CVE-2024-26733

arp: Prevent overflow in arp_req_get().

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

arp: Prevent overflow in arp_req_get().

syzkaller reported an overflown write in arp_req_get(). [0]

When ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour entry and copies neigh->ha to struct arpreq.arp_ha.sa_data.

The arp_ha here is struct sockaddr, not struct sockaddr_storage, so the sa_data buffer is just 14 bytes.

In the splat below, 2 bytes are overflown to the next int field, arp_flags. We initialise the field just after the memcpy(), so it's not a problem.

However, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN), arp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL) in arp_ioctl() before calling arp_req_get().

To avoid the overflow, let's limit the max length of memcpy().

Note that commit b5f0de6df6dc ("net: dev: Convert sa_data to flexible array in struct sockaddr") just silenced syzkaller.

[0]: memcpy: detected field-spanning write (size 16) of single field "r->arp_ha.sa_data" at net/ipv4/arp.c:1128 (size 14) WARNING: CPU: 0 PID: 144638 at net/ipv4/arp.c:1128 arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128 Modules linked in: CPU: 0 PID: 144638 Comm: syz-executor.4 Not tainted 6.1.74 #31 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04/01/2014 RIP: 0010:arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128 Code: fd ff ff e8 41 42 de fb b9 0e 00 00 00 4c 89 fe 48 c7 c2 20 6d ab 87 48 c7 c7 80 6d ab 87 c6 05 25 af 72 04 01 e8 5f 8d ad fb <0f> 0b e9 6c fd ff ff e8 13 42 de fb be 03 00 00 00 4c 89 e7 e8 a6 RSP: 0018:ffffc900050b7998 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88803a815000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8641a44a RDI: 0000000000000001 RBP: ffffc900050b7a98 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 203a7970636d656d R12: ffff888039c54000 R13: 1ffff92000a16f37 R14: ffff88803a815084 R15: 0000000000000010 FS: 00007f172bf306c0(0000) GS:ffff88805aa00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f172b3569f0 CR3: 0000000057f12005 CR4: 0000000000770ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> arp_ioctl+0x33f/0x4b0 net/ipv4/arp.c:1261 inet_ioctl+0x314/0x3a0 net/ipv4/af_inet.c:981 sock_do_ioctl+0xdf/0x260 net/socket.c:1204 sock_ioctl+0x3ef/0x650 net/socket.c:1321 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x18e/0x220 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x37/0x90 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x64/0xce RIP: 0033:0x7f172b262b8d Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f172bf300b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f172b3abf80 RCX: 00007f172b262b8d RDX: 0000000020000000 RSI: 0000000000008954 RDI: 0000000000000003 RBP: 00007f172b2d3493 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f172b3abf80 R15: 00007f172bf10000 </TASK>

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.26%Up 0.2 points since Apr 4, 2024

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

arp: Prevent overflow in arp_req_get().

syzkaller reported an overflown write in arp_req_get(). [0]

When ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour entry and copies neigh->ha to struct arpreq.arp_ha.sa_data.

The arp_ha here is struct sockaddr, not struct sockaddr_storage, so the sa_data buffer is just 14 bytes.

In the splat below, 2 bytes are overflown to the next int field, arp_flags. We initialise the field just after the memcpy(), so it's not a problem.

However, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN), arp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL) in arp_ioctl() before calling arp_req_get().

To avoid the overflow, let's limit the max length of memcpy().

Note that commit b5f0de6df6dc ("net: dev: Convert sa_data to flexible array in struct sockaddr") just silenced syzkaller.

Record: CVE-2024-26733
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-787
Updated: 2026-11-02

CVE List No score

arp: Prevent overflow in arp_req_get().

In the Linux kernel, the following vulnerability has been resolved:

arp: Prevent overflow in arp_req_get().

syzkaller reported an overflown write in arp_req_get(). [0]

When ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour entry and copies neigh->ha to struct arpreq.arp_ha.sa_data.

The arp_ha here is struct sockaddr, not struct sockaddr_storage, so the sa_data buffer is just 14 bytes.

In the splat below, 2 bytes are overflown to the next int field, arp_flags. We initialise the field just after the memcpy(), so it's not a problem.

However, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN), arp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL) in arp_ioctl() before calling arp_req_get().

To avoid the overflow, let's limit the max length of memcpy().

Note that commit b5f0de6df6dc ("net: dev: Convert sa_data to flexible array in struct sockaddr") just silenced syzkaller.

Record: CVE-2024-26733
Updated: 2026-11-02

EUVDEUVD-2024-23995 No score

In the Linux kernel, the following vulnerability has been resolved:

arp: Prevent overflow in arp_req_get().

syzkaller reported an overflown write in arp_req_get(). [0]

When ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour entry and copies neigh->ha to struct arpreq.arp_ha.sa_data.

The arp_ha here is struct sockaddr, not struct sockaddr_storage, so the sa_data buffer is just 14 bytes.

In the splat below, 2 bytes are overflown to the next int field, arp_flags. We initialise the field just after the memcpy(), so it's not a problem.

However, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN), arp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL) in arp_ioctl() before calling arp_req_get().

To avoid the overflow, let's limit the max length of memcpy().

Note that commit b5f0de6df6dc ("net: dev: Convert sa_data to flexible array in struct sockaddr") just silenced syzkaller.

Record: EUVD-2024-23995
Updated: 2026-11-02

GitHub AdvisoriesGHSA-xqrq-q336-f78g 5.5

In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in...

In the Linux kernel, the following vulnerability has been resolved:

arp: Prevent overflow in arp_req_get().

syzkaller reported an overflown write in arp_req_get(). [0]

When ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour entry and copies neigh->ha to struct arpreq.arp_ha.sa_data.

The arp_ha here is struct sockaddr, not struct sockaddr_storage, so the sa_data buffer is just 14 bytes.

In the splat below, 2 bytes are overflown to the next int field, arp_flags. We initialise the field just after the memcpy(), so it's not a problem.

However, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN), arp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL) in arp_ioctl() before calling arp_req_get().

To avoid the overflow, let's limit the max length of memcpy().

Note that commit b5f0de6df6dc ("net: dev: Convert sa_data to flexible array in struct sockaddr") just silenced syzkaller.

Record: GHSA-xqrq-q336-f78g
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSVBELL-CVE-2024-26733 5.5

Record: BELL-CVE-2024-26733
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-26733 5.5

In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get(). syzkaller reported an overflown write in arp_req_get(). [0] When ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour entry and copies neigh->ha to struct arpreq.arp_ha.sa_data. The arp_ha here is struct sockaddr, not struct sockaddr_storage, so the sa_data buffer is just 14 bytes. In the splat below, 2 bytes are overflown to the next int field, arp_flags. We initialise the field just after the memcpy(), so it's not a problem. However, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN), arp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL) in arp_ioctl() before calling arp_req_get(). To avoid the overflow, let's limit the max length of memcpy(). Note that commit b5f0de6df6dc ("net: dev: Convert sa_data to flexible array in struct sockaddr") just silenced syzkaller. [0]: memcpy: detected field-spanning write (size 16) of single field "r->arp_ha.sa_data" at net/ipv4/arp.c:1128 (size 14) WARNING: CPU: 0 PID: 144638 at net/ipv4/arp.c:1128 arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128 Modules linked in: CPU: 0 PID: 144638 Comm: syz-executor.4 Not tainted 6.1.74 #31 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04/01/2014 RIP: 0010:arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128 Code: fd ff ff e8 41 42 de fb b9 0e 00 00 00 4c 89 fe 48 c7 c2 20 6d ab 87 48 c7 c7 80 6d ab 87 c6 05 25 af 72 04 01 e8 5f 8d ad fb <0f> 0b e9 6c fd ff ff e8 13 42 de fb be 03 00 00 00 4c 89 e7 e8 a6 RSP: 0018:ffffc900050b7998 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88803a815000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8641a44a RDI: 0000000000000001 RBP: ffffc900050b7a98 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 203a7970636d656d R12: ffff888039c54000 R13: 1ffff92000a16f37 R14: ffff88803a815084 R15: 0000000000000010 FS: 00007f172bf306c0(0000) GS:ffff88805aa00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f172b3569f0 CR3: 0000000057f12005 CR4: 0000000000770ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> arp_ioctl+0x33f/0x4b0 net/ipv4/arp.c:1261 inet_ioctl+0x314/0x3a0 net/ipv4/af_inet.c:981 sock_do_ioctl+0xdf/0x260 net/socket.c:1204 sock_ioctl+0x3ef/0x650 net/socket.c:1321 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x18e/0x220 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x37/0x90 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x64/0xce RIP: 0033:0x7f172b262b8d Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f172bf300b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f172b3abf80 RCX: 00007f172b262b8d RDX: 0000000020000000 RSI: 0000000000008954 RDI: 0000000000000003 RBP: 00007f172b2d3493 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f172b3abf80 R15: 00007f172bf10000 </TASK>

Record: DEBIAN-CVE-2024-26733
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 46 moreShow less

OSVOESA-2024-1617 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate.

