Every CVE Search/ Get API key

CVE-2024-26812

vfio/pci: Create persistent INTx handler

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Create persistent INTx handler

A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL context through the SET_IRQS ioctl or through unmask irqfd if the device interrupt is pending.

Ideally this could be solved with some additional locking; the igate mutex serializes the ioctl and config space accesses, and the interrupt handler is unregistered relative to the trigger, but the irqfd path runs asynchronous to those. The igate mutex cannot be acquired from the atomic context of the eventfd wake function. Disabling the irqfd relative to the eventfd registration is potentially incompatible with existing userspace.

As a result, the solution implemented here moves configuration of the INTx interrupt handler to track the lifetime of the INTx context object and irq_type configuration, rather than registration of a particular trigger eventfd. Synchronization is added between the ioctl path and eventfd_signal() wrapper such that the eventfd trigger can be dynamically updated relative to in-flight interrupts or irqfd callbacks.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.25%Up 0.2 points since Apr 6, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.8

vfio/pci: Create persistent INTx handler

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Create persistent INTx handler

A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL context through the SET_IRQS ioctl or through unmask irqfd if the device interrupt is pending.

Ideally this could be solved with some additional locking; the igate mutex serializes the ioctl and config space accesses, and the interrupt handler is unregistered relative to the trigger, but the irqfd path runs asynchronous to those. The igate mutex cannot be acquired from the atomic context of the eventfd wake function. Disabling the irqfd relative to the eventfd registration is potentially incompatible with existing userspace.

As a result, the solution implemented here moves configuration of the INTx interrupt handler to track the lifetime of the INTx context object and irq_type configuration, rather than registration of a particular trigger eventfd. Synchronization is added between the ioctl path and eventfd_signal() wrapper such that the eventfd trigger can be dynamically updated relative to in-flight interrupts or irqfd callbacks.

Record
CVE-2024-26812
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2024-24074 7.8

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Create persistent INTx handler

A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL context through the SET_IRQS ioctl or through unmask irqfd if the device interrupt is pending.

Ideally this could be solved with some additional locking; the igate mutex serializes the ioctl and config space accesses, and the interrupt handler is unregistered relative to the trigger, but the irqfd path runs asynchronous to those. The igate mutex cannot be acquired from the atomic context of the eventfd wake function. Disabling the irqfd relative to the eventfd registration is potentially incompatible with existing userspace.

As a result, the solution implemented here moves configuration of the INTx interrupt handler to track the lifetime of the INTx context object and irq_type configuration, rather than registration of a particular trigger eventfd. Synchronization is added between the ioctl path and eventfd_signal() wrapper such that the eventfd trigger can be dynamically updated relative to in-flight interrupts or irqfd callbacks.

Record
EUVD-2024-24074
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-p8g6-7v7w-4whg 5.5

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Create persistent...

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Create persistent INTx handler

A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL context through the SET_IRQS ioctl or through unmask irqfd if the device interrupt is pending.

Ideally this could be solved with some additional locking; the igate mutex serializes the ioctl and config space accesses, and the interrupt handler is unregistered relative to the trigger, but the irqfd path runs asynchronous to those. The igate mutex cannot be acquired from the atomic context of the eventfd wake function. Disabling the irqfd relative to the eventfd registration is potentially incompatible with existing userspace.

As a result, the solution implemented here moves configuration of the INTx interrupt handler to track the lifetime of the INTx context object and irq_type configuration, rather than registration of a particular trigger eventfd. Synchronization is added between the ioctl path and eventfd_signal() wrapper such that the eventfd trigger can be dynamically updated relative to in-flight interrupts or irqfd callbacks.

Record
GHSA-p8g6-7v7w-4whg
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Create persistent INTx handler

A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL context through the SET_IRQS ioctl or through unmask irqfd if the device interrupt is pending.

Ideally this could be solved with some additional locking; the igate mutex serializes the ioctl and config space accesses, and the interrupt handler is unregistered relative to the trigger, but the irqfd path runs asynchronous to those. The igate mutex cannot be acquired from the atomic context of the eventfd wake function. Disabling the irqfd relative to the eventfd registration is potentially incompatible with existing userspace.

As a result, the solution implemented here moves configuration of the INTx interrupt handler to track the lifetime of the INTx context object and irq_type configuration, rather than registration of a particular trigger eventfd. Synchronization is added between the ioctl path and eventfd_signal() wrapper such that the eventfd trigger can be dynamically updated relative to in-flight interrupts or irqfd callbacks.

Record
CVE-2024-26812
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVAZL-58836 5.5

CVE-2024-26812 affecting package kernel for versions less than 5.15.176.3-3

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Create persistent INTx handler

A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL context through the SET_IRQS ioctl or through unmask irqfd if the device interrupt is pending.

