654.577733] schedule+0x69/0xf0 [ 654.581214] schedule_timeout+0x87/0x140 [ 654.585463] ? __bpf_trace_tick_stop+0x20/0x20 [ 654.590291] msleep+0x2d/0x40 [ 654.593625] napi_disable+0x2b/0x80 [ 654.597437] netvsc_device_remove+0x8a/0x1f0 [hv_netvsc] [ 654.603935] rndis_filter_device_remove+0x194/0x1c0 [hv_netvsc] [ 654.611101] ? do_wait_intr+0xb0/0xb0 [ 654.615753] netvsc_remove+0x7c/0x120 [hv_netvsc] [ 654.621675] vmbus_remove+0x27/0x40 [hv_vmbus]

Record
UBUNTU-CVE-2024-26698
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-11
OSVALSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
  • (CVE-2023-28746)
  • (CVE-2023-52847)
  • (CVE-2021-47548)
  • (CVE-2024-36921)
  • (CVE-2024-26921)
  • (CVE-2021-47579)
  • (CVE-2024-36927)
  • (CVE-2024-39276)
  • (CVE-2024-33621)
  • (CVE-2024-27010)
  • (CVE-2024-26960)
  • (CVE-2024-38596)
  • (CVE-2022-48743)
  • (CVE-2024-26733)
  • (CVE-2024-26586)
  • (CVE-2024-26698)
  • (CVE-2023-52619)

Bug Fix(es):

  • AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
  • [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
  • [almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
  • lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
  • [Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
  • Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
  • blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
  • (JIRA:AlmaLinux-31798)
  • (JIRA:AlmaLinux-10263)
  • (JIRA:AlmaLinux-40901)
  • (JIRA:AlmaLinux-43547)
  • (JIRA:AlmaLinux-34876)

Enhancement(s):

  • [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:AlmaLinux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
ALSA-2024:5101
Updated
2026-11-02
OSVCLSA-2024-1725872696 No score

kernel: Fix of 43 CVEs

  • netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
  • x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
  • bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
  • selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
  • pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
  • pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
  • net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
  • wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
  • ata: libata-core: Fix double free on error {CVE-2024-41087}
  • drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
  • drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
  • net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
  • drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
  • net/sched: flower: Fix chain template offload {CVE-2024-26669}
  • ipv6: Remove extra counter pull before gc {CVE-2023-52340}
  • ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
  • net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
  • net: add a route cache full diagnostic message {CVE-2023-52340}
  • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • tcp_metrics: validate source addr length {CVE-2024-42154}
  • net: fix out-of-bounds access in ops_init {CVE-2024-36883}
  • tap: add missing verification for short frame {CVE-2024-41090}
  • tun: add missing verification for short frame {CVE-2024-41091}
  • iommu: Fix potential use-after-free during probe {CVE-2022-48796}
  • nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
  • nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
  • nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
  • ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
  • ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
  • ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
  • hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
  • ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
  • scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
  • arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
  • SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
  • ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
  • pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
  • net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
  • tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
  • tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
  • drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
  • gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
  • gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
  • gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
  • gfs2: Wake up when sd_glock_disposal becomes zero {CVE-2024-38570}
  • gfs2: Remove ill-placed consistency check {CVE-2024-38570}
  • gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
  • gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
  • gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
  • gfs2: Don't call dlm after protocol is unmounted {CVE-2024-38570}
  • gfs2: Don't skip dlm unlock if glock has an lvb {CVE-2024-38570}
  • netfilter: nf_tables: release mutex after nft_gc_seq_end…
Record
CLSA-2024-1725872696
Updated
2026-11-02
OSVCLSA-2024-1725876080 No score

kernel: Fix of 45 CVEs

  • dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956}
  • userfaultfd: fix a race between writeprotect and exit_mmap() {CVE-2021-47461}
  • netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
  • x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
  • bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
  • selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
  • pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
  • pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
  • net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
  • wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
  • ata: libata-core: Fix double free on error {CVE-2024-41087}
  • drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
  • drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
  • net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
  • drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
  • net/sched: flower: Fix chain template offload {CVE-2024-26669}
  • ipv6: Remove extra counter pull before gc {CVE-2023-52340}
  • ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
  • net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
  • net: add a route cache full diagnostic message {CVE-2023-52340}
  • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • tcp_metrics: validate source addr length {CVE-2024-42154}
  • net: fix out-of-bounds access in ops_init {CVE-2024-36883}
  • tap: add missing verification for short frame {CVE-2024-41090}
  • tun: add missing verification for short frame {CVE-2024-41091}
  • iommu: Fix potential use-after-free during probe {CVE-2022-48796}
  • nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
  • nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
  • nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
  • ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
  • ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
  • ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
  • hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
  • ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
  • scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
  • arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
  • SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
  • ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
  • pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
  • net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
  • tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
  • tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
  • drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
  • gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
  • gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
  • gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
  • gfs2: Remove ill-placed consistency check {CVE-2024-38570}
  • gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
  • gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
  • gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
  • netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925} -…
Record
CLSA-2024-1725876080
Updated
2026-11-02
OSVCLSA-2026-1783791447 No score

kernel: Fix of 307 CVEs

  • gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660}
  • ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008}
  • KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975}
  • Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027}
  • xhci: Fix null pointer dereference when host dies {CVE-2023-52898}
  • sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638}
  • blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671}
  • net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977}
  • gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975}
  • HID: betop: check shape of output reports {CVE-2023-53015}
  • mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932}
  • HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937}
  • drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002}
  • ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013}
  • RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026}
  • Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018}
  • scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760}
  • sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331}
  • pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038}
  • cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194}
  • ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160}
  • nbd: don't allow reconnect after disconnect {CVE-2025-21731}
  • openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
  • ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
  • ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820}
  • net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
  • wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321}
  • ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
  • ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121}
  • i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041}
  • net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000}
  • bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994}
  • xsk: check IFF_UP earlier in Tx path {CVE-2023-53240}
  • firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
  • virtgpu: don't reset on shutdown {CVE-2025-38064}
  • xen/netfront: fix crash when removing device {CVE-2022-48969}
  • mptcp: do not fallback when OoO is present {CVE-2024-50185}
  • can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925}
  • netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160}
  • xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053}
  • ext4: fix racy may inline data check in dio write {CVE-2023-52786}
  • drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738}
  • macsec: fix UAF bug for real_dev {CVE-2022-49390}
  • drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259}
  • mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241}
  • driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715}
  • udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712}
  • ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657}
  • mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611}
  • eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
  • net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302}
  • udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544}
  • RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224}
  • dlm: fix possible lkb_resource…
Record
CLSA-2026-1783791447
Updated
2026-11-02
OSV No score

hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove

In the Linux kernel, the following vulnerability has been resolved:

hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove

In commit ac5047671758 ("hv_netvsc: Disable NAPI before closing the VMBus channel"), napi_disable was getting called for all channels, including all subchannels without confirming if they are enabled or not.