Note, writing '0' to kvmclock MSR doesn't clear memory location, it just prevents hypervisor from updating the location so for the short while after write and while CPU is still alive, the clock remains usable and correct so we don't need to switch to some other clocksource.(CVE-2021-47110)

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

Remove the reason of null pointer dereference in sync VSI filters. Added new I40E_VSI_RELEASING flag to signalize deleting and releasing of VSI resources to sync this thread with sync filters subtask. Without this patch it is possible to start update the VSI filter list after VSI is removed, that's causing a kernel oops.(CVE-2021-47184)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

CPU: 0 PID: 7789 Comm: stress Not tainted 6.0.0-rc1-00002-g0d53d2e882f9 #3 Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 Call Trace: <TASK> .. __mutex_lock+0xe5/0xc30 .. z_erofs_do_read_page+0x8ce/0x1560 .. z_erofs_readahead+0x31c/0x580 .. Freed by task 7787 kasan_save_stack+0x1e/0x40 kasan_set_track+0x20/0x30 kasan_set_free_info+0x20/0x40 __kasan_slab_free+0x10c/0x190 kmem_cache_free+0xed/0x380 rcu_core+0x3d5/0xc90 __do_softirq+0x12d/0x389

Last potentially related work creation: kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x97/0xb0 call_rcu+0x3d/0x3f0 erofs_shrink_workstation+0x11f/0x210 erofs_shrink_scan+0xdc/0x170 shrink_slab.constprop.0+0x296/0x530 drop_slab+0x1c/0x70 drop_caches_sysctl_handler+0x70/0x80 proc_sys_call_handler+0x20a/0x2f0 vfs_write+0x555/0x6c0 ksys_write+0xbe/0x160 do_syscall_64+0x3b/0x90

The root cause is that erofs_workgroup_unfreeze() doesn't reset to orig_val thus it causes a race that the pcluster reuses unexpectedly before freeing.

Since UP platforms are quite rare now, such path becomes unnecessary. Let's drop such specific-designed path directly instead.(CVE-2022-48674)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.(CVE-2023-52615)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: disallow timeout for anonymous sets

Never used from userspace, disallow these parameters.(CVE-2023-52620)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix a suspicious RCU usage warning

I received the following warning while running cthon against an ontap server running pNFS:

[ 57.202521] ============================= [ 57.202522] WARNING: suspicious RCU usage [ 57.202523] 6.7.0-rc3-g2cc14f52aeb7 #41492 Not tainted [ 57.202525] ----------------------------- [ 57.202525] net/sunrpc/xprtmultipath.c:349 RCU-list traversed in non-reader section!! [ 57.202527] other info that might help us debug this:

[ 57.202528] …

Record: OESA-2024-1617
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1618 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

tun: avoid double free in tun_free_netdev

Avoid double free in tun_free_netdev() by moving the dev->tstats and tun->security allocs to a new ndo_init routine (tun_net_init()) that will be called by register_netdevice(). ndo_init is paired with the desctructor (tun_free_netdev()), so if there's an error in register_netdevice() the destructor will handle the frees.

BUG: KASAN: double-free or invalid-free in selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605

CPU: 0 PID: 25750 Comm: syz-executor416 Not tainted 5.16.0-rc2-syzk #1 Hardware name: Red Hat KVM, BIOS Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x89/0xb5 lib/dump_stack.c:106 print_address_description.constprop.9+0x28/0x160 mm/kasan/report.c:247 kasan_report_invalid_free+0x55/0x80 mm/kasan/report.c:372 ____kasan_slab_free mm/kasan/common.c:346 [inline] __kasan_slab_free+0x107/0x120 mm/kasan/common.c:374 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:1723 [inline] slab_free_freelist_hook mm/slub.c:1749 [inline] slab_free mm/slub.c:3513 [inline] kfree+0xac/0x2d0 mm/slub.c:4561 selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605 security_tun_dev_free_security+0x4f/0x90 security/security.c:2342 tun_free_netdev+0xe6/0x150 drivers/net/tun.c:2215 netdev_run_todo+0x4df/0x840 net/core/dev.c:10627 rtnl_unlock+0x13/0x20 net/core/rtnetlink.c:112 __tun_chr_ioctl+0x80c/0x2870 drivers/net/tun.c:3302 tun_chr_ioctl+0x2f/0x40 drivers/net/tun.c:3311 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x19d/0x220 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3a/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae(CVE-2021-47082)

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate.

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

Last potentially related work creation: …

Record: OESA-2024-1618
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1622 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave.

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

The root cause is that erofs_workgroup_unfreeze() doesn't reset to orig_val thus it causes a race that the pcluster reuses unexpectedly before freeing.

Since UP platforms are quite rare now, such path becomes unnecessary. Let's drop such specific-designed path directly instead.(CVE-2022-48674)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and initialized. If usb_get_bos_descriptor() fails for whatever reason, udev->bos will be NULL and those accesses will result in a crash:

BUG: kernel NULL pointer dereference, address: 0000000000000018 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1> Hardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021 Workqueue: usb_hub_wq hub_event RIP: 0010:hub_port_reset+0x193/0x788 Code: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9 RSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310 RDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840 RBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0 Call Trace: hub_event+0x73f/0x156e ? hub_activate+0x5b7/0x68f process_one_work+0x1a2/0x487 worker_thread+0x11a/0x288 kthread+0x13a/0x152 ? process_one_work+0x487/0x487 ? kthread_associate_blkcg+0x70/0x70 ret_from_fork+0x1f/0x30

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support…

Record: OESA-2024-1622
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1647 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()

memcpy() is called in a loop while 'operation->length' upper bound is not checked and 'data_idx' also increments.(CVE-2022-48632)

In the Linux kernel, the following vulnerability has been resolved:

mm/slub: fix to return errno if kmalloc() fails

In create_unique_id(), kmalloc(, GFP_KERNEL) can fail due to out-of-memory, if it fails, return errno correctly rather than triggering panic via BUG_ON();

kernel BUG at mm/slub.c:5893! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP

Call trace: sysfs_slab_add+0x258/0x260 mm/slub.c:5973 __kmem_cache_create+0x60/0x118 mm/slub.c:4899 create_cache mm/slab_common.c:229 [inline] kmem_cache_create_usercopy+0x19c/0x31c mm/slab_common.c:335 kmem_cache_create+0x1c/0x28 mm/slab_common.c:390 f2fs_kmem_cache_create fs/f2fs/f2fs.h:2766 [inline] f2fs_init_xattr_caches+0x78/0xb4 fs/f2fs/xattr.c:808 f2fs_fill_super+0x1050/0x1e0c fs/f2fs/super.c:4149 mount_bdev+0x1b8/0x210 fs/super.c:1400 f2fs_mount+0x44/0x58 fs/f2fs/super.c:4512 legacy_get_tree+0x30/0x74 fs/fs_context.c:610 vfs_get_tree+0x40/0x140 fs/super.c:1530 do_new_mount+0x1dc/0x4e4 fs/namespace.c:3040 path_mount+0x358/0x914 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x2f8/0x408 fs/namespace.c:3568(CVE-2022-48659)

In the Linux kernel, the following vulnerability has been resolved:

gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

When running gpio test on nxp-ls1028 platform with below command gpiomon --num-events=3 --rising-edge gpiochip1 25 There will be a warning trace as below: Call trace: free_irq+0x204/0x360 lineevent_free+0x64/0x70 gpio_ioctl+0x598/0x6a0 __arm64_sys_ioctl+0xb4/0x100 invoke_syscall+0x5c/0x130 ...... el0t_64_sync+0x1a0/0x1a4 The reason of this issue is that calling request_threaded_irq() function failed, and then lineevent_free() is invoked to release the resource. Since the lineevent_state::irq was already set, so the subsequent invocation of free_irq() would trigger the above warning call trace. To fix this issue, set the lineevent_state::irq after the IRQ register successfully.(CVE-2022-48660)

In the Linux kernel, the following vulnerability has been resolved:

binder: fix race between mmput() and do_exit()

Task A calls binder_update_page_range() to allocate and insert pages on a remote address space from Task B. For this, Task A pins the remote mm via mmget_not_zero() first. This can race with Task B do_exit() and the final mmput() refcount decrement will come from Task A.

In this case, the work of ____fput() from Task B is queued up in Task A as TWA_RESUME. So in theory, Task A returns to userspace and the cleanup work gets executed. However, Task A instead sleep, waiting for a reply from Task B that never comes (it's dead).

This means the binder_deferred_release() is blocked until an unrelated binder event forces Task A to go back to userspace. All the associated death notifications will also be delayed until then.

In order to fix this use mmput_async() that will schedule the work in the corresponding mm->async_put_work WQ instead of Task A.(CVE-2023-52609)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng…

Record: OESA-2024-1647
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1648 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

mm/slub: fix to return errno if kmalloc() fails

In create_unique_id(), kmalloc(, GFP_KERNEL) can fail due to out-of-memory, if it fails, return errno correctly rather than triggering panic via BUG_ON();

kernel BUG at mm/slub.c:5893! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP

In the Linux kernel, the following vulnerability has been resolved:

gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

In the Linux kernel, the following vulnerability has been resolved:

binder: fix race between mmput() and do_exit()

This means the binder_deferred_release() is blocked until an unrelated binder event forces Task A to go back to userspace. All the associated death notifications will also be delayed until then.