Ideally this could be solved with some additional locking; the igate mutex serializes the ioctl and config space accesses, and the interrupt handler is unregistered relative to the trigger, but the irqfd path runs asynchronous to those. The igate mutex cannot be acquired from the atomic context of the eventfd wake function. Disabling the irqfd relative to the eventfd registration is potentially incompatible with existing userspace.

As a result, the solution implemented here moves configuration of the INTx interrupt handler to track the lifetime of the INTx context object and irq_type configuration, rather than registration of a particular trigger eventfd. Synchronization is added between the ioctl path and eventfd_signal() wrapper such that the eventfd trigger can be dynamically updated relative to in-flight interrupts or irqfd callbacks.

Record
AZL-58836
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2024-26812 5.5
Record
BELL-CVE-2024-26812
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 45 moreShow less
OSV 7.8

vfio/pci: Create persistent INTx handler

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Create persistent INTx handler

A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL context through the SET_IRQS ioctl or through unmask irqfd if the device interrupt is pending.

Ideally this could be solved with some additional locking; the igate mutex serializes the ioctl and config space accesses, and the interrupt handler is unregistered relative to the trigger, but the irqfd path runs asynchronous to those. The igate mutex cannot be acquired from the atomic context of the eventfd wake function. Disabling the irqfd relative to the eventfd registration is potentially incompatible with existing userspace.

As a result, the solution implemented here moves configuration of the INTx interrupt handler to track the lifetime of the INTx context object and irq_type configuration, rather than registration of a particular trigger eventfd. Synchronization is added between the ioctl path and eventfd_signal() wrapper such that the eventfd trigger can be dynamically updated relative to in-flight interrupts or irqfd callbacks.

Record
CVE-2024-26812
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-26812 5.5

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Create persistent INTx handler A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL context through the SET_IRQS ioctl or through unmask irqfd if the device interrupt is pending. Ideally this could be solved with some additional locking; the igate mutex serializes the ioctl and config space accesses, and the interrupt handler is unregistered relative to the trigger, but the irqfd path runs asynchronous to those. The igate mutex cannot be acquired from the atomic context of the eventfd wake function. Disabling the irqfd relative to the eventfd registration is potentially incompatible with existing userspace. As a result, the solution implemented here moves configuration of the INTx interrupt handler to track the lifetime of the INTx context object and irq_type configuration, rather than registration of a particular trigger eventfd. Synchronization is added between the ioctl path and eventfd_signal() wrapper such that the eventfd trigger can be dynamically updated relative to in-flight interrupts or irqfd callbacks.

Record
DEBIAN-CVE-2024-26812
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1617 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate.

Note, writing '0' to kvmclock MSR doesn't clear memory location, it just prevents hypervisor from updating the location so for the short while after write and while CPU is still alive, the clock remains usable and correct so we don't need to switch to some other clocksource.(CVE-2021-47110)

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

Remove the reason of null pointer dereference in sync VSI filters. Added new I40E_VSI_RELEASING flag to signalize deleting and releasing of VSI resources to sync this thread with sync filters subtask. Without this patch it is possible to start update the VSI filter list after VSI is removed, that's causing a kernel oops.(CVE-2021-47184)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

CPU: 0 PID: 7789 Comm: stress Not tainted 6.0.0-rc1-00002-g0d53d2e882f9 #3 Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 Call Trace: <TASK> .. __mutex_lock+0xe5/0xc30 .. z_erofs_do_read_page+0x8ce/0x1560 .. z_erofs_readahead+0x31c/0x580 .. Freed by task 7787 kasan_save_stack+0x1e/0x40 kasan_set_track+0x20/0x30 kasan_set_free_info+0x20/0x40 __kasan_slab_free+0x10c/0x190 kmem_cache_free+0xed/0x380 rcu_core+0x3d5/0xc90 __do_softirq+0x12d/0x389

Last potentially related work creation: kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x97/0xb0 call_rcu+0x3d/0x3f0 erofs_shrink_workstation+0x11f/0x210 erofs_shrink_scan+0xdc/0x170 shrink_slab.constprop.0+0x296/0x530 drop_slab+0x1c/0x70 drop_caches_sysctl_handler+0x70/0x80 proc_sys_call_handler+0x20a/0x2f0 vfs_write+0x555/0x6c0 ksys_write+0xbe/0x160 do_syscall_64+0x3b/0x90

The root cause is that erofs_workgroup_unfreeze() doesn't reset to orig_val thus it causes a race that the pcluster reuses unexpectedly before freeing.