This caused hv_netvsc getting hung at napi_disable, when netvsc_probe() has finished running but nvdev->subchan_work has not started yet. netvsc_subchan_work() -> rndis_set_subchannel() has not created the sub-channels and because of that netvsc_sc_open() is not running. netvsc_remove() calls cancel_work_sync(&nvdev->subchan_work), for which netvsc_subchan_work did not run.

netif_napi_add() sets the bit NAPI_STATE_SCHED because it ensures NAPI cannot be scheduled. Then netvsc_sc_open() -> napi_enable will clear the NAPIF_STATE_SCHED bit, so it can be scheduled. napi_disable() does the opposite.

Now during netvsc_device_remove(), when napi_disable is called for those subchannels, napi_disable gets stuck on infinite msleep.

This fix addresses this problem by ensuring that napi_disable() is not getting called for non-enabled NAPI struct. But netif_napi_del() is still necessary for these non-enabled NAPI struct for cleanup purpose.

Call trace: [ 654.559417] task:modprobe state:D stack: 0 pid: 2321 ppid: 1091 flags:0x00004002 [ 654.568030] Call Trace: [ 654.571221] <TASK> [ 654.573790] __schedule+0x2d6/0x960 [ 654.577733] schedule+0x69/0xf0 [ 654.581214] schedule_timeout+0x87/0x140 [ 654.585463] ? __bpf_trace_tick_stop+0x20/0x20 [ 654.590291] msleep+0x2d/0x40 [ 654.593625] napi_disable+0x2b/0x80 [ 654.597437] netvsc_device_remove+0x8a/0x1f0 [hv_netvsc] [ 654.603935] rndis_filter_device_remove+0x194/0x1c0 [hv_netvsc] [ 654.611101] ? do_wait_intr+0xb0/0xb0 [ 654.615753] netvsc_remove+0x7c/0x120 [hv_netvsc] [ 654.621675] vmbus_remove+0x27/0x40 [hv_vmbus]

Record
CVE-2024-26698
Updated
2026-11-02
OSVRLSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)

  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)

  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)

  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)

  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)

  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)

  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)

  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)

  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)

  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)

  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)

  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)

  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)

  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)

  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)

  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)

  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)

  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)

  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)

  • (CVE-2023-28746)

  • (CVE-2023-52847)

  • (CVE-2021-47548)

  • (CVE-2024-36921)

  • (CVE-2024-26921)

  • (CVE-2021-47579)

  • (CVE-2024-36927)

  • (CVE-2024-39276)

  • (CVE-2024-33621)

  • (CVE-2024-27010)

  • (CVE-2024-26960)

  • (CVE-2024-38596)

  • (CVE-2022-48743)

  • (CVE-2024-26733)

  • (CVE-2024-26586)

  • (CVE-2024-26698)

  • (CVE-2023-52619)

Bug Fix(es):

  • Rocky Linux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux-17678)

  • [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux-23841)

  • [rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux-32941)

  • lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux-33437)

  • [Hyper-V][Rocky Linux-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux-39074)

  • Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux-40167)

  • blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux-40939)

  • (JIRA:Rocky Linux-31798)

  • (JIRA:Rocky Linux-10263)

  • (JIRA:Rocky Linux-40901)

  • (JIRA:Rocky Linux-43547)

  • (JIRA:Rocky Linux-34876)

Enhancement(s):

  • [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
RLSA-2024:5101
Updated
2026-11-02
OSVRXSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)

  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)

  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)

  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)

  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)

  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)

  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)

  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)

  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)

  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)

  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)

  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)

  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)

  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)

  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)

  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)

  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)

  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)

  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)

  • (CVE-2023-28746)

  • (CVE-2023-52847)

  • (CVE-2021-47548)

  • (CVE-2024-36921)

  • (CVE-2024-26921)

  • (CVE-2021-47579)

  • (CVE-2024-36927)

  • (CVE-2024-39276)

  • (CVE-2024-33621)

  • (CVE-2024-27010)

  • (CVE-2024-26960)

  • (CVE-2024-38596)

  • (CVE-2022-48743)

  • (CVE-2024-26733)

  • (CVE-2024-26586)

  • (CVE-2024-26698)

  • (CVE-2023-52619)

Bug Fix(es):

  • Rocky Linux SIG Cloud8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux SIG Cloud-17678)

  • [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux SIG Cloud-23841)

  • [rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux SIG Cloud-32941)

  • lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux SIG Cloud-33437)

  • [Hyper-V][Rocky Linux SIG Cloud-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux SIG Cloud-39074)

  • Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux SIG Cloud-40167)

  • blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-40939)

  • (JIRA:Rocky Linux SIG Cloud-31798)

  • (JIRA:Rocky Linux SIG Cloud-10263)

  • (JIRA:Rocky Linux SIG Cloud-40901)

  • (JIRA:Rocky Linux SIG Cloud-43547)

  • (JIRA:Rocky Linux SIG Cloud-34876)

Enhancement(s):