In order to fix this use mmput_async() that will schedule the work in the corresponding mm->async_put_work WQ instead of Task A.(CVE-2023-52609)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

Fix this by using a stack buffer when calling copy_to_user.(CVE-2023-52615)

In the Linux kernel, the following vulnerability has been resolved:

crypto: lib/mpi - Fix unexpected…

Record: OESA-2024-1648
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1649 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

binder: fix race between mmput() and do_exit()

This means the binder_deferred_release() is blocked until an unrelated binder event forces Task A to go back to userspace. All the associated death notifications will also be delayed until then.

In order to fix this use mmput_async() that will schedule the work in the corresponding mm->async_put_work WQ instead of Task A.(CVE-2023-52609)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

Fix this by using a stack buffer when calling copy_to_user.(CVE-2023-52615)

In the Linux kernel, the following vulnerability has been resolved:

crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init

When the mpi_ec_ctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the structure was released. Initially, this issue was ignored because memory for mpi_ec_ctx is allocated with the __GFP_ZERO flag. For example, this error will be triggered when calculating the Za value for SM2 separately.(CVE-2023-52616)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers

These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program, otherwise the following warning will be reported when a sleepable bpf program manipulates bpf map under interpreter mode (aka bpf_jit_enable=0):

WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ...... CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:bpf_map_lookup_elem+0x54/0x60 ...... Call Trace: <TASK> ? __warn+0xa5/0x240 ? bpf_map_lookup_elem+0x54/0x60 ? report_bug+0x1ba/0x1f0 ? handle_bug+0x40/0x80 ? exc_invalid_op+0x18/0x50 ? asm_exc_invalid_op+0x1b/0x20 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ? rcu_lockdep_current_cpu_online+0x65/0xb0 ? rcu_is_watching+0x23/0x50 ? bpf_map_lookup_elem+0x54/0x60 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ___bpf_prog_run+0x513/0x3b70 __bpf_prog_run32+0x9d/0xd0 ? __bpf_prog_enter_sleepable_recur+0xad/0x120 ? __bpf_prog_enter_sleepable_recur+0x3e/0x120 bpf_trampoline_6442580665+0x4d/0x1000 __x64_sys_getpgid+0x5/0x30 ? do_syscall_64+0x36/0xb0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK>(CVE-2023-52621)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix a suspicious RCU usage warning

I received the following warning while running cthon against an ontap server running pNFS:

[ 57.202521] ============================= […

Record: OESA-2024-1649
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:4902 7.0

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:4902
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:5101 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:5101
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:5102 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:5102
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:5255 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:5255
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:3215 7.0

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:3215
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-26733 0.0

Record: UBUNTU-CVE-2024-26733
CVSS 4.0: 0.0 NoneCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

OSVALSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
[almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
[Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
(JIRA:AlmaLinux-31798)
(JIRA:AlmaLinux-10263)
(JIRA:AlmaLinux-40901)
(JIRA:AlmaLinux-43547)
(JIRA:AlmaLinux-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:AlmaLinux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: ALSA-2024:5101
Updated: 2026-11-02

OSVALSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: ALSA-2024:5102
Updated: 2026-11-02

OSVCLSA-2024-1718950178 No score

Fix of 22 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26764
- aio: remove an outdated BUG_ON and comment in aio_complete
- aio: remove the extra get_file/fput pair in io_submit_one
- aio: refactor read/write iocb setup
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
CVE-url: https://ubuntu.com/security/CVE-2024-36971
- net: fix __dst_negative_advice() race
CVE-url: https://ubuntu.com/security/CVE-2024-26840
- cachefiles: fix memory leak in cachefiles_add_cache()
CVE-url: https://ubuntu.com/security/CVE-2021-47543
- perf report: Fix memory leaks around perf_tip()
CVE-url: https://ubuntu.com/security/CVE-2024-27405
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
CVE-url: https://ubuntu.com/security/CVE-2024-26779
- wifi: mac80211: fix race condition on enabling fast-xmit
CVE-url: https://ubuntu.com/security/CVE-2024-26772
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
CVE-url: https://ubuntu.com/security/CVE-2024-26845
- scsi: target: core: Add TMF to tmr_list handling
CVE-url: https://ubuntu.com/security/CVE-2021-47063
- drm: bridge/panel: Cleanup connector on bridge detach
CVE-url: https://ubuntu.com/security/CVE-2024-26804
- net: ip_tunnel: prevent perpetual headroom growth
CVE-url: https://ubuntu.com/security/CVE-2024-27410
- wifi: nl80211: reject iftype change with mesh ID change
CVE-url: https://ubuntu.com/security/CVE-2024-26793
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
CVE-url: https://ubuntu.com/security/CVE-2024-26754
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
CVE-url: https://ubuntu.com/security/CVE-2024-26839
- IB/hfi1: Fix a memleak in init_credit_return
CVE-url: https://ubuntu.com/security/CVE-2024-26773
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
CVE-url: https://ubuntu.com/security/CVE-2024-27413
- efi/capsule-loader: fix incorrect allocation size
CVE-url: https://ubuntu.com/security/CVE-2024-26736
- afs: Increase buffer size in afs_update_volume_status()
CVE-url: https://ubuntu.com/security/CVE-2024-26777
- fbdev: sis: Error out if pixclock equals zero
CVE-url: https://ubuntu.com/security/CVE-2024-26778
- fbdev: savage: Error out if pixclock equals zero
CVE-url: https://ubuntu.com/security/CVE-2024-26763
- dm-crypt: don't modify the data when using authenticated encryption
CVE-url: https://ubuntu.com/security/CVE-2024-26733
- arp: Prevent overflow in arp_req_get().
CVE-url: https://ubuntu.com/security/CVE-2024-26791
- btrfs: dev-replace: properly validate device names

Record: CLSA-2024-1718950178
Updated: 2026-11-02

OSVCLSA-2024-1718950656 No score

Fix of 22 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26764
- aio: remove an outdated BUG_ON and comment in aio_complete
- aio: remove the extra get_file/fput pair in io_submit_one
- aio: refactor read/write iocb setup
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
CVE-url: https://ubuntu.com/security/CVE-2024-36971
- net: fix __dst_negative_advice() race
CVE-url: https://ubuntu.com/security/CVE-2024-26840
- cachefiles: fix memory leak in cachefiles_add_cache()
CVE-url: https://ubuntu.com/security/CVE-2021-47543
- perf report: Fix memory leaks around perf_tip()
CVE-url: https://ubuntu.com/security/CVE-2024-27405
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
CVE-url: https://ubuntu.com/security/CVE-2024-26779
- wifi: mac80211: fix race condition on enabling fast-xmit
CVE-url: https://ubuntu.com/security/CVE-2024-26772
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
CVE-url: https://ubuntu.com/security/CVE-2024-26845
- scsi: target: core: Add TMF to tmr_list handling
CVE-url: https://ubuntu.com/security/CVE-2021-47063
- drm: bridge/panel: Cleanup connector on bridge detach
CVE-url: https://ubuntu.com/security/CVE-2024-26804
- net: ip_tunnel: prevent perpetual headroom growth
CVE-url: https://ubuntu.com/security/CVE-2024-27410
- wifi: nl80211: reject iftype change with mesh ID change
CVE-url: https://ubuntu.com/security/CVE-2024-26793
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
CVE-url: https://ubuntu.com/security/CVE-2024-26754
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
CVE-url: https://ubuntu.com/security/CVE-2024-26839
- IB/hfi1: Fix a memleak in init_credit_return
CVE-url: https://ubuntu.com/security/CVE-2024-26773
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
CVE-url: https://ubuntu.com/security/CVE-2024-27413
- efi/capsule-loader: fix incorrect allocation size
CVE-url: https://ubuntu.com/security/CVE-2024-26736
- afs: Increase buffer size in afs_update_volume_status()
CVE-url: https://ubuntu.com/security/CVE-2024-26777
- fbdev: sis: Error out if pixclock equals zero
CVE-url: https://ubuntu.com/security/CVE-2024-26778
- fbdev: savage: Error out if pixclock equals zero
CVE-url: https://ubuntu.com/security/CVE-2024-26763
- dm-crypt: don't modify the data when using authenticated encryption
CVE-url: https://ubuntu.com/security/CVE-2024-26733
- arp: Prevent overflow in arp_req_get().
CVE-url: https://ubuntu.com/security/CVE-2024-26791
- btrfs: dev-replace: properly validate device names