Since UP platforms are quite rare now, such path becomes unnecessary. Let's drop such specific-designed path directly instead.(CVE-2022-48674)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.(CVE-2023-52615)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: disallow timeout for anonymous sets

Never used from userspace, disallow these parameters.(CVE-2023-52620)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix a suspicious RCU usage warning

I received the following warning while running cthon against an ontap server running pNFS:

[ 57.202521] ============================= [ 57.202522] WARNING: suspicious RCU usage [ 57.202523] 6.7.0-rc3-g2cc14f52aeb7 #41492 Not tainted [ 57.202525] ----------------------------- [ 57.202525] net/sunrpc/xprtmultipath.c:349 RCU-list traversed in non-reader section!! [ 57.202527] other info that might help us debug this:

[ 57.202528] …

Record
OESA-2024-1617
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1618 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

tun: avoid double free in tun_free_netdev

Avoid double free in tun_free_netdev() by moving the dev->tstats and tun->security allocs to a new ndo_init routine (tun_net_init()) that will be called by register_netdevice(). ndo_init is paired with the desctructor (tun_free_netdev()), so if there's an error in register_netdevice() the destructor will handle the frees.

BUG: KASAN: double-free or invalid-free in selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605

CPU: 0 PID: 25750 Comm: syz-executor416 Not tainted 5.16.0-rc2-syzk #1 Hardware name: Red Hat KVM, BIOS Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x89/0xb5 lib/dump_stack.c:106 print_address_description.constprop.9+0x28/0x160 mm/kasan/report.c:247 kasan_report_invalid_free+0x55/0x80 mm/kasan/report.c:372 ____kasan_slab_free mm/kasan/common.c:346 [inline] __kasan_slab_free+0x107/0x120 mm/kasan/common.c:374 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:1723 [inline] slab_free_freelist_hook mm/slub.c:1749 [inline] slab_free mm/slub.c:3513 [inline] kfree+0xac/0x2d0 mm/slub.c:4561 selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605 security_tun_dev_free_security+0x4f/0x90 security/security.c:2342 tun_free_netdev+0xe6/0x150 drivers/net/tun.c:2215 netdev_run_todo+0x4df/0x840 net/core/dev.c:10627 rtnl_unlock+0x13/0x20 net/core/rtnetlink.c:112 __tun_chr_ioctl+0x80c/0x2870 drivers/net/tun.c:3302 tun_chr_ioctl+0x2f/0x40 drivers/net/tun.c:3311 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x19d/0x220 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3a/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae(CVE-2021-47082)

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate.

Note, writing '0' to kvmclock MSR doesn't clear memory location, it just prevents hypervisor from updating the location so for the short while after write and while CPU is still alive, the clock remains usable and correct so we don't need to switch to some other clocksource.(CVE-2021-47110)

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

Remove the reason of null pointer dereference in sync VSI filters. Added new I40E_VSI_RELEASING flag to signalize deleting and releasing of VSI resources to sync this thread with sync filters subtask. Without this patch it is possible to start update the VSI filter list after VSI is removed, that's causing a kernel oops.(CVE-2021-47184)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

CPU: 0 PID: 7789 Comm: stress Not tainted 6.0.0-rc1-00002-g0d53d2e882f9 #3 Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 Call Trace: <TASK> .. __mutex_lock+0xe5/0xc30 .. z_erofs_do_read_page+0x8ce/0x1560 .. z_erofs_readahead+0x31c/0x580 .. Freed by task 7787 kasan_save_stack+0x1e/0x40 kasan_set_track+0x20/0x30 kasan_set_free_info+0x20/0x40 __kasan_slab_free+0x10c/0x190 kmem_cache_free+0xed/0x380 rcu_core+0x3d5/0xc90 __do_softirq+0x12d/0x389

Last potentially related work creation: …

Record
OESA-2024-1618
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1620 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave.

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and initialized. If usb_get_bos_descriptor() fails for whatever reason, udev->bos will be NULL and those accesses will result in a crash:

BUG: kernel NULL pointer dereference, address: 0000000000000018 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1> Hardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021 Workqueue: usb_hub_wq hub_event RIP: 0010:hub_port_reset+0x193/0x788 Code: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9 RSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310 RDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840 RBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0 Call Trace: hub_event+0x73f/0x156e ? hub_activate+0x5b7/0x68f process_one_work+0x1a2/0x487 worker_thread+0x11a/0x288 kthread+0x13a/0x152 ? process_one_work+0x487/0x487 ? kthread_associate_blkcg+0x70/0x70 ret_from_fork+0x1f/0x30

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.(CVE-2023-52477)

In the Linux kernel, the following vulnerability has been resolved:

block/rnbd-srv: Check for unlikely string overflow

Since "dev_search_path" can technically be as large as PATH_MAX, there was a risk of truncation when copying it and a second string into "full_path" since it was also PATH_MAX sized. The W=1 builds were reporting this warning:

drivers/block/rnbd/rnbd-srv.c: In function 'process_msg_open.isra': drivers/block/rnbd/rnbd-srv.c:616:51: warning: '%s' directive output may be truncated writing up to 254 bytes into a region of size between 0 and 4095 [-Wformat-truncation=] 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~ In function 'rnbd_srv_get_full_path', inlined from 'process_msg_open.isra' at drivers/block/rnbd/rnbd-srv.c:721:14: drivers/block/rnbd/rnbd-srv.c:616:17: note: 'snprintf' output between 2 and 4351 bytes into a destination of size 4096 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 617 | dev_search_path, dev_name); | ~~~~~~~~~~~~~~~~~~~~~~~~~~

To fix this, unconditionally check for truncation (as was already done for the case where "%SESSNAME%" was present).(CVE-2023-52618)

In the Linux kernel, the following…

Record
OESA-2024-1620
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1621 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave.