  • [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux SIG Cloud-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
RXSA-2024:5101
Updated
2026-11-02
OSVSUSE-SU-2024:2008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
  • CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
  • CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
  • CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
  • CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
  • CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
  • CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
  • CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
  • CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
  • CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
  • CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
  • CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
  • CVE-2024-27417: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721)
  • CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
  • CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
  • CVE-2024-35791: Flush pages under…
Record
SUSE-SU-2024:2008-1
Updated
2026-11-02
OSVSUSE-SU-2024:2019-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
  • CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
  • CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
  • CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-35869: Guarantee refcounted children from parent session (bsc#1224679).
  • CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2024-35964: Fixed not validating setsockopt user input (bsc#1224581).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
  • CVE-2024-35860: struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
  • CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
  • CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
  • CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
  • CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios (bsc#1224530).
  • CVE-2024-35852: Fixed memory leak when canceling rehash work (bsc#1224502).
  • CVE-2024-36006: Fixed incorrect list API usage (bsc#1224541).
  • CVE-2024-36007: Fixed warning during rehash (bsc#1224543).
  • CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
  • CVE-2024-35907: Call request_irq() after NAPI initialized (bsc#1224492).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure…
Record
SUSE-SU-2024:2019-1
Updated
2026-11-02
OSVSUSE-SU-2024:2190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
  • CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
  • CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26700: Fixed drm/amd/display: Fix MST Null Ptr for RV (bsc#1222870)
  • CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
  • CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
  • CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
  • CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)
  • CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)
  • CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)
  • CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
  • CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
  • CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).
  • CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
  • CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
  • CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
  • CVE-2024-27042: Fixed potential out-of-bounds access in…
Record
SUSE-SU-2024:2190-1
Updated
2026-11-02
OSVUSN-6766-1 No score

linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-23849)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Core kernel;
  • Block layer subsystem;
  • Android drivers;
  • Power management core;
  • Bus devices;
  • Hardware random number generator core;
  • Cryptographic API;
  • Device frequency;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Media drivers;
  • Network drivers;
  • PCI driver for MicroSemi Switchtec;
  • PHY drivers;
  • SCSI drivers;
  • DesignWare USB3 driver;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • NTFS3 file system;
  • Pstore file system;
  • SMB network file system;
  • Memory management;
  • CAN network layer;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • Unix domain sockets;
  • Realtek audio codecs; (CVE-2023-52594, CVE-2023-52601, CVE-2024-26826, CVE-2023-52622, CVE-2024-26665, CVE-2023-52493, CVE-2023-52633, CVE-2024-26684, CVE-2024-26663, CVE-2023-52618, CVE-2023-52588, CVE-2023-52637, CVE-2024-26825, CVE-2023-52606, CVE-2024-26594, CVE-2024-26625, CVE-2024-26720, CVE-2024-26614, CVE-2023-52627, CVE-2023-52602, CVE-2024-26673, CVE-2024-26685, CVE-2023-52638, CVE-2023-52498, CVE-2023-52619, CVE-2024-26910, CVE-2024-26689, CVE-2023-52583, CVE-2024-26676, CVE-2024-26671, CVE-2024-26704, CVE-2024-26608, CVE-2024-26610, CVE-2024-26592, CVE-2023-52599, CVE-2023-52595, CVE-2024-26660, CVE-2023-52617, CVE-2024-26645, CVE-2023-52486, CVE-2023-52631, CVE-2023-52607, CVE-2023-52608, CVE-2024-26722, CVE-2024-26615, CVE-2023-52615, CVE-2024-26636, CVE-2023-52642, CVE-2023-52587, CVE-2024-26712, CVE-2024-26675, CVE-2023-52614, CVE-2024-26606, CVE-2024-26916, CVE-2024-26600, CVE-2024-26679, CVE-2024-26829, CVE-2024-26641, CVE-2023-52623, CVE-2024-26627, CVE-2024-26696, CVE-2024-26640, CVE-2024-26635, CVE-2023-52491, CVE-2024-26664, CVE-2024-26602, CVE-2023-52604, CVE-2024-26717, CVE-2023-52643, CVE-2024-26593, CVE-2023-52598, CVE-2024-26668, CVE-2023-52435, CVE-2023-52597, CVE-2024-26715, CVE-2024-26707, CVE-2023-52635, CVE-2024-26695, CVE-2024-26698, CVE-2023-52494, CVE-2024-26920, CVE-2024-26808, CVE-2023-52616, CVE-2023-52492, CVE-2024-26702, CVE-2024-26644, CVE-2023-52489, CVE-2024-26697)
Record
USN-6766-1
Updated
2026-11-02
OSVUSN-6766-2 No score

linux-hwe-5.15, linux-raspi vulnerabilities

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-23849)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Core kernel;
  • Block layer subsystem;
  • Android drivers;
  • Power management core;
  • Bus devices;
  • Hardware random number generator core;
  • Cryptographic API;
  • Device frequency;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Media drivers;
  • Network drivers;
  • PCI driver for MicroSemi Switchtec;
  • PHY drivers;
  • SCSI drivers;
  • DesignWare USB3 driver;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • NTFS3 file system;
  • Pstore file system;
  • SMB network file system;
  • Memory management;
  • CAN network layer;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • Unix domain sockets;
  • Realtek audio codecs; (CVE-2023-52594, CVE-2023-52601, CVE-2024-26826, CVE-2023-52622, CVE-2024-26665, CVE-2023-52493, CVE-2023-52633, CVE-2024-26684, CVE-2024-26663, CVE-2023-52618, CVE-2023-52588, CVE-2023-52637, CVE-2024-26825, CVE-2023-52606, CVE-2024-26594, CVE-2024-26625, CVE-2024-26720, CVE-2024-26614, CVE-2023-52627, CVE-2023-52602, CVE-2024-26673, CVE-2024-26685, CVE-2023-52638, CVE-2023-52498, CVE-2023-52619, CVE-2024-26910, CVE-2024-26689, CVE-2023-52583, CVE-2024-26676, CVE-2024-26671, CVE-2024-26704, CVE-2024-26608, CVE-2024-26610, CVE-2024-26592, CVE-2023-52599, CVE-2023-52595, CVE-2024-26660, CVE-2023-52617, CVE-2024-26645, CVE-2023-52486, CVE-2023-52631, CVE-2023-52607, CVE-2023-52608, CVE-2024-26722, CVE-2024-26615, CVE-2023-52615, CVE-2024-26636, CVE-2023-52642, CVE-2023-52587, CVE-2024-26712, CVE-2024-26675, CVE-2023-52614, CVE-2024-26606, CVE-2024-26916, CVE-2024-26600, CVE-2024-26679, CVE-2024-26829, CVE-2024-26641, CVE-2023-52623, CVE-2024-26627, CVE-2024-26696, CVE-2024-26640, CVE-2024-26635, CVE-2023-52491, CVE-2024-26664, CVE-2024-26602, CVE-2023-52604, CVE-2024-26717, CVE-2023-52643, CVE-2024-26593, CVE-2023-52598, CVE-2024-26668, CVE-2023-52435, CVE-2023-52597, CVE-2024-26715, CVE-2024-26707, CVE-2023-52635, CVE-2024-26695, CVE-2024-26698, CVE-2023-52494, CVE-2024-26920, CVE-2024-26808, CVE-2023-52616, CVE-2023-52492, CVE-2024-26702, CVE-2024-26644, CVE-2023-52489, CVE-2024-26697)
Record
USN-6766-2
Updated
2026-11-02
OSVUSN-6766-3 No score