Record: CLSA-2024-1718950656
Updated: 2026-11-02

OSVCLSA-2024-1718973513 No score

Fix of 21 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26777
- fbdev: sis: Error out if pixclock equals zero
CVE-url: https://ubuntu.com/security/CVE-2021-47542
- net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
CVE-url: https://ubuntu.com/security/CVE-2021-47518
- nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
CVE-url: https://ubuntu.com/security/CVE-2024-36902
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
CVE-url: https://ubuntu.com/security/CVE-2024-36901
- ipv6: prevent NULL dereference in ip6_output()
CVE-url: https://ubuntu.com/security/CVE-2021-47571
- staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
CVE-url: https://ubuntu.com/security/CVE-2021-47521
- can: sja1000: fix use after free in ems_pcmcia_add_card()
CVE-url: https://ubuntu.com/security/CVE-2021-47520
- can: pch_can: pch_can_rx_normal: fix use after free
CVE-url: https://ubuntu.com/security/CVE-2024-27405
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
CVE-url: https://ubuntu.com/security/CVE-2024-26764
- aio: remove an outdated BUG_ON and comment in aio_complete
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
Bionic update: upstream stable patchset 2020-09-16 (LP: #1895873) // CVE- url: https://ubuntu.com/security/CVE-2024-27405
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()
CVE-url: https://ubuntu.com/security/CVE-2024-26840
- cachefiles: fix memory leak in cachefiles_add_cache()
CVE-url: https://ubuntu.com/security/CVE-2024-26779
- wifi: mac80211: fix race condition on enabling fast-xmit
CVE-url: https://ubuntu.com/security/CVE-2024-26772
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
CVE-url: https://ubuntu.com/security/CVE-2024-26845
- scsi: target: core: Add TMF to tmr_list handling
CVE-url: https://ubuntu.com/security/CVE-2024-26804
- net: ip_tunnel: prevent perpetual headroom growth
CVE-url: https://ubuntu.com/security/CVE-2024-27410
- wifi: nl80211: reject iftype change with mesh ID change
CVE-url: https://ubuntu.com/security/CVE-2024-26839
- IB/hfi1: Fix a memleak in init_credit_return
CVE-url: https://ubuntu.com/security/CVE-2024-26773
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
CVE-url: https://ubuntu.com/security/CVE-2024-26778
- fbdev: savage: Error out if pixclock equals zero
CVE-url: https://ubuntu.com/security/CVE-2024-26733
- arp: Prevent overflow in arp_req_get().
CVE-url: https://ubuntu.com/security/CVE-2024-26791
- btrfs: dev-replace: properly validate device names

Record: CLSA-2024-1718973513
Updated: 2026-11-02

OSVCLSA-2024-1718973794 No score

Fix of 21 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-26777
- fbdev: sis: Error out if pixclock equals zero
CVE-url: https://ubuntu.com/security/CVE-2021-47542
- net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
CVE-url: https://ubuntu.com/security/CVE-2021-47518
- nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
CVE-url: https://ubuntu.com/security/CVE-2024-36902
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
CVE-url: https://ubuntu.com/security/CVE-2024-36901
- ipv6: prevent NULL dereference in ip6_output()
CVE-url: https://ubuntu.com/security/CVE-2021-47571
- staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
CVE-url: https://ubuntu.com/security/CVE-2021-47521
- can: sja1000: fix use after free in ems_pcmcia_add_card()
CVE-url: https://ubuntu.com/security/CVE-2021-47520
- can: pch_can: pch_can_rx_normal: fix use after free
CVE-url: https://ubuntu.com/security/CVE-2024-27405
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
CVE-url: https://ubuntu.com/security/CVE-2024-26764
- aio: remove an outdated BUG_ON and comment in aio_complete
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
Bionic update: upstream stable patchset 2020-09-16 (LP: #1895873) // CVE- url: https://ubuntu.com/security/CVE-2024-27405
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()
CVE-url: https://ubuntu.com/security/CVE-2024-26840
- cachefiles: fix memory leak in cachefiles_add_cache()
CVE-url: https://ubuntu.com/security/CVE-2024-26779
- wifi: mac80211: fix race condition on enabling fast-xmit
CVE-url: https://ubuntu.com/security/CVE-2024-26772
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
CVE-url: https://ubuntu.com/security/CVE-2024-26845
- scsi: target: core: Add TMF to tmr_list handling
CVE-url: https://ubuntu.com/security/CVE-2024-26804
- net: ip_tunnel: prevent perpetual headroom growth
CVE-url: https://ubuntu.com/security/CVE-2024-27410
- wifi: nl80211: reject iftype change with mesh ID change
CVE-url: https://ubuntu.com/security/CVE-2024-26839
- IB/hfi1: Fix a memleak in init_credit_return
CVE-url: https://ubuntu.com/security/CVE-2024-26773
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
CVE-url: https://ubuntu.com/security/CVE-2024-26778
- fbdev: savage: Error out if pixclock equals zero
CVE-url: https://ubuntu.com/security/CVE-2024-26733
- arp: Prevent overflow in arp_req_get().
CVE-url: https://ubuntu.com/security/CVE-2024-26791
- btrfs: dev-replace: properly validate device names

Record: CLSA-2024-1718973794
Updated: 2026-11-02

OSVCLSA-2024-1725872696 No score

kernel: Fix of 43 CVEs

netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
ata: libata-core: Fix double free on error {CVE-2024-41087}
drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
net/sched: flower: Fix chain template offload {CVE-2024-26669}
ipv6: Remove extra counter pull before gc {CVE-2023-52340}
ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
net: add a route cache full diagnostic message {CVE-2023-52340}
Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
tcp_metrics: validate source addr length {CVE-2024-42154}
net: fix out-of-bounds access in ops_init {CVE-2024-36883}
tap: add missing verification for short frame {CVE-2024-41090}
tun: add missing verification for short frame {CVE-2024-41091}
iommu: Fix potential use-after-free during probe {CVE-2022-48796}
nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
gfs2: Wake up when sd_glock_disposal becomes zero {CVE-2024-38570}
gfs2: Remove ill-placed consistency check {CVE-2024-38570}
gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
gfs2: Don't call dlm after protocol is unmounted {CVE-2024-38570}
gfs2: Don't skip dlm unlock if glock has an lvb {CVE-2024-38570}
netfilter: nf_tables: release mutex after nft_gc_seq_end…

Record: CLSA-2024-1725872696
Updated: 2026-11-02

OSVCLSA-2024-1725876080 No score

kernel: Fix of 45 CVEs

dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956}
userfaultfd: fix a race between writeprotect and exit_mmap() {CVE-2021-47461}
netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
ata: libata-core: Fix double free on error {CVE-2024-41087}
drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
net/sched: flower: Fix chain template offload {CVE-2024-26669}
ipv6: Remove extra counter pull before gc {CVE-2023-52340}
ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
net: add a route cache full diagnostic message {CVE-2023-52340}
Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
tcp_metrics: validate source addr length {CVE-2024-42154}
net: fix out-of-bounds access in ops_init {CVE-2024-36883}
tap: add missing verification for short frame {CVE-2024-41090}
tun: add missing verification for short frame {CVE-2024-41091}
iommu: Fix potential use-after-free during probe {CVE-2022-48796}
nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
gfs2: Remove ill-placed consistency check {CVE-2024-38570}
gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925} -…

Record: CLSA-2024-1725876080
Updated: 2026-11-02

OSVCLSA-2026-1783791447 No score

kernel: Fix of 307 CVEs

gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660}
ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008}
KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975}
Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027}
xhci: Fix null pointer dereference when host dies {CVE-2023-52898}
sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638}
blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671}
net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977}
gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975}
HID: betop: check shape of output reports {CVE-2023-53015}
mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932}
HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937}
drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002}
ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013}
RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026}
Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018}
scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760}
sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331}
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038}
cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194}
ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160}
nbd: don't allow reconnect after disconnect {CVE-2025-21731}
openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820}
net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321}
ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121}
i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041}
net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000}
bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994}
xsk: check IFF_UP earlier in Tx path {CVE-2023-53240}
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
virtgpu: don't reset on shutdown {CVE-2025-38064}
xen/netfront: fix crash when removing device {CVE-2022-48969}
mptcp: do not fallback when OoO is present {CVE-2024-50185}
can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925}
netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160}
xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053}
ext4: fix racy may inline data check in dio write {CVE-2023-52786}
drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738}
macsec: fix UAF bug for real_dev {CVE-2022-49390}
drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259}
mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241}
driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715}
udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712}
ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657}
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611}
eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302}
udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544}
RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224}
dlm: fix possible lkb_resource…

Record: CLSA-2026-1783791447
Updated: 2026-11-02

OSV No score

arp: Prevent overflow in arp_req_get().

In the Linux kernel, the following vulnerability has been resolved:

arp: Prevent overflow in arp_req_get().

syzkaller reported an overflown write in arp_req_get(). [0]

When ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour entry and copies neigh->ha to struct arpreq.arp_ha.sa_data.

The arp_ha here is struct sockaddr, not struct sockaddr_storage, so the sa_data buffer is just 14 bytes.

In the splat below, 2 bytes are overflown to the next int field, arp_flags. We initialise the field just after the memcpy(), so it's not a problem.

However, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN), arp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL) in arp_ioctl() before calling arp_req_get().

To avoid the overflow, let's limit the max length of memcpy().

Note that commit b5f0de6df6dc ("net: dev: Convert sa_data to flexible array in struct sockaddr") just silenced syzkaller.