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and initialized. If usb_get_bos_descriptor() fails for whatever reason, udev->bos will be NULL and those accesses will result in a crash:

BUG: kernel NULL pointer dereference, address: 0000000000000018 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1> Hardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021 Workqueue: usb_hub_wq hub_event RIP: 0010:hub_port_reset+0x193/0x788 Code: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9 RSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310 RDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840 RBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0 Call Trace: hub_event+0x73f/0x156e ? hub_activate+0x5b7/0x68f process_one_work+0x1a2/0x487 worker_thread+0x11a/0x288 kthread+0x13a/0x152 ? process_one_work+0x487/0x487 ? kthread_associate_blkcg+0x70/0x70 ret_from_fork+0x1f/0x30

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.(CVE-2023-52477)

In the Linux kernel, the following vulnerability has been resolved:

block/rnbd-srv: Check for unlikely string overflow

Since "dev_search_path" can technically be as large as PATH_MAX, there was a risk of truncation when copying it and a second string into "full_path" since it was also PATH_MAX sized. The W=1 builds were reporting this warning:

drivers/block/rnbd/rnbd-srv.c: In function 'process_msg_open.isra': drivers/block/rnbd/rnbd-srv.c:616:51: warning: '%s' directive output may be truncated writing up to 254 bytes into a region of size between 0 and 4095 [-Wformat-truncation=] 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~ In function 'rnbd_srv_get_full_path', inlined from 'process_msg_open.isra' at drivers/block/rnbd/rnbd-srv.c:721:14: drivers/block/rnbd/rnbd-srv.c:616:17: note: 'snprintf' output between 2 and 4351 bytes into a destination of size 4096 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 617 | dev_search_path, dev_name); | ~~~~~~~~~~~~~~~~~~~~~~~~~~

To fix this, unconditionally check for truncation (as was already done for the case where "%SESSNAME%" was present).(CVE-2023-52618)

In the Linux kernel, the following…

Record
OESA-2024-1621
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1622 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave.

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

CPU: 0 PID: 7789 Comm: stress Not tainted 6.0.0-rc1-00002-g0d53d2e882f9 #3 Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 Call Trace: <TASK> .. __mutex_lock+0xe5/0xc30 .. z_erofs_do_read_page+0x8ce/0x1560 .. z_erofs_readahead+0x31c/0x580 .. Freed by task 7787 kasan_save_stack+0x1e/0x40 kasan_set_track+0x20/0x30 kasan_set_free_info+0x20/0x40 __kasan_slab_free+0x10c/0x190 kmem_cache_free+0xed/0x380 rcu_core+0x3d5/0xc90 __do_softirq+0x12d/0x389

Last potentially related work creation: kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x97/0xb0 call_rcu+0x3d/0x3f0 erofs_shrink_workstation+0x11f/0x210 erofs_shrink_scan+0xdc/0x170 shrink_slab.constprop.0+0x296/0x530 drop_slab+0x1c/0x70 drop_caches_sysctl_handler+0x70/0x80 proc_sys_call_handler+0x20a/0x2f0 vfs_write+0x555/0x6c0 ksys_write+0xbe/0x160 do_syscall_64+0x3b/0x90

The root cause is that erofs_workgroup_unfreeze() doesn't reset to orig_val thus it causes a race that the pcluster reuses unexpectedly before freeing.

Since UP platforms are quite rare now, such path becomes unnecessary. Let's drop such specific-designed path directly instead.(CVE-2022-48674)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and initialized. If usb_get_bos_descriptor() fails for whatever reason, udev->bos will be NULL and those accesses will result in a crash:

BUG: kernel NULL pointer dereference, address: 0000000000000018 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1> Hardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021 Workqueue: usb_hub_wq hub_event RIP: 0010:hub_port_reset+0x193/0x788 Code: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9 RSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310 RDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840 RBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0 Call Trace: hub_event+0x73f/0x156e ? hub_activate+0x5b7/0x68f process_one_work+0x1a2/0x487 worker_thread+0x11a/0x288 kthread+0x13a/0x152 ? process_one_work+0x487/0x487 ? kthread_associate_blkcg+0x70/0x70 ret_from_fork+0x1f/0x30

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support…

Record
OESA-2024-1622
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1647 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()

memcpy() is called in a loop while 'operation->length' upper bound is not checked and 'data_idx' also increments.(CVE-2022-48632)