linux-aws, linux-aws-5.15 vulnerabilities

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-23849)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Core kernel;
  • Block layer subsystem;
  • Android drivers;
  • Power management core;
  • Bus devices;
  • Hardware random number generator core;
  • Cryptographic API;
  • Device frequency;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Media drivers;
  • Network drivers;
  • PCI driver for MicroSemi Switchtec;
  • PHY drivers;
  • SCSI drivers;
  • DesignWare USB3 driver;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • NTFS3 file system;
  • Pstore file system;
  • SMB network file system;
  • Memory management;
  • CAN network layer;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • Unix domain sockets;
  • Realtek audio codecs; (CVE-2023-52594, CVE-2023-52601, CVE-2024-26826, CVE-2023-52622, CVE-2024-26665, CVE-2023-52493, CVE-2023-52633, CVE-2024-26684, CVE-2024-26663, CVE-2023-52618, CVE-2023-52588, CVE-2023-52637, CVE-2024-26825, CVE-2023-52606, CVE-2024-26594, CVE-2024-26625, CVE-2024-26720, CVE-2024-26614, CVE-2023-52627, CVE-2023-52602, CVE-2024-26673, CVE-2024-26685, CVE-2023-52638, CVE-2023-52498, CVE-2023-52619, CVE-2024-26910, CVE-2024-26689, CVE-2023-52583, CVE-2024-26676, CVE-2024-26671, CVE-2024-26704, CVE-2024-26608, CVE-2024-26610, CVE-2024-26592, CVE-2023-52599, CVE-2023-52595, CVE-2024-26660, CVE-2023-52617, CVE-2024-26645, CVE-2023-52486, CVE-2023-52631, CVE-2023-52607, CVE-2023-52608, CVE-2024-26722, CVE-2024-26615, CVE-2023-52615, CVE-2024-26636, CVE-2023-52642, CVE-2023-52587, CVE-2024-26712, CVE-2024-26675, CVE-2023-52614, CVE-2024-26606, CVE-2024-26916, CVE-2024-26600, CVE-2024-26679, CVE-2024-26829, CVE-2024-26641, CVE-2023-52623, CVE-2024-26627, CVE-2024-26696, CVE-2024-26640, CVE-2024-26635, CVE-2023-52491, CVE-2024-26664, CVE-2024-26602, CVE-2023-52604, CVE-2024-26717, CVE-2023-52643, CVE-2024-26593, CVE-2023-52598, CVE-2024-26668, CVE-2023-52435, CVE-2023-52597, CVE-2024-26715, CVE-2024-26707, CVE-2023-52635, CVE-2024-26695, CVE-2024-26698, CVE-2023-52494, CVE-2024-26920, CVE-2024-26808, CVE-2023-52616, CVE-2023-52492, CVE-2024-26702, CVE-2024-26644, CVE-2023-52489, CVE-2024-26697)
Record
USN-6766-3
Updated
2026-11-02
OSVUSN-6795-1 No score

linux-intel-iotg vulnerabilities

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-23849)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Core kernel;
  • Block layer subsystem;
  • Android drivers;
  • Power management core;
  • Bus devices;
  • Hardware random number generator core;
  • Cryptographic API;
  • Device frequency;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • Media drivers;
  • Network drivers;
  • PCI driver for MicroSemi Switchtec;
  • PHY drivers;
  • SCSI drivers;
  • DesignWare USB3 driver;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • NTFS3 file system;
  • Pstore file system;
  • SMB network file system;
  • Memory management;
  • CAN network layer;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • Unix domain sockets;
  • Tomoyo security module;
  • Realtek audio codecs; (CVE-2023-52616, CVE-2024-26679, CVE-2024-26608, CVE-2023-52594, CVE-2024-26622, CVE-2023-52643, CVE-2024-26594, CVE-2023-52598, CVE-2023-52627, CVE-2023-52491, CVE-2024-26592, CVE-2024-26717, CVE-2023-52638, CVE-2024-26704, CVE-2023-52637, CVE-2024-26645, CVE-2023-52602, CVE-2024-26722, CVE-2024-26671, CVE-2023-52599, CVE-2024-26720, CVE-2023-52631, CVE-2023-52486, CVE-2024-26640, CVE-2023-52606, CVE-2023-52633, CVE-2024-26593, CVE-2024-26664, CVE-2023-52618, CVE-2024-26625, CVE-2023-52604, CVE-2024-26695, CVE-2024-26644, CVE-2024-26826, CVE-2024-26600, CVE-2024-26808, CVE-2023-52619, CVE-2023-52597, CVE-2024-26602, CVE-2024-26635, CVE-2023-52623, CVE-2024-26665, CVE-2024-26916, CVE-2024-26689, CVE-2023-52635, CVE-2024-26712, CVE-2023-52614, CVE-2024-26606, CVE-2024-26610, CVE-2024-26675, CVE-2023-52617, CVE-2024-26697, CVE-2023-52595, CVE-2023-52494, CVE-2024-26641, CVE-2024-26698, CVE-2024-26707, CVE-2024-26673, CVE-2023-52493, CVE-2024-26676, CVE-2024-26910, CVE-2023-52601, CVE-2024-26660, CVE-2023-52608, CVE-2024-26615, CVE-2023-52587, CVE-2024-26825, CVE-2023-52498, CVE-2023-52492, CVE-2024-26668, CVE-2024-26715, CVE-2024-26685, CVE-2024-26702, CVE-2024-26663, CVE-2024-26636, CVE-2024-26627, CVE-2024-26696, CVE-2023-52583, CVE-2023-52642, CVE-2023-52489, CVE-2024-26614, CVE-2024-26829, CVE-2024-26684, CVE-2023-52615, CVE-2023-52435, CVE-2023-52530, CVE-2023-52607, CVE-2024-26920, CVE-2023-52622, CVE-2023-52588)
Record
USN-6795-1
Updated
2026-11-02
OSVUSN-6828-1 No score