Record: CVE-2024-26733
Updated: 2026-11-02

OSVRLSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

Rocky Linux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux-23841)
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux-33437)
[Hyper-V][Rocky Linux-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux-40939)
(JIRA:Rocky Linux-31798)
(JIRA:Rocky Linux-10263)
(JIRA:Rocky Linux-40901)
(JIRA:Rocky Linux-43547)
(JIRA:Rocky Linux-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RLSA-2024:5101
Updated: 2026-11-02

OSVRLSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RLSA-2024:5102
Updated: 2026-11-02

OSVRXSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

Rocky Linux SIG Cloud8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux SIG Cloud-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux SIG Cloud-23841)
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux SIG Cloud-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux SIG Cloud-33437)
[Hyper-V][Rocky Linux SIG Cloud-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux SIG Cloud-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux SIG Cloud-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-40939)
(JIRA:Rocky Linux SIG Cloud-31798)
(JIRA:Rocky Linux SIG Cloud-10263)
(JIRA:Rocky Linux SIG Cloud-40901)
(JIRA:Rocky Linux SIG Cloud-43547)
(JIRA:Rocky Linux SIG Cloud-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux SIG Cloud-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RXSA-2024:5101
Updated: 2026-11-02

OSVSUSE-SU-2024:1454-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556).
CVE-2020-36782: Fixed a reference leak when pm_runtime_get_sync fails in i2c imx-lpi2c (bsc#1220560).
CVE-2020-36783: Fixed a reference leak when pm_runtime_get_sync fails in i2c img-scb (bsc#1220561).
CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
CVE-2021-46930: Fixed a list_head check warning caused by uninitialization of list_head in usb mtu3 (bsc#1220484).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46943: Fixed an oops in set_fmt error handling in media: staging/intel-ipu3 (bsc#1220583).
CVE-2021-46944: Fixed a memory leak in imu_fmt in media staging/intel-ipu3 (bsc#1220566).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46951: Fixed an integer underflow of efi_tpm_final_log_size in tpm_read_log_efi in tpm efi (bsc#1220615).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46961: Fixed an error on not enabling irqs when handling spurious interrups in irqchip/gic-v3 (bsc#1220529).
CVE-2021-46962: Fixed a resource leak in the remove function in mmc uniphier-sd (bsc#1220532).
CVE-2021-46963: Fixed a denial of service in qla2xxx_mqueuecommand() in scsi qla2xxx (bsc#1220536)
CVE-2021-46971: Fixed unconditional security_locked_down() call in perf/core (bsc#1220697).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON in userfaultfd (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47000: Fixed an inode leak on getattr error in __fh_to_dentry in ceph (bsc#1220669).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47013: Fixed a use after free in emac_mac_tx_buf_send (bsc#1220641).
CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
CVE-2021-47020: Fixed a memory leak in stream config error path in soundwire stream (bsc#1220785).
CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
CVE-2021-47051: Fixed a PM reference leak in lpspi_prepare_xfer_hardware() in spi fsl-lpspi (bsc#1220764).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
CVE-2021-47058: Fixed a possible user-after-free in set debugfs_name in regmap (bsc#1220779).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed a potential…

Record: SUSE-SU-2024:1454-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1465-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556).
CVE-2020-36781: Fixed reference leak when pm_runtime_get_sync fails in i2c/imx (bsc#1220557).
CVE-2020-36782: Fixed a reference leak when pm_runtime_get_sync fails in i2c imx-lpi2c (bsc#1220560).
CVE-2020-36783: Fixed a reference leak when pm_runtime_get_sync fails in i2c img-scb (bsc#1220561).
CVE-2021-46908: Fixed incorrect permission flag for mixed signed bounds arithmetic in bpf (bsc#1220425).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46911: Fixed kernel panic (bsc#1220400).
CVE-2021-46914: Fixed unbalanced device enable/disable in suspend/resume in pci_disable_device() (bsc#1220465).
CVE-2021-46917: Fixed wq cleanup of WQCFG registers in idxd (bsc#1220432).
CVE-2021-46918: Fixed not clearing MSIX permission entry on shutdown in idxd (bsc#1220429).
CVE-2021-46919: Fixed wq size store permission state in idxd (bsc#1220414).
CVE-2021-46920: Fixed clobbering of SWERR overflow bit on writeback (bsc#1220426).
CVE-2021-46921: Fixed ordering in queued_write_lock_slowpath (bsc#1220468).
CVE-2021-46922: Fixed TPM reservation for seal/unseal (bsc#1220475).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46943: Fixed an oops in set_fmt error handling in media: staging/intel-ipu3 (bsc#1220583).
CVE-2021-46944: Fixed a memory leak in imu_fmt in media staging/intel-ipu3 (bsc#1220566).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46951: Fixed an integer underflow of efi_tpm_final_log_size in tpm_read_log_efi in tpm efi (bsc#1220615).
CVE-2021-46956: Fixed memory leak in virtio_fs_probe() (bsc#1220516).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46959: Fixed use-after-free with devm_spi_alloc_* (bsc#1220734).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46961: Fixed spurious interrup handling (bsc#1220529).
CVE-2021-46962: Fixed a resource leak in the remove function in mmc uniphier-sd (bsc#1220532).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46971: Fixed unconditional security_locked_down() call (bsc#1220697).
CVE-2021-46976: Fixed crash in auto_retire in drm/i915 (bsc#1220621).
CVE-2021-46980: Fixed not retrieving all the PDOs instead of just the first 4 in usb/typec/ucsi (bsc#1220663).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46983: Fixed NULL pointer dereference when SEND is completed with error (bsc#1220639).
CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46991: Fixed a use-after-free in i40e_client_subtask (bsc#1220575).
CVE-2021-46992: Fixed a bug to avoid overflows in nft_hash_buckets (bsc#1220638).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47000: Fixed an inode leak on getattr error in __fh_to_dentry in ceph (bsc#1220669).
CVE-2021-47001: Fixed cwnd update ordering in xprtrdma (bsc#1220670).
CVE-2021-47003: Fixed…

Record: SUSE-SU-2024:1465-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1489-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2020-36781: Fixed reference leak when pm_runtime_get_sync fails in i2c/imx (bsc#1220557).
CVE-2021-46911: Fixed kernel panic (bsc#1220400).
CVE-2021-46914: Fixed unbalanced device enable/disable in suspend/resume in pci_disable_device() (bsc#1220465).
CVE-2021-46917: Fixed wq cleanup of WQCFG registers in idxd (bsc#1220432).
CVE-2021-46918: Fixed not clearing MSIX permission entry on shutdown in idxd (bsc#1220429).
CVE-2021-46919: Fixed wq size store permission state in idxd (bsc#1220414).
CVE-2021-46920: Fixed clobbering of SWERR overflow bit on writeback (bsc#1220426).
CVE-2021-46922: Fixed TPM reservation for seal/unseal (bsc#1220475).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46956: Fixed memory leak in virtio_fs_probe() (bsc#1220516).
CVE-2021-46959: Fixed use-after-free with devm_spi_alloc_* (bsc#1220734).
CVE-2021-46961: Fixed spurious interrup handling (bsc#1220529).
CVE-2021-46971: Fixed unconditional security_locked_down() call (bsc#1220697).
CVE-2021-46976: Fixed crash in auto_retire in drm/i915 (bsc#1220621).
CVE-2021-46980: Fixed not retrieving all the PDOs instead of just the first 4 in usb/typec/ucsi (bsc#1220663).
CVE-2021-46983: Fixed NULL pointer dereference when SEND is completed with error (bsc#1220639).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-47001: Fixed cwnd update ordering in xprtrdma (bsc#1220670).
CVE-2021-47003: Fixed potential null dereference on pointer status in idxd_cmd_exec (bsc#1220677).
CVE-2021-47009: Fixed memory leak on object td (bsc#1220733).
CVE-2021-47014: Fixed wild memory access when clearing fragments in net/sched/act_ct (bsc#1220630).
CVE-2021-47017: Fixed use after free in ath10k_htc_send_bundle (bsc#1220678).
CVE-2021-47026: Fixed not destroying sysfs after removing session from active list (bsc#1220685).
CVE-2021-47035: Fixed wrong WO permissions on second-level paging entries in iommu/vt-d (bsc#1220688).
CVE-2021-47038: Fixed deadlock between hci_dev->lock and socket lock in bluetooth (bsc#1220753).
CVE-2021-47044: Fixed shift-out-of-bounds in load_balance() in sched/fair (bsc#1220759).
CVE-2021-47046: Fixed off by one in hdmi_14_process_transaction() (bsc#1220758).
CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47109: Fixed NUD_NOARP entries to be forced GCed (bsc#1221534).
CVE-2021-47130: Fixed freeing unallocated p2pmem in nvmet (bsc#1221552).
CVE-2021-47137: Fixed memory corruption in RX ring in net/lantiq (bsc#1221932).
CVE-2021-47150: Fixed the potential memory leak in fec_enet_init() (bsc#1221973).
CVE-2021-47160: Fixed VLAN traffic leaks in dsa: mt7530 (bsc#1221974).
CVE-2021-47164: Fixed null pointer dereference accessing lag dev in net/mlx5e (bsc#1221978).
CVE-2021-47174: Fixed missing check in irq_fpu_usable() (bsc#1221990).
CVE-2021-47175: Fixed OOB access in net/sched/fq_pie (bsc#1222003).
CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660).
CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
CVE-2021-47189: Fixed denial of service due to memory…