In the Linux kernel, the following vulnerability has been resolved:

mm/slub: fix to return errno if kmalloc() fails

In create_unique_id(), kmalloc(, GFP_KERNEL) can fail due to out-of-memory, if it fails, return errno correctly rather than triggering panic via BUG_ON();

kernel BUG at mm/slub.c:5893! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP

Call trace: sysfs_slab_add+0x258/0x260 mm/slub.c:5973 __kmem_cache_create+0x60/0x118 mm/slub.c:4899 create_cache mm/slab_common.c:229 [inline] kmem_cache_create_usercopy+0x19c/0x31c mm/slab_common.c:335 kmem_cache_create+0x1c/0x28 mm/slab_common.c:390 f2fs_kmem_cache_create fs/f2fs/f2fs.h:2766 [inline] f2fs_init_xattr_caches+0x78/0xb4 fs/f2fs/xattr.c:808 f2fs_fill_super+0x1050/0x1e0c fs/f2fs/super.c:4149 mount_bdev+0x1b8/0x210 fs/super.c:1400 f2fs_mount+0x44/0x58 fs/f2fs/super.c:4512 legacy_get_tree+0x30/0x74 fs/fs_context.c:610 vfs_get_tree+0x40/0x140 fs/super.c:1530 do_new_mount+0x1dc/0x4e4 fs/namespace.c:3040 path_mount+0x358/0x914 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x2f8/0x408 fs/namespace.c:3568(CVE-2022-48659)

In the Linux kernel, the following vulnerability has been resolved:

gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

When running gpio test on nxp-ls1028 platform with below command gpiomon --num-events=3 --rising-edge gpiochip1 25 There will be a warning trace as below: Call trace: free_irq+0x204/0x360 lineevent_free+0x64/0x70 gpio_ioctl+0x598/0x6a0 __arm64_sys_ioctl+0xb4/0x100 invoke_syscall+0x5c/0x130 ...... el0t_64_sync+0x1a0/0x1a4 The reason of this issue is that calling request_threaded_irq() function failed, and then lineevent_free() is invoked to release the resource. Since the lineevent_state::irq was already set, so the subsequent invocation of free_irq() would trigger the above warning call trace. To fix this issue, set the lineevent_state::irq after the IRQ register successfully.(CVE-2022-48660)

In the Linux kernel, the following vulnerability has been resolved:

binder: fix race between mmput() and do_exit()

Task A calls binder_update_page_range() to allocate and insert pages on a remote address space from Task B. For this, Task A pins the remote mm via mmget_not_zero() first. This can race with Task B do_exit() and the final mmput() refcount decrement will come from Task A.

Task A | Task B ------------------+------------------ mmget_not_zero() | | do_exit() | exit_mm() | mmput() mmput() | exit_mmap() | remove_vma() | fput() |

In this case, the work of ____fput() from Task B is queued up in Task A as TWA_RESUME. So in theory, Task A returns to userspace and the cleanup work gets executed. However, Task A instead sleep, waiting for a reply from Task B that never comes (it's dead).

This means the binder_deferred_release() is blocked until an unrelated binder event forces Task A to go back to userspace. All the associated death notifications will also be delayed until then.

In order to fix this use mmput_async() that will schedule the work in the corresponding mm->async_put_work WQ instead of Task A.(CVE-2023-52609)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng…

Record
OESA-2024-1647
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:9315
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-26812 5.6

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Create persistent INTx handler A vulnerability exists where the eventfd for INTx signaling can be deconfigured, which unregisters the IRQ handler but still allows eventfds to be signaled with a NULL context through the SET_IRQS ioctl or through unmask irqfd if the device interrupt is pending. Ideally this could be solved with some additional locking; the igate mutex serializes the ioctl and config space accesses, and the interrupt handler is unregistered relative to the trigger, but the irqfd path runs asynchronous to those. The igate mutex cannot be acquired from the atomic context of the eventfd wake function. Disabling the irqfd relative to the eventfd registration is potentially incompatible with existing userspace. As a result, the solution implemented here moves configuration of the INTx interrupt handler to track the lifetime of the INTx context object and irq_type configuration, rather than registration of a particular trigger eventfd. Synchronization is added between the ioctl path and eventfd_signal() wrapper such that the eventfd trigger can be dynamically updated relative to in-flight interrupts or irqfd callbacks.