linux-intel-iotg-5.15 vulnerabilities

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-23849)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Core kernel;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Android drivers;
  • Power management core;
  • Bus devices;
  • Hardware random number generator core;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • PCI driver for MicroSemi Switchtec;
  • PHY drivers;
  • MediaTek PM domains;
  • Power supply drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Media staging drivers;
  • TCM subsystem;
  • USB subsystem;
  • DesignWare USB3 driver;
  • Framebuffer layer;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Memory management;
  • Netfilter;
  • TLS protocol;
  • io_uring subsystem;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • L2TP protocol;
  • Logical Link…
Record
USN-6828-1
Updated
2026-11-02
OSVUSN-6895-1 No score

linux, linux-gcp, linux-nvidia-6.5, linux-raspi vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Cryptographic API;
  • Android drivers;
  • Block layer subsystem;
  • Bluetooth drivers;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • On-Chip Interconnect management framework;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • PHY drivers;
  • MediaTek PM domains;
  • SCSI drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • Framebuffer layer;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • File systems infrastructure;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • CAN network layer;
  • Devlink API;
  • Handshake API;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • RxRPC session sockets;
  • TIPC protocol;
  • Unix domain sockets;
  • Realtek audio codecs; (CVE-2024-26822, CVE-2024-26917, CVE-2024-26723, CVE-2024-26715, CVE-2024-26718, CVE-2024-26664, CVE-2024-26707, CVE-2024-26697, CVE-2024-26720, CVE-2024-26660, CVE-2024-26677, CVE-2024-26736, CVE-2024-26719, CVE-2024-26642, CVE-2024-26700, CVE-2024-26666, CVE-2024-26684, CVE-2024-26803, CVE-2024-26698, CVE-2024-26711, CVE-2024-26922, CVE-2024-26828, CVE-2024-26910, CVE-2024-26829, CVE-2024-26685, CVE-2024-26920, CVE-2024-26696, CVE-2024-26826, CVE-2023-52642, CVE-2024-26703, CVE-2024-26708, CVE-2024-26838, CVE-2024-26716, CVE-2023-52631, CVE-2024-26782, CVE-2024-26593, CVE-2024-26659, CVE-2024-26825, CVE-2024-26824, CVE-2024-26712, CVE-2024-26674, CVE-2024-26722, CVE-2023-52643, CVE-2024-26714, CVE-2024-26691, CVE-2024-27416, CVE-2024-26830, CVE-2023-52880, CVE-2024-26702, CVE-2023-52645, CVE-2024-26820, CVE-2024-26662, CVE-2024-26689, CVE-2024-26676, CVE-2024-26923, CVE-2024-26603, CVE-2024-26818, CVE-2023-52638, CVE-2024-26733, CVE-2024-26601, CVE-2024-26790, CVE-2024-26661, CVE-2024-26600, CVE-2024-26680, CVE-2024-26748, CVE-2024-26792, CVE-2024-26889, CVE-2024-26681, CVE-2024-26688, CVE-2024-26665, CVE-2024-26602, CVE-2024-26734, CVE-2024-35833, CVE-2024-26919, CVE-2024-26916, CVE-2024-26667, CVE-2024-26606, CVE-2024-26693, CVE-2024-26717, CVE-2023-52637, CVE-2024-26831, CVE-2024-26663, CVE-2024-26694,…
Record
USN-6895-1
Updated
2026-11-02
OSVUSN-6895-2 No score

linux-azure-6.5, linux-gcp-6.5 vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Cryptographic API;
  • Android drivers;
  • Block layer subsystem;
  • Bluetooth drivers;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • On-Chip Interconnect management framework;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • PHY drivers;
  • MediaTek PM domains;
  • SCSI drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • Framebuffer layer;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • File systems infrastructure;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • CAN network layer;
  • Devlink API;
  • Handshake API;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • RxRPC session sockets;
  • TIPC protocol;
  • Unix domain sockets;
  • Realtek audio codecs; (CVE-2024-26684, CVE-2024-26889, CVE-2024-26662, CVE-2024-26660, CVE-2024-26708, CVE-2024-26677, CVE-2024-26696, CVE-2024-26664, CVE-2024-26642, CVE-2023-52637, CVE-2024-26680, CVE-2024-26822, CVE-2023-52638, CVE-2024-26830, CVE-2024-26715, CVE-2024-26693, CVE-2024-26697, CVE-2024-26694, CVE-2024-26685, CVE-2023-52642, CVE-2024-26691, CVE-2024-26798, CVE-2024-26828, CVE-2024-26663, CVE-2024-26710, CVE-2024-26601, CVE-2024-26707, CVE-2024-26802, CVE-2024-26675, CVE-2024-26826, CVE-2024-26916, CVE-2024-26803, CVE-2024-26700, CVE-2024-26917, CVE-2024-26600, CVE-2024-26825, CVE-2024-26716, CVE-2024-26602, CVE-2024-26698, CVE-2024-26711, CVE-2024-26920, CVE-2024-26722, CVE-2024-26681, CVE-2024-26674, CVE-2024-26712, CVE-2024-26735, CVE-2024-26782, CVE-2024-26734, CVE-2024-26926, CVE-2024-26923, CVE-2023-52880, CVE-2024-26719, CVE-2024-26593, CVE-2024-26603, CVE-2024-26922, CVE-2024-26717, CVE-2024-26695, CVE-2023-52643, CVE-2024-35833, CVE-2024-26733, CVE-2024-26667, CVE-2024-26659, CVE-2024-26714, CVE-2024-26748, CVE-2024-26702, CVE-2024-26676, CVE-2024-26718, CVE-2024-27416, CVE-2024-26890, CVE-2024-26720, CVE-2024-26838, CVE-2024-26665, CVE-2024-26792, CVE-2024-26818, CVE-2024-26679, CVE-2024-26606, CVE-2024-26736, CVE-2024-26829, CVE-2023-52631, CVE-2024-26790, CVE-2024-26824, CVE-2024-26820, CVE-2024-26831,…
Record
USN-6895-2
Updated
2026-11-02
OSVUSN-6895-3 No score