Record: SUSE-SU-2024:1489-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1490-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi (bsc#1220478).
CVE-2021-46927: Fixed assertion bug in nitro_enclaves: Use get_user_pages_unlocked() (bsc#1220443).
CVE-2021-46929: Fixed use-after-free issue in sctp_sock_dump() (bsc#1220482).
CVE-2021-46930: Fixed usb/mtu3 list_head check warning (bsc#1220484).
CVE-2021-46931: Fixed wrong type casting in mlx5e_tx_reporter_dump_sq() (bsc#1220486).
CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
CVE-2021-47082: Fixed ouble free in tun_free_netdev() (bsc#1220969).
CVE-2021-47087: Fixed incorrect page free bug in tee/optee (bsc#1220954).
CVE-2021-47091: Fixed locking in ieee80211_start_ap()) error path (bsc#1220959).
CVE-2021-47093: Fixed memleak on registration failure in intel_pmc_core (bsc#1220978).
CVE-2021-47094: Fixed possible memory leak in KVM x86/mmu (bsc#1221551).
CVE-2021-47095: Fixed missing initialization in ipmi/ssif (bsc#1220979).
CVE-2021-47096: Fixed uninitalized user_pversion in ALSA rawmidi (bsc#1220981).
CVE-2021-47097: Fixed stack out of bound access in elantech_change_report_id() (bsc#1220982).
CVE-2021-47098: Fixed integer overflow/underflow in hysteresis calculations hwmon: (lm90) (bsc#1220983).
CVE-2021-47099: Fixed BUG_ON assertion in veth when skb entering GRO are cloned (bsc#1220955).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47102: Fixed incorrect structure access In line: upper = info->upper_dev in net/marvell/prestera (bsc#1221009).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47105: Fixed potential memory leak in ice/xsk (bsc#1220961).
CVE-2021-47107: Fixed READDIR buffer overflow in NFSD (bsc#1220965).
CVE-2021-47108: Fixed possible NULL pointer dereference for mtk_hdmi_conf in drm/mediatek (bsc#1220986).
CVE-2021-47181: Fixed a null pointer dereference caused by calling platform_get_resource() (bsc#1222660).
CVE-2021-47182: Fixed buffer length handling in scsi_mode_sense() in scsi core (bsc#1222662).
CVE-2021-47183: Fixed a null pointer dereference during link down processing in scsi lpfc (bsc#1192145, bsc#1222664).
CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706).
CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
CVE-2022-48626: Fixed a potential use-after-free on remove path moxart (bsc#1220366).
CVE-2022-48629: Fixed possible memory leak in qcom-rng (bsc#1220989).
CVE-2022-48630: Fixed infinite loop on requests not multiple of WORD_SZ in crypto: qcom-rng (bsc#1220990).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2023-35827: Fixed a use-after-free issue in ravb_tx_timeout_work() (bsc#1212514).
CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround (bsc#1220251).
CVE-2023-52450: Fixed NULL pointer dereference issue in upi_fill_topology() (bsc#1220237).
CVE-2023-52453: Fixed data corruption in hisi_acc_vfio_pci (bsc#1220337).
CVE-2023-52454: Fixed a kernel panic when host sends an invalid H2C PDU length…

Record: SUSE-SU-2024:1490-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1641-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 LTSS kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).
CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
CVE-2024-26727: Fixed assertion if a newly created btrfs subvolume already gets read (bsc#1222536).
CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-25742: Fixed insufficient validation during #VC instruction emulation in x86/sev (bsc#1221725).
CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-0841: Fixed a null pointer dereference in the hugetlbfs_fill_super function in hugetlbfs (HugeTLB pages) functionality (bsc#1219264).
CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479).
CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).
CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222117).
CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).
CVE-2023-52607: Fixed NULL pointer dereference in pgtable_cache_add kasprintf() (bsc#1221061).
CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
CVE-2023-52590: Fixed a possible ocfs2 filesystem corruption via directory renaming (bsc#1221088).
CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).
CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).
CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
CVE-2021-47202: Fixed NULL pointer dereferences in of_thermal_ functions (bsc#1222878)
CVE-2021-47195: Fixed use-after-free inside SPI via add_lock mutex (bsc#1222832).
CVE-2021-47189: Fixed denial of service due to memory ordering issues between normal and ordered work functions in btrfs (bsc#1222706).
CVE-2021-47185: Fixed a softlockup issue in flush_to_ldisc in tty tty_buffer (bsc#1222669).
CVE-2021-47183:…

Record: SUSE-SU-2024:1641-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1642-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
CVE-2021-47113: Abort btrfs rename_exchange if we fail to insert the second ref (bsc#1221543).
CVE-2021-47131: Fixed a use-after-free after the TLS device goes down and up (bsc#1221545).
CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2022-48631: Fixed a bug in ext4, when parsing extents where eh_entries == 0 and eh_depth > 0 (bsc#1223475).
CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).
CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
CVE-2021-47041: Don't set sk_user_data without write_lock (bsc#1220755).
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2024-26744: Fixed null pointer dereference in srpt_service_guid parameter in rdma/srpt (bsc#1222449).

The following non-security bugs were fixed:

dm rq: do not queue request to blk-mq during DM suspend (bsc#1221113).
dm: rearrange core declarations for extended use from dm-zone.c (bsc#1221113).
net/tls: Remove the context from the list in tls_device_down (bsc#1221545).
tls: Fix context leak on tls_device_down (bsc#1221545).

Record: SUSE-SU-2024:1642-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1643-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509).
CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47113: Abort…

Record: SUSE-SU-2024:1643-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1644-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-27042: Fixed drm/amdgpu for potential out-of-bounds access in amdgpu_discovery_reg_base_init() (bsc#1223823).
CVE-2024-27041: Fixed drm/amd/display NULL checks for adev->dm.dc in amdgpu_dm_fini() (bsc#1223714).
CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-26939: Fixed drm/i915/vma UAF on destroy against retire race (bsc#1223679).
CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
CVE-2024-26915: Fixed drm/amdgpu reset IH OVERFLOW_CLEAR bit (bsc#1223207).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26898: Fixed aoe potential use-after-free problem in aoecmd_cfg_pkts (bsc#1223016).
CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26876: Fixed drm/bridge/adv7511 crash on irq during probe (bsc#1223119).
CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
CVE-2024-26857: Fixed geneve to make sure to pull inner header in…

Record: SUSE-SU-2024:1644-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1646-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47114: Fixed a data corruption by fallocate in ocfs2 (bsc#1221548).
CVE-2021-47117: Fixed a crash in ext4_es_cache_extent as ext4_split_extent_at failed in ext4 (bsc#1221575).
CVE-2021-47118: Fixed an use-after-free in init task's struct pid in pid (bsc#1221605).
CVE-2021-47119: Fixed a memory leak in ext4_fill_super in ext4 (bsc#1221608). -…

Record: SUSE-SU-2024:1646-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1647-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223505).
CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
CVE-2023-52616: Fixed unexpected pointer access in crypto/lib/mpi in mpi_ec_init (bsc#1221612).
CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).
CVE-2021-47207: Fixed a null pointer dereference on pointer block in gus (bsc#1222790).
CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
CVE-2024-26687: Fixed xen/events close evtchn after mapping cleanup (bsc#1222435).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222726).
CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
CVE-2023-52500: Fixed information leaking when processing OPC_INB_SET_CONTROLLER_CONFIG command (bsc#1220883).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2023-7192: Fixed a memory leak problem in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c (bsc#1218479).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2023-52607: Fixed NULL pointer dereference in pgtable_cache_add kasprintf() (bsc#1221061).
CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
CVE-2023-52476: Fixed possible unhandled page fault via perf sampling NMI during vsyscall (bsc#1220703).

The following non-security bugs were fixed:

Call flush_delayed_fput() from nfsd main-loop (bsc#1223380).
ibmvfc: make 'max_sectors' a module option (bsc#1216223).
scsi: Update max_hw_sectors on rescan (bsc#1216223).

Record: SUSE-SU-2024:1647-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1650-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
CVE-2021-47113: Abort btrfs rename_exchange if we fail to insert the second ref (bsc#1221543).
CVE-2021-47131: Fixed a use-after-free after the TLS device goes down and up (bsc#1221545).
CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2022-48631: Fixed a bug in ext4, when parsing extents where eh_entries == 0 and eh_depth > 0 (bsc#1223475).
CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).
CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
CVE-2021-47041: Don't set sk_user_data without write_lock (bsc#1220755).
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2024-26744: Fixed null pointer dereference in srpt_service_guid parameter in rdma/srpt (bsc#1222449).

The following non-security bugs were fixed:

net/tls: Remove the context from the list in tls_device_down (bsc#1221545).
tls: Fix context leak on tls_device_down (bsc#1221545).