linux-aws-6.5, linux-lowlatency-hwe-6.5, linux-oracle-6.5, linux-starfive-6.5 vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Cryptographic API;
  • Android drivers;
  • Block layer subsystem;
  • Bluetooth drivers;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • On-Chip Interconnect management framework;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • PHY drivers;
  • MediaTek PM domains;
  • SCSI drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • Framebuffer layer;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • File systems infrastructure;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • CAN network layer;
  • Devlink API;
  • Handshake API;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • RxRPC session sockets;
  • TIPC protocol;
  • Unix domain sockets;
  • Realtek audio codecs; (CVE-2024-26922, CVE-2024-26691, CVE-2024-26698, CVE-2024-26696, CVE-2024-26688, CVE-2024-26734, CVE-2024-26660, CVE-2024-26736, CVE-2024-26600, CVE-2024-26826, CVE-2024-26890, CVE-2023-52643, CVE-2024-26917, CVE-2024-26676, CVE-2024-26916, CVE-2024-26919, CVE-2024-26662, CVE-2024-26714, CVE-2023-52880, CVE-2024-26679, CVE-2024-26711, CVE-2024-26707, CVE-2024-26735, CVE-2023-52631, CVE-2024-26694, CVE-2023-52637, CVE-2024-26830, CVE-2024-26675, CVE-2024-26715, CVE-2024-26642, CVE-2024-26659, CVE-2024-26838, CVE-2024-26926, CVE-2024-26684, CVE-2024-26716, CVE-2024-26825, CVE-2024-26664, CVE-2024-26666, CVE-2024-26820, CVE-2024-26680, CVE-2024-26681, CVE-2024-26829, CVE-2024-26748, CVE-2024-26920, CVE-2024-26593, CVE-2024-26831, CVE-2024-26703, CVE-2024-35833, CVE-2024-26697, CVE-2023-52638, CVE-2024-26665, CVE-2024-26603, CVE-2024-26602, CVE-2024-26824, CVE-2024-26710, CVE-2024-26828, CVE-2024-26790, CVE-2024-26722, CVE-2024-26803, CVE-2024-26798, CVE-2024-27416, CVE-2024-26661, CVE-2024-26677, CVE-2024-26720, CVE-2024-26695, CVE-2024-26726, CVE-2024-26723, CVE-2024-26889, CVE-2024-26702, CVE-2024-26606, CVE-2024-26792, CVE-2024-26733, CVE-2024-26782, CVE-2024-26923, CVE-2023-52645, CVE-2024-26700, CVE-2024-26898, CVE-2024-26822, CVE-2024-26712, CVE-2023-52642, CVE-2024-26601, CVE-2024-26667, CVE-2024-26910,…
Record
USN-6895-3
Updated
2026-11-02
OSVUSN-6895-4 No score

linux-oem-6.5 vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Cryptographic API;
  • Android drivers;
  • Block layer subsystem;
  • Bluetooth drivers;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • On-Chip Interconnect management framework;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • PHY drivers;
  • MediaTek PM domains;
  • SCSI drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • Framebuffer layer;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • File systems infrastructure;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • CAN network layer;
  • Devlink API;
  • Handshake API;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • RxRPC session sockets;
  • TIPC protocol;
  • Unix domain sockets;
  • Realtek audio codecs; (CVE-2023-52638, CVE-2024-26684, CVE-2024-26659, CVE-2024-26708, CVE-2024-26663, CVE-2024-26662, CVE-2024-26789, CVE-2024-26831, CVE-2024-26703, CVE-2023-52643, CVE-2024-26688, CVE-2024-26733, CVE-2024-26818, CVE-2024-26707, CVE-2024-26820, CVE-2024-26719, CVE-2024-26726, CVE-2024-26830, CVE-2024-26694, CVE-2024-26715, CVE-2024-26829, CVE-2024-26697, CVE-2024-26916, CVE-2024-26735, CVE-2024-26717, CVE-2024-26748, CVE-2024-26696, CVE-2024-26710, CVE-2024-26642, CVE-2024-26680, CVE-2024-26675, CVE-2024-26723, CVE-2024-26718, CVE-2024-26666, CVE-2024-26720, CVE-2024-26838, CVE-2024-26824, CVE-2024-26676, CVE-2024-26665, CVE-2024-26693, CVE-2024-26698, CVE-2024-26890, CVE-2024-26601, CVE-2024-26826, CVE-2024-26711, CVE-2024-26602, CVE-2023-52645, CVE-2024-26716, CVE-2024-26660, CVE-2023-52642, CVE-2024-26898, CVE-2024-26803, CVE-2024-26923, CVE-2024-26722, CVE-2024-26677, CVE-2024-26825, CVE-2024-26606, CVE-2024-26790, CVE-2024-26828, CVE-2024-26910, CVE-2024-26681, CVE-2024-26689, CVE-2024-26667, CVE-2024-26798, CVE-2024-26679, CVE-2023-52631, CVE-2024-26926, CVE-2024-26661, CVE-2024-26700, CVE-2023-52637, CVE-2024-26919, CVE-2024-26917, CVE-2024-26712, CVE-2024-26889, CVE-2024-26674, CVE-2024-26792, CVE-2024-35833, CVE-2024-26822, CVE-2024-26734, CVE-2024-26691, CVE-2024-26685, CVE-2024-26782, CVE-2024-26702,…
Record
USN-6895-4
Updated
2026-11-02
OSVUSN-6900-1 No score