Record: SUSE-SU-2024:1650-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1659-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26760: Fixed scsi/target/pscsi bio_put() for error case (bsc#1222596).
CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-27041: Fixed drm/amd/display NULL checks for adev->dm.dc in amdgpu_dm_fini() (bsc#1223714).
CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
CVE-2024-26857: Fixed geneve to make sure to pull inner header in geneve_rx() (bsc#1223058).
CVE-2024-26856: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052).
CVE-2024-26855: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051).
CVE-2024-26853: Fixed igc returning frame twice in XDP_REDIRECT (bsc#1223061).
CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify()…

Record: SUSE-SU-2024:1659-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1663-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Real Time kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-27041: Fixed drm/amd/display NULL checks for adev->dm.dc in amdgpu_dm_fini() (bsc#1223714).
CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
CVE-2024-26857: Fixed geneve to make sure to pull inner header in geneve_rx() (bsc#1223058).
CVE-2024-26856: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052).
CVE-2024-26855: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051).
CVE-2024-26853: Fixed igc returning frame twice in XDP_REDIRECT (bsc#1223061).
CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).
CVE-2024-26848: Fixed afs endless loop in directory parsing…

Record: SUSE-SU-2024:1663-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1669-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
CVE-2022-48619: Fixed a denial-of-service issue in drivers/input/input.c (bsc#1218220).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219295).
CVE-2021-46932: Initialized work before appletouch device registration (bsc#1220444).
CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
CVE-2023-52475: Fixed a use-after-free in powermate_config_complete() (bsc#1220649).
CVE-2023-52445: Fixed a use-after-free on context disconnection in pvrusb2 (bsc#1220241).
CVE-2023-52429: Limited the number of targets and parameter size area for device mapper (bsc#1219146).
CVE-2023-51780: Fixed a use-after-free in do_vcc_ioctl() related to a vcc_recvmsg race condition (bsc#1218730).
CVE-2023-51782: Fixed a use-after-free in rose_ioctl() related to a rose_accept race condition (bsc#1218757).
CVE-2023-31083: Fixed a NULL pointer dereference in hci_uart_tty_ioctl() (bsc#1210780).

The following non-security bugs were fixed:

KVM: VMX: Move VERW closer to VMentry for MDS mitigation (git-fixes).
KVM: VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (git-fixes).
tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (bsc#1222619).
x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (git-fixes).
x86/bugs: Add asm helpers for executing VERW (bsc#1213456).
x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (git-fixes).
x86/entry_32: Add VERW just before userspace transition (git-fixes).
x86/entry_64: Add VERW just before userspace transition (git-fixes).

Record: SUSE-SU-2024:1669-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1870-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509).
CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed double free of blk_mq_tag_set in dev remove after table load fails (bsc#1220554).
CVE-2021-46939: Fixed possible hung in trace_clock_global() (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed possible data corruption in md/raid1 when ending a failed write request (bsc#1220662).
CVE-2021-46958: Fixed race between transaction aborts and fsyncs that could lead to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed wrong error code from smb2_get_enc_key() (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed NULL pointer in flush_workqueue (bsc#1220611).
CVE-2021-46988: Fixed possible crash in userfaultfd due to unreleased page (bsc#1220706).
CVE-2021-46990: Fixed crashes when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed a use after free bug in enic_hard_start_xmit() (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed RX consumer index logic in the error path in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed resolved pte update for kernel memory on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed null pointer dereference in lpfc_prep_els_iocb() (bsc#1220640).
CVE-2021-47049: Fixed Use after free in __vmbus_open() (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed uninitialized lock in adf_vf2pf_shutdown() (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed possible use-after-free in panel_bridge_detach() (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47114: Fixed data corruption by fallocate in ocfs2 (bsc#1221548).
CVE-2021-47117: Fixed bug on in ext4_es_cache_extent() as ext4_split_extent_at() failed (bsc#1221575).
CVE-2021-47118: Fixed possible use-after-free when initializing cad_pid (bsc#1221605). -…

Record: SUSE-SU-2024:1870-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2023-6270: Fixed a use-after-free issue in…

Record: SUSE-SU-2024:2135-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2203-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26632: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635).
CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26704: Fixed a…

Record: SUSE-SU-2024:2203-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…

Record: SUSE-SU-2024:2973-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
CVE-2024-35890:…

Record: SUSE-SU-2025:20008-1
Updated: 2026-11-02

OSVUSN-6820-1 No score

linux, linux-gcp, linux-gcp-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-xilinx-zynqmp vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26776, CVE-2024-26802, CVE-2024-26790, CVE-2024-27388, CVE-2024-27077, CVE-2024-26884, CVE-2024-26779, CVE-2024-26897, CVE-2024-27045, CVE-2024-26851, CVE-2024-27065, CVE-2024-26843, CVE-2024-26743, CVE-2024-27052, CVE-2024-26855, CVE-2024-27436, CVE-2024-27078, CVE-2024-26898, CVE-2024-27405, CVE-2024-26894, CVE-2024-26584, CVE-2024-26915, CVE-2024-26763, CVE-2024-27047, CVE-2024-26809, CVE-2024-26883, CVE-2024-26901, CVE-2024-27412, CVE-2024-26803, CVE-2024-26751, CVE-2024-35829, CVE-2024-27432, CVE-2023-52447, CVE-2024-26748, CVE-2024-27051, CVE-2023-52434, CVE-2024-26749, CVE-2024-27034, CVE-2024-27390, CVE-2024-26879, CVE-2024-26859, CVE-2024-26835, CVE-2024-26861, CVE-2024-27030, CVE-2024-27415, CVE-2023-52656, CVE-2024-26773, CVE-2024-27043, CVE-2024-26601, CVE-2024-27073, CVE-2024-26782, CVE-2024-27413, CVE-2024-26880, CVE-2024-26793, CVE-2024-26766, CVE-2024-26750, CVE-2024-26852, CVE-2024-26805, CVE-2024-35830, CVE-2024-26798, CVE-2023-52644, CVE-2024-26787, CVE-2024-26846,…