linux-hwe-6.5 vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Cryptographic API;
  • Android drivers;
  • Block layer subsystem;
  • Bluetooth drivers;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • IIO Magnetometer sensors drivers;
  • InfiniBand drivers;
  • On-Chip Interconnect management framework;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • PHY drivers;
  • MediaTek PM domains;
  • SCSI drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • Framebuffer layer;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • File systems infrastructure;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • CAN network layer;
  • Devlink API;
  • Handshake API;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • RxRPC session sockets;
  • TIPC protocol;
  • Unix domain sockets;
  • Realtek audio codecs; (CVE-2024-26666, CVE-2024-26691, CVE-2024-26681, CVE-2024-26715, CVE-2024-26674, CVE-2024-26790, CVE-2024-26677, CVE-2024-26675, CVE-2024-26696, CVE-2024-26925, CVE-2024-26782, CVE-2024-26798, CVE-2024-26702, CVE-2024-35833, CVE-2024-26825, CVE-2024-26680, CVE-2024-26723, CVE-2024-26703, CVE-2024-26822, CVE-2024-26718, CVE-2024-26695, CVE-2024-26693, CVE-2024-26733, CVE-2024-26659, CVE-2023-52643, CVE-2024-26667, CVE-2024-26601, CVE-2024-26923, CVE-2024-26726, CVE-2024-26676, CVE-2024-26924, CVE-2024-26889, CVE-2024-26685, CVE-2024-26720, CVE-2024-26820, CVE-2024-26919, CVE-2024-26642, CVE-2024-26890, CVE-2023-52637, CVE-2024-26602, CVE-2024-26603, CVE-2023-52880, CVE-2024-26606, CVE-2024-26708, CVE-2024-26697, CVE-2024-26643, CVE-2024-26916, CVE-2024-26661, CVE-2024-26707, CVE-2024-26910, CVE-2024-27416, CVE-2024-26716, CVE-2023-52645, CVE-2024-26600, CVE-2023-52642, CVE-2023-52631, CVE-2024-26926, CVE-2024-26593, CVE-2024-26735, CVE-2024-26917, CVE-2024-26698, CVE-2024-26838, CVE-2024-26694, CVE-2024-26664, CVE-2024-26898, CVE-2024-26719, CVE-2024-26802, CVE-2024-26826, CVE-2024-26679, CVE-2024-26824, CVE-2024-26831, CVE-2024-26792, CVE-2024-26700, CVE-2024-26818, CVE-2024-26920, CVE-2024-26829, CVE-2024-26710, CVE-2023-52638, CVE-2024-26714, CVE-2024-26809, CVE-2024-26789, CVE-2024-26689, CVE-2024-26722,…
Record
USN-6900-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
perf
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 160 CVEs
before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
linux-lts
Alpaquita:23
6.1.74-r0 up to 6.1.81-r0
6.1.81-r0
linux-lts
Alpaquita:25
6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
bpftool
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-core
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-cross-headers
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-debug
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-debug-core
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-debug-devel
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-debug-modules
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-debug-modules-extra
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-debug-modules-internal
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-devel
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-headers
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-ipaclones-internal
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-modules
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-modules-extra
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-modules-internal
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-selftests-internal
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-tools
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-tools-libs
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
kernel-tools-libs-devel
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
perf
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
python3-perf
TuxCare:CentOS:8.4
From an advisory covering 42 CVEs
before 4.18.0-305.25.1.el8_4.tuxcare.els19
4.18.0-305.25.1.el8_4.tuxcare.els19
bpftool
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-core
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-cross-headers
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-debug
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-debug-core
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-debug-devel
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-debug-modules
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-debug-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-debug-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-devel
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-headers
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-ipaclones-internal
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-modules
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-selftests-internal
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-tools
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-tools-libs
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
kernel-tools-libs-devel
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
perf
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
python3-perf
TuxCare:CentOS:8.5
From an advisory covering 44 CVEs
before 4.18.0-348.7.1.el8_5.tuxcare.els19
4.18.0-348.7.1.el8_5.tuxcare.els19
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 7.0.0-284.1101.el9_2.tuxcare.11.els8
7.0.0-284.1101.el9_2.tuxcare.11.els8
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
Kernel
Linux
5.8.0 up to 5.10.210, 5.11.0 up to 5.15.149, 5.16.0 up to 6.1.79, 6.2.0 up to 6.6.18, 6.7.0 up to 6.7.6
5.10.2105.15.1496.1.796.6.186.7.6
linux
Debian:12
before 6.1.82-1, plus listed versions
6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1
Show 13 moreShow less
6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1
6.1.82-1
linux
Debian:13
before 6.7.7-1
6.7.7-1
linux
Debian:14
before 6.7.7-1
6.7.7-1
linux-5.10
Debian:10
From an advisory covering 344 CVEs
before 5.10.216-1~deb10u1, plus listed versions
5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1
Show 8 moreShow less
5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1
5.10.216-1~deb10u1
linux
Debian:11
From an advisory covering 246 CVEs
before 5.10.216-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 34 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.216-1
kernel
openEuler:22.03-LTS-SP2
From an advisory covering 18 CVEs
before 5.10.0-153.53.0.131.oe2203sp2
5.10.0-153.53.0.131.oe2203sp2
kernel
openEuler:22.03-LTS
From an advisory covering 18 CVEs
before 5.10.0-60.136.0.163.oe2203
5.10.0-60.136.0.163.oe2203
kernel
openEuler:22.03-LTS-SP1
From an advisory covering 18 CVEs
before 5.10.0-136.74.0.154.oe2203sp1
5.10.0-136.74.0.154.oe2203sp1
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 23 CVEs
before 5.10.0-198.0.0.111.oe2203sp3
5.10.0-198.0.0.111.oe2203sp3
bpftool-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:7.0.0-284.75.1.el9_2
0:7.0.0-284.75.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-tools-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
perf
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
perf-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
python3-perf-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
rtla
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
bpftool
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:7.0.0-284.75.1.el9_2
0:7.0.0-284.75.1.el9_2
bpftool-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:7.0.0-284.75.1.el9_2
0:7.0.0-284.75.1.el9_2
kernel
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-abi-stablelists
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-uki-virt
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-tools
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-tools-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-tools-libs
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-uki-virt
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
perf-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
python3-perf
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
python3-perf-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
bpftool-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
before 0:7.0.0-284.75.1.el9_2
0:7.0.0-284.75.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel
Rocky Linux:8
From an advisory covering 160 CVEs
before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel
Rocky Linux:8
From an advisory covering 160 CVEs
before 0:4.18.0-553.16.1.el8_10.cloud.0.1
0:4.18.0-553.16.1.el8_10.cloud.0.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 561 CVEs
before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 561 CVEs
before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-livepatch-SLE15-SP5-RT_Update_16
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 561 CVEs
before 1-150500.11.3.1
1-150500.11.3.1
kernel-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt_debug
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-syms-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1.150500.6.31.1
5.14.21-150500.55.68.1.150500.6.31.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1.150500.6.31.1
5.14.21-150500.55.68.1.150500.6.31.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-livepatch-SLE15-SP5_Update_15
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 557 CVEs
before 1-150500.11.3.1
1-150500.11.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
dtb-aarch64
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-64kb
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-debug