Record: USN-6820-1
Updated: 2026-11-02

Affected products

Show 18 moreShow less

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-rt` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-kvm` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`linux-lts` Alpaquita:23	6.1.74-r0 up to 6.1.81-r0	6.1.81-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`linux-buildinfo-4.15.0-230-tuxcare.els18-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-buildinfo-4.15.0-230-tuxcare.els18-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-cloud-tools-4.15.0-230-tuxcare.els18` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-cloud-tools-4.15.0-230-tuxcare.els18-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-cloud-tools-4.15.0-230-tuxcare.els18-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-cloud-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-cloud-tools-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-cloud-tools-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-crashdump` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-doc` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-headers-4.15.0-230-tuxcare.els18` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-headers-4.15.0-230-tuxcare.els18-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-headers-4.15.0-230-tuxcare.els18-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-headers-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-headers-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-image-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-image-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-image-unsigned-4.15.0-230-tuxcare.els18-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-image-unsigned-4.15.0-230-tuxcare.els18-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-libc-dev` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-modules-4.15.0-230-tuxcare.els18-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-modules-4.15.0-230-tuxcare.els18-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-modules-extra-4.15.0-230-tuxcare.els18-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-source` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-source-4.15.0` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-tools-4.15.0-230-tuxcare.els18` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-tools-4.15.0-230-tuxcare.els18-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-tools-4.15.0-230-tuxcare.els18-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-tools-generic` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-tools-host` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0-230.241	4.15.0-230.241
`linux-tools-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 22 CVEs	before 4.15.0.230.241	4.15.0.230.241
`linux-buildinfo-4.4.0-258-tuxcare.els29-generic` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0-258.292	4.4.0-258.292
`linux-buildinfo-4.4.0-258-tuxcare.els29-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0-258.292	4.4.0-258.292
`linux-cloud-tools-4.4.0-258-tuxcare.els29` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0-258.292	4.4.0-258.292
`linux-cloud-tools-4.4.0-258-tuxcare.els29-generic` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0-258.292	4.4.0-258.292
`linux-cloud-tools-4.4.0-258-tuxcare.els29-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0-258.292	4.4.0-258.292
`linux-cloud-tools-common` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0-258.292	4.4.0-258.292
`linux-cloud-tools-generic` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0.258.292	4.4.0.258.292
`linux-cloud-tools-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0.258.292	4.4.0.258.292
`linux-crashdump` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0.258.292	4.4.0.258.292
`linux-doc` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0-258.292	4.4.0-258.292
`linux-generic` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0.258.292	4.4.0.258.292
`linux-headers-4.4.0-258-tuxcare.els29` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0-258.292	4.4.0-258.292
`linux-headers-4.4.0-258-tuxcare.els29-generic` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0-258.292	4.4.0-258.292
`linux-headers-4.4.0-258-tuxcare.els29-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0-258.292	4.4.0-258.292
`linux-headers-generic` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0.258.292	4.4.0.258.292
`linux-headers-lowlatency` TuxCare:Ubuntu:16.04 From an advisory covering 21 CVEs	before 4.4.0.258.292	4.4.0.258.292
`Kernel` Linux	2.6.12 up to 5.10.211, 5.11.0 up to 5.15.150, 5.16.0 up to 6.1.80, 6.2.0 up to 6.6.19, 6.7.0 up to 6.7.7	5.10.2115.15.1506.1.806.6.196.7.7
`linux` Debian:12	before 6.1.82-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 13 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1	6.1.82-1
`linux` Debian:13	before 6.7.7-1	6.7.7-1
`linux` Debian:14	before 6.7.7-1	6.7.7-1
`linux-5.10` Debian:10 From an advisory covering 344 CVEs	before 5.10.216-1~deb10u1, plus listed versions 5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1 Show 8 moreShow less 5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1	5.10.216-1~deb10u1
`linux` Debian:11 From an advisory covering 246 CVEs	before 5.10.216-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 34 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.216-1
`kernel` openEuler:20.03-LTS-SP1 From an advisory covering 61 CVEs	before 4.19.90-2405.3.0.0249.oe1	4.19.90-2405.3.0.0249.oe1
`kernel` openEuler:20.03-LTS-SP4 From an advisory covering 63 CVEs	before 4.19.90-2405.3.0.0276.oe2003sp4	4.19.90-2405.3.0.0276.oe2003sp4
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 77 CVEs	before 5.10.0-199.0.0.112.oe2203sp3	5.10.0-199.0.0.112.oe2203sp3
`kernel` openEuler:22.03-LTS From an advisory covering 76 CVEs	before 5.10.0-60.138.0.165.oe2203	5.10.0-60.138.0.165.oe2203
`kernel` openEuler:22.03-LTS-SP1 From an advisory covering 71 CVEs	before 5.10.0-136.76.0.156.oe2203sp1	5.10.0-136.76.0.156.oe2203sp1
`kernel` openEuler:22.03-LTS-SP2 From an advisory covering 64 CVEs	before 5.10.0-153.55.0.133.oe2203sp2	5.10.0-153.55.0.133.oe2203sp2
`bpftool` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`bpftool-debuginfo` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-abi-stablelists` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-core` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug-core` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug-debuginfo` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug-devel` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug-modules` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug-modules-extra` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debuginfo` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debuginfo-common-x86_64` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-devel` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-doc` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-modules` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-modules-extra` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-tools` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-tools-debuginfo` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-tools-libs` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`perf` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`perf-debuginfo` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`python3-perf` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`python3-perf-debuginfo` Red Hat:rhel_aus:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`bpftool` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`bpftool-debuginfo` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-abi-stablelists` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-core` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug-core` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug-debuginfo` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug-devel` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug-modules` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debug-modules-extra` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debuginfo` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debuginfo-common-aarch64` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debuginfo-common-ppc64le` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debuginfo-common-s390x` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-debuginfo-common-x86_64` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-devel` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-doc` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-modules` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-modules-extra` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-tools` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-tools-debuginfo` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-tools-libs` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-zfcpdump` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-zfcpdump-core` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel-zfcpdump-debuginfo` Red Hat:rhel_e4s:8.6::baseos From an advisory covering 13 CVEs	before 0:4.18.0-372.113.1.el8_6	0:4.18.0-372.113.1.el8_6
`kernel` Rocky Linux:8 From an advisory covering 160 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel` Rocky Linux:8 From an advisory covering 160 CVEs	before 0:4.18.0-553.16.1.el8_10.cloud.0.1	0:4.18.0-553.16.1.el8_10.cloud.0.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-livepatch-SLE15-SP2_Update_47` SUSE:Linux Enterprise Live Patching 15 SP2 From an advisory covering 114 CVEs	before 1-150200.5.3.3	1-150200.5.3.3
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1.150200.9.95.3	5.3.18-150200.24.188.1.150200.9.95.3
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-preempt` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1.150200.9.95.3	5.3.18-150200.24.188.1.150200.9.95.3
`kernel-docs` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-preempt` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1.150200.9.95.3	5.3.18-150200.24.188.1.150200.9.95.3
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-preempt` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 114 CVEs	before 5.3.18-150200.24.188.1	5.3.18-150200.24.188.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 145 CVEs	before 5.3.18-150300.166.1	5.3.18-150300.166.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 145 CVEs	before 5.3.18-150300.166.1	5.3.18-150300.166.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 145 CVEs	before 5.3.18-150300.166.1	5.3.18-150300.166.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 145 CVEs	before 5.3.18-150300.166.1	5.3.18-150300.166.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-livepatch-SLE15-SP3_Update_43` SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 157 CVEs	before 1-150300.7.3.5	1-150300.7.3.5
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP3 From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1.150300.18.92.5	5.3.18-150300.59.158.1.150300.18.92.5
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-preempt` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1.150300.18.92.5	5.3.18-150300.59.158.1.150300.18.92.5
`kernel-docs` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-preempt` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 157 CVEs	before 5.3.18-150300.59.158.1	5.3.18-150300.59.158.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 183 CVEs	before 5.14.21-150500.33.48.1	5.14.21-150500.33.48.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 183 CVEs	before 5.14.21-150500.33.48.1	5.14.21-150500.33.48.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 183 CVEs	before 5.14.21-150500.33.48.1	5.14.21-150500.33.48.1
`kernel-default` openSUSE:Leap Micro 5.3 From an advisory covering 90 CVEs	before 5.14.21-150400.24.119.1	5.14.21-150400.24.119.1
`kernel-default-base` openSUSE:Leap Micro 5.3 From an advisory covering 90 CVEs	before 5.14.21-150400.24.119.1.150400.24.56.1	5.14.21-150400.24.119.1.150400.24.56.1
`kernel-default` openSUSE:Leap Micro 5.4 From an advisory covering 90 CVEs	before 5.14.21-150400.24.119.1	5.14.21-150400.24.119.1
`kernel-default-base` openSUSE:Leap Micro 5.4 From an advisory covering 90 CVEs	before 5.14.21-150400.24.119.1.150400.24.56.1	5.14.21-150400.24.119.1.150400.24.56.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-rt` openSUSE:Leap Micro 5.3 From an advisory covering 87 CVEs	before 5.14.21-150400.15.79.1	5.14.21-150400.15.79.1
`kernel-rt` openSUSE:Leap Micro 5.4 From an advisory covering 87 CVEs	before 5.14.21-150400.15.79.1	5.14.21-150400.15.79.1
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.1	5.14.21-150500.55.62.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2.150500.6.27.2	5.14.21-150500.55.62.2.150500.6.27.2
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.1	5.14.21-150500.55.62.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.1	5.14.21-150500.55.62.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.1	6.4.0-150600.8.5.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3.150600.12.2.7	6.4.0-150600.23.7.3.150600.12.2.7
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.4	6.4.0-150600.23.7.4
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.2	6.4.0-150600.23.7.2
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`linux-aws` Ubuntu:Pro:14.04:LTS	before 4.4.0-1136.142, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	4.4.0-1136.142
`linux-azure` Ubuntu:Pro:14.04:LTS	before 4.15.0-1181.196~14.04.1, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	4.15.0-1181.196~14.04.1
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	before 4.4.0-259.293~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	4.4.0-259.293~14.04.1
`linux` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less 3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70	None known
`linux` Ubuntu:Pro:16.04:LTS	before 4.4.0-259.293, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	4.4.0-259.293
`linux-aws` Ubuntu:Pro:16.04:LTS	before 4.4.0-1174.189, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	4.4.0-1174.189
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-1173.186~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	4.15.0-1173.186~16.04.1
`linux-azure` Ubuntu:Pro:16.04:LTS	before 4.15.0-1181.196~16.04.1, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	4.15.0-1181.196~16.04.1
`linux-gcp` Ubuntu:Pro:16.04:LTS	before 4.15.0-1166.183~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	4.15.0-1166.183~16.04.1
`linux-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-229.241~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	4.15.0-229.241~16.04.1
`linux-kvm` Ubuntu:Pro:16.04:LTS	before 4.4.0-1137.147, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	4.4.0-1137.147
`linux-oracle` Ubuntu:Pro:16.04:LTS	before 4.15.0-1135.146~16.04.1, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	4.15.0-1135.146~16.04.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	before 4.4.0-1105.112, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	4.4.0-1105.112
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	before 4.15.0-229.241, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	4.15.0-229.241
`linux-aws` Ubuntu:Pro:18.04:LTS	before 4.15.0-1173.186, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	4.15.0-1173.186
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1126.136~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1126.136~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1181.196, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	4.15.0-1181.196
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1131.138~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1131.138~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1166.183, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	4.15.0-1166.183
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1130.139~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1130.139~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-186.206~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-186.206~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1073.78~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 44 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.1	5.4.0-1073.78~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	before 4.15.0-1156.161, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	4.15.0-1156.161
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	before 4.15.0-1135.146, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	4.15.0-1135.146
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1125.134~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1125.134~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1110.122~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1110.122~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2111.117, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	4.15.0-2111.117
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2090.96, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	4.15.0-2090.96
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-1127.138, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	4.15.0-1127.138
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2074.79, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 41 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.78	4.15.0-2074.79
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26733 is a medium vulnerability (CVSS 5.5) in Debian Linux, published April 3, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. Fixed in linux-lts 6.1.81-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 948 package rows, 1,436 versions, 7,228 references and the rest of 25 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 19 source records.