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default-base
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1.150500.6.31.1
5.14.21-150500.55.68.1.150500.6.31.1
kernel-docs
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-kvmsmall
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-obs-build
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-obs-qa
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-source
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-syms
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-zfcpdump
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
linux-hwe-edge
Ubuntu:16.04:LTS
All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
None known
linux-aws-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
None known
linux-aws-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
None known
linux-azure
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
None known
linux-azure-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1126.133~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
5.4.0-1126.133~18.04.1
linux-azure-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
None known
linux-gcp
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
None known
linux-gcp-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
None known
linux-gke-4.15
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
None known
linux-gke-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
None known
linux-hwe
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
None known
linux-oem
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
None known
linux-oracle-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
None known
linux-oracle-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
None known
linux-aws-5.15
Ubuntu:20.04:LTS
before 5.15.0-1061.67~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 31 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.1
5.15.0-1061.67~20.04.1
linux-azure
Ubuntu:20.04:LTS
before 5.4.0-1126.133, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
5.4.0-1126.133
linux-azure-5.15
Ubuntu:20.04:LTS
before 5.15.0-1056.64~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 28 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.1
5.15.0-1056.64~20.04.1
linux-gcp-5.15
Ubuntu:20.04:LTS
before 5.15.0-1059.67~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 32 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.1
5.15.0-1059.67~20.04.1
linux-gkeop-5.15
Ubuntu:20.04:LTS
before 5.15.0-1044.51~20.04.1, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 28 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.1
5.15.0-1044.51~20.04.1
linux-hwe-5.15
Ubuntu:20.04:LTS
before 5.15.0-106.116~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 32 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.1
5.15.0-106.116~20.04.1
linux-ibm-5.15
Ubuntu:20.04:LTS
before 5.15.0-1054.57~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 13 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.1
5.15.0-1054.57~20.04.1
linux-intel-iotg-5.15
Ubuntu:20.04:LTS
before 5.15.0-1058.64~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 24 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.1
5.15.0-1058.64~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:20.04:LTS
before 5.15.0-106.116~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 31 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.1
5.15.0-106.116~20.04.1
linux-nvidia-tegra-5.15
Ubuntu:20.04:LTS
before 5.15.0-1027.27~20.04.1, plus listed versions
5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1
Show 7 moreShow less
5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.1
5.15.0-1027.27~20.04.1
linux-oracle-5.15
Ubuntu:20.04:LTS
before 5.15.0-1059.65~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 31 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.1
5.15.0-1059.65~20.04.1
linux-riscv-5.15
Ubuntu:20.04:LTS
before 5.15.0-1057.61~20.04.1, plus listed versions
5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1
Show 29 moreShow less
5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.1
5.15.0-1057.61~20.04.1
linux-aws-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known
linux-aws-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
None known
linux-aws-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
None known
linux-azure-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
None known
linux-azure-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
None known
linux-azure-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
None known
linux-azure-fde
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
None known
linux-gcp-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
None known
linux-gcp-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
None known
linux-gcp-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
None known
linux-gke
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
None known
linux-gke-5.15
Ubuntu:20.04:LTS
All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
None known
linux-hwe-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
None known
linux-hwe-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
None known
linux-hwe-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
None known
linux-intel-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
None known
linux-oem-5.10
Ubuntu:20.04:LTS
All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
None known
linux-oem-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
None known
linux-oem-5.14
Ubuntu:20.04:LTS
All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
None known
linux-oem-5.6
Ubuntu:20.04:LTS
All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
None known
linux-oracle-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known
linux-oracle-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
None known
linux-oracle-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
None known
linux-raspi2
Ubuntu:20.04:LTS
All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
None known
linux-riscv
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
None known
linux-riscv-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
None known
linux-riscv-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
before 5.4.0-1126.133+fips1, plus listed versions
5.4.0-1022.22+fips15.4.0-1073.76+fips15.4.0-1074.77+fips15.4.0-1076.79+fips15.4.0-1078.81+fips1
Show 33 moreShow less
5.4.0-1080.83+fips15.4.0-1083.87+fips15.4.0-1085.90+fips15.4.0-1086.91+fips15.4.0-1089.94+fips15.4.0-1090.95+fips15.4.0-1091.96+fips15.4.0-1094.100+fips15.4.0-1095.101+fips15.4.0-1098.104+fips15.4.0-1100.106+fips15.4.0-1101.107+fips15.4.0-1103.109+fips15.4.0-1104.110+fips15.4.0-1105.111+fips15.4.0-1106.112+fips15.4.0-1107.113+fips15.4.0-1108.114+fips15.4.0-1109.115+fips15.4.0-1110.116+fips15.4.0-1111.117+fips15.4.0-1112.118+fips15.4.0-1113.119+fips15.4.0-1114.120+fips15.4.0-1115.122+fips15.4.0-1116.123+fips15.4.0-1117.124+fips15.4.0-1118.125+fips15.4.0-1119.126+fips15.4.0-1121.128+fips15.4.0-1122.129+fips15.4.0-1123.130+fips15.4.0-1124.131+fips1
5.4.0-1126.133+fips1
linux
Ubuntu:22.04:LTS
before 5.15.0-106.116, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-106.116
linux-allwinner-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
None known
linux-aws
Ubuntu:22.04:LTS
before 5.15.0-1061.67, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 40 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.66
5.15.0-1061.67
linux-aws-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
None known
linux-aws-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
None known
linux-aws-6.5
Ubuntu:22.04:LTS
before 6.5.0-1023.23~22.04.1, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 7 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.1
6.5.0-1023.23~22.04.1
linux-azure
Ubuntu:22.04:LTS
before 5.15.0-1056.64, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 36 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.62
5.15.0-1056.64
linux-azure-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
None known
linux-azure-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
None known
linux-azure-6.5
Ubuntu:22.04:LTS
before 6.5.0-1015.15~22.04.1, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.1
6.5.0-1015.15~22.04.1
linux-azure-fde
Ubuntu:22.04:LTS
before 5.15.0-1056.64.1, plus listed versions
5.15.0-1019.24.15.15.0-1024.30.15.15.0-1029.36.15.15.0-1030.37.15.15.0-1031.38.1
Show 19 moreShow less
5.15.0-1033.40.15.15.0-1034.41.15.15.0-1035.42.15.15.0-1036.43.15.15.0-1037.44.15.15.0-1038.45.15.15.0-1039.46.15.15.0-1041.48.15.15.0-1042.49.15.15.0-1044.51.15.15.0-1045.52.15.15.0-1046.53.15.15.0-1047.54.15.15.0-1049.56.15.15.0-1050.57.15.15.0-1051.59.15.15.0-1052.60.15.15.0-1053.61.15.15.0-1054.62.1
5.15.0-1056.64.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
None known
linux-gcp
Ubuntu:22.04:LTS
before 5.15.0-1059.67, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 39 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.66
5.15.0-1059.67
linux-gcp-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
None known

History

History
RecordedChangedSources
affectedOSV
affected
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26698 is a medium vulnerability (CVSS 4.7) in Debian Linux, published April 3, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in linux-lts 6.1.81-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 314 package rows, 54 versions, 2,906 references and the rest of 16 source descriptions. The JSON record has them.

MoveEnter Open