Record
UBUNTU-CVE-2024-26812
CVSS 4.0
5.6 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-11
OSVCLSA-2024-1729518310 No score

Fix of 15 CVEs

Record
CLSA-2024-1729518310
Updated
2026-11-02
OSVCLSA-2024-1729518811 No score

Fix of 15 CVEs

Record
CLSA-2024-1729518811
Updated
2026-11-02
OSVCLSA-2024-1731605761 No score

Fix of 67 CVEs

Record
CLSA-2024-1731605761
Updated
2026-11-02
OSVCLSA-2024-1731606243 No score

Fix of 67 CVEs

Record
CLSA-2024-1731606243
Updated
2026-11-02
OSVSUSE-SU-2024:3189-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-43907: drm/amdgpu/pm: fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
  • CVE-2024-43905: drm/amd/pm: fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
  • CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
  • CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
  • CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
  • CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
  • CVE-2024-43879: wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
  • CVE-2024-43872: RDMA/hns: Fix soft lockup under heavy CEQE load (bsc#1229489).
  • CVE-2024-43871: devres: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490).
  • CVE-2024-43866: net/mlx5: Always drain health in shutdown callback (bsc#1229495).
  • CVE-2024-43863: drm/vmwgfx: Fix a deadlock in dma buf fence polling (bsc#1229497).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
  • CVE-2024-43856: dma: fix call order in dmam_free_coherent (bsc#1229346).
  • CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media (bsc#1229345)
  • CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
  • CVE-2024-43831: media: mediatek: vcodec: Handle invalid decoder vsi (bsc#1229309).
  • CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
  • CVE-2024-42322: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347)
  • CVE-2024-42312: sysctl: always initialize i_uid/i_gid (bsc#1229357)
  • CVE-2024-42310: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (bsc#1229358).
  • CVE-2024-42309: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (bsc#1229359).
  • CVE-2024-42301: dev/parport: fix the array out-of-bounds risk (bsc#1229407).
  • CVE-2024-42285: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (bsc#1229381).
  • CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
  • CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386).
  • CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
  • CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)
  • CVE-2024-42259: drm/i915/gem: fix Virtual Memory mapping boundaries calculation (bsc#1229156).
  • CVE-2024-42246: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).
  • CVE-2024-42244: usb: serial: mos7840: fix crash on resume (bsc#1228967).
  • CVE-2024-42236: usb: gadget: configfs: prevent OOB read/write in usb_string_copy() (bsc#1228964).
  • CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959)
  • CVE-2024-42228: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (bsc#1228667).
  • CVE-2024-42226: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
  • CVE-2024-42162: gve: Account for stopped queues when reading NIC stats (bsc#1228706).
  • CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
  • CVE-2024-42157: s390/pkey: Wipe sensitive data on failure (bsc#1228727).
  • CVE-2024-42155: s390/pkey: Wipe copies of protected- and secure-keys (bsc#1228733).
  • CVE-2024-42148: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).
  • CVE-2024-42110: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501).
  • CVE-2024-42106: inet_diag: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493).
  • CVE-2024-42101: drm/nouveau: fix null pointer dereference in…
Record
SUSE-SU-2024:3189-1
Updated
2026-11-02
OSVSUSE-SU-2024:3190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
  • CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
  • CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
  • CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
  • CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
  • CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
  • CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
  • CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
  • CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
  • CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
  • CVE-2024-44939: fix null ptr deref in dtInsertEntry (bsc#1229820).
  • CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
  • CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
  • CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
  • CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
  • CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
  • CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
  • CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
  • CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
  • CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
  • CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
  • CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
  • CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
  • CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
  • CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
  • CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
  • CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
  • CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
  • CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
  • CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
  • CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
  • CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
  • CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
  • CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
  • CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
  • CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
  • CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
  • CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
  • CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
  • CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
  • CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
  • CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
  • CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
  • CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-27016: Validate pppoe header (bsc#1223807).
  • CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).
  • CVE-2023-52581: Fix memleak when more than 255…
Record
SUSE-SU-2024:3190-1
Updated
2026-11-02
OSVSUSE-SU-2024:3194-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
  • CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
  • CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
  • CVE-2024-43911: Fix NULL dereference at band check in starting tx ba session (bsc#1229827).
  • CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
  • CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
  • CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
  • CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
  • CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
  • CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
  • CVE-2024-36270: Fix reference in patches.suse/netfilter-tproxy-bail-out-if-IP-has-been-disabled-on.patch (bsc#1226798)
  • CVE-2024-36881: Reset ptes when close() for wr-protected ones (bsc#1225718).
  • CVE-2024-42316: Fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
  • CVE-2024-43855: Fix deadlock between mddev_suspend and flush bio (bsc#1229342,).
  • CVE-2024-43864: Fix CT entry update leaks of modify header context (bsc#1229496)
  • CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
  • CVE-2024-42109: Unconditionally flush pending work before notifier (bsc#1228505)
  • CVE-2024-41084: Avoid null pointer dereference in region lookup (bsc#1228472)
  • CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
  • CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
  • CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
  • CVE-2024-27079: Add kABI workaround patch (bsc#1223742).
  • CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
  • CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
  • CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
  • CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
  • CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
  • CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
  • CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26809: Release elements in clone only from destroy path (bsc#1222633).
  • CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).
  • CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297).
  • CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
  • CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374).
  • CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391).
  • CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314)
  • CVE-2024-27433: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
  • CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
  • CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
  • CVE-2024-40920: Fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
  • CVE-2024-40921: Pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
  • CVE-2024-36979: Fix vlan use-after-free (bsc#1226604).
  • CVE-2024-26590: Fix inconsistent per-file compression format (bsc#1220252,).
  • CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582).
  • CVE-2024-42270: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404)
  • CVE-2024-42269: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402)
  • CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
  • CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383) -…
Record
SUSE-SU-2024:3194-1
Updated
2026-11-02
OSVSUSE-SU-2024:3195-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
  • CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
  • CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
  • CVE-2024-43911: Fix NULL dereference at band check in starting tx ba session (bsc#1229827).
  • CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
  • CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
  • CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
  • CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
  • CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
  • CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
  • CVE-2024-36881: Fix reset ptes when close() for wr-protected (bsc#1225718).
  • CVE-2024-42316: Fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
  • CVE-2024-43855: Fix deadlock between mddev_suspend and flush bio (bsc#1229342).
  • CVE-2024-43864: Fix CT entry update leaks of modify header context (bsc#1229496).
  • CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
  • CVE-2024-42109: Unconditionally flush pending work before notifier (bsc#1228505).
  • CVE-2024-41084: Avoid null pointer dereference in region lookup (bsc#1228472).
  • CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
  • CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
  • CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
  • CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
  • CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
  • CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
  • CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
  • CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
  • CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
  • CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
  • CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26809: Release elements in clone only from destroy path (bsc#1222633).
  • CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).
  • CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297).
  • CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
  • CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374).
  • CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391).
  • CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314)
  • CVE-2024-27433: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
  • CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
  • CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
  • CVE-2024-40920: Fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
  • CVE-2024-40921: Pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
  • CVE-2024-36979: Fix vlan use-after-free (bsc#1226604).
  • CVE-2024-26590: Fix inconsistent per-file compression format (bsc#1220252).
  • CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582).
  • CVE-2024-42270: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404).
  • CVE-2024-42269: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402).
  • CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
  • CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383)
  • CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357)
  • CVE-2024-43854: Initialize integrity buffer to zero…
Record
SUSE-SU-2024:3195-1
Updated
2026-11-02
OSVSUSE-SU-2024:3209-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
  • CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
  • CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
  • CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
  • CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
  • CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
  • CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
  • CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
  • CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
  • CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
  • CVE-2024-44939: Fix null ptr deref in dtInsertEntry (bsc#1229820).
  • CVE-2024-41087: Fix double free on error (bsc#1228466).
  • CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
  • CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
  • CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
  • CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
  • CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
  • CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
  • CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
  • CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
  • CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
  • CVE-2024-26812: struct virqfd kABI workaround (bsc#1222808).
  • CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
  • CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
  • CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
  • CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
  • CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
  • CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
  • CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
  • CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
  • CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
  • CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
  • CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
  • CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
  • CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
  • CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
  • CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
  • CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
  • CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
  • CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
  • CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290).
  • CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
  • CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
  • CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-27016: Validate pppoe header (bsc#1223807).
  • CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).
  • CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).…
Record
SUSE-SU-2024:3209-1
Updated
2026-11-02
OSVSUSE-SU-2024:3251-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579).
  • CVE-2024-35933: Fixed build regression (bsc#1224640).
  • CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
  • CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
  • CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
  • CVE-2024-43863: Fix a deadlock in dma buf fence polling (bsc#1229497)
  • CVE-2024-41087: Fix double free on error (bsc#1228466).
  • CVE-2024-43907: Fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
  • CVE-2024-43905: Fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
  • CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
  • CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
  • CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
  • CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
  • CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
  • CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
  • CVE-2022-48910: Ensure we call ipv6_mc_down() at most once (bsc#1229632)
  • CVE-2023-52893: Fix null-deref in gsmi_get_variable (bsc#1229535)
  • CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
  • CVE-2022-48875: Initialize struct pn533_out_arg properly (bsc#1229516).
  • CVE-2023-52907: Wait for out_urb's completion in pn533_usb_send_frame() (bsc#1229526).
  • CVE-2024-43871: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490)
  • CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
  • CVE-2024-43872: Fix soft lockup under heavy CEQE load (bsc#1229489)
  • CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
  • CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
  • CVE-2024-42236: Prevent OOB read/write in usb_string_copy() (bsc#1228964).
  • CVE-2024-42244: Fix crash on resume (bsc#1228967).
  • CVE-2024-43879: Handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
  • CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
  • CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).
  • CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
  • CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
  • CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
  • CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290).
  • CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727).
  • CVE-2021-47341: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (bsc#1224923).
  • CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
  • CVE-2022-48769: Avoid EFIv2 runtime services on Apple x86 machines (bsc#1226629).
  • CVE-2024-43856: Fix call order in dmam_free_coherent (bsc#1229346).
  • CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
  • CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
  • CVE-2024-40984: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (bsc#1227820).
  • CVE-2024-26677: Blacklist e7870cf13d20 (' Fix delayed ACKs to not set the reference serial number') (bsc#1222387)
  • CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
  • CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
  • CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357)
  • CVE-2024-42310: Fix null pointer dereference in…
Record
SUSE-SU-2024:3251-1
Updated
2026-11-02
OSVSUSE-SU-2024:3252-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579).
  • CVE-2024-35933: Fixed a build regression (bsc#1224640).
  • CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
  • CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
  • CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
  • CVE-2024-43863: Fix a deadlock in dma buf fence polling (bsc#1229497)
  • CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
  • CVE-2024-43907: Fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
  • CVE-2024-43905: Fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
  • CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
  • CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
  • CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
  • CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
  • CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
  • CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
  • CVE-2022-48910: Ensure we call ipv6_mc_down() at most once (bsc#1229632)
  • CVE-2023-52893: Fix null-deref in gsmi_get_variable (bsc#1229535)
  • CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
  • CVE-2022-48875: Initialize struct pn533_out_arg properly (bsc#1229516).
  • CVE-2023-52907: Wait for out_urb's completion in pn533_usb_send_frame() (bsc#1229526).
  • CVE-2024-43871: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490)
  • CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
  • CVE-2024-43872: Fix soft lockup under heavy CEQE load (bsc#1229489)
  • CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
  • CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
  • CVE-2024-42236: Prevent OOB read/write in usb_string_copy() (bsc#1228964).
  • CVE-2024-42244: Fix crash on resume (bsc#1228967).
  • CVE-2024-43879: Handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
  • CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
  • CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).
  • CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
  • CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
  • CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
  • CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
  • CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727 CVE-2024-42157 git-fixes).
  • CVE-2021-47341: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (bsc#1224923).
  • CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
  • CVE-2022-48769: Avoid EFIv2 runtime services on Apple x86 machines (bsc#1226629).
  • CVE-2024-43856: Fix call order in dmam_free_coherent (bsc#1229346).
  • CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
  • CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
  • CVE-2024-40984: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (bsc#1227820).
  • CVE-2024-26677: Blacklist e7870cf13d20 ('rxrpc: Fix delayed ACKs to not set the reference serial number') (bsc#1222387)
  • CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
  • CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
  • CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357) -…
Record
SUSE-SU-2024:3252-1
Updated
2026-11-02
OSVSUSE-SU-2024:3383-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-43911: wifi: mac80211: fix NULL dereference at band check in starting tx ba session (bsc#1229827).
  • CVE-2024-43899: drm/amd/display: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
  • CVE-2024-43880: kabi: lib: objagg: Put back removed metod in struct objagg_ops (bsc#1229481).
  • CVE-2024-43866: net/mlx5: Always drain health in shutdown callback (bsc#1229495).
  • CVE-2024-43864: net/mlx5e: Fix CT entry update leaks of modify header context (bsc#1229496).
  • CVE-2024-43855: md: fix deadlock between mddev_suspend and flush bio (bsc#1229342).
  • CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media (bsc#1229345)
  • CVE-2024-43850: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove (bsc#1229316).
  • CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
  • CVE-2024-43837: bpf: Fix updating attached freplace prog in prog_array map (bsc#1229297).
  • CVE-2024-43834: xdp: fix invalid wait context of page_pool_destroy() (bsc#1229314)
  • CVE-2024-43831: media: mediatek: vcodec: Handle invalid decoder vsi (bsc#1229309).
  • CVE-2024-43821: scsi: lpfc: Fix a possible null pointer dereference (bsc#1229315).
  • CVE-2024-42322: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347)
  • CVE-2024-42318: landlock: Do not lose track of restrictions on cred_transfer (bsc#1229351).
  • CVE-2024-42316: mm/mglru: fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
  • CVE-2024-42312: sysctl: always initialize i_uid/i_gid (bsc#1229357)
  • CVE-2024-42308: Update DRM patch reference (bsc#1229411)
  • CVE-2024-42301: dev/parport: fix the array out-of-bounds risk (bsc#1229407).
  • CVE-2024-42295: nilfs2: handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370).
  • CVE-2024-42291: ice: Add a per-VF limit on number of FDIR filters (bsc#1229374).
  • CVE-2024-42290: irqchip/imx-irqsteer: Handle runtime power management correctly (bsc#1229379).
  • CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
  • CVE-2024-42283: net: nexthop: Initialize all fields in dumped nexthops (bsc#1229383)
  • CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386).
  • CVE-2024-42277: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
  • CVE-2024-42270: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404).
  • CVE-2024-42269: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402).
  • CVE-2024-42268: net/mlx5: Fix missing lock on sync reset reload (bsc#1229391).
  • CVE-2024-42247: wireguard: allowedips: avoid unaligned 64-bit memory accesses (bsc#1228988).
  • CVE-2024-42246: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).
  • CVE-2024-42245: Revert 'sched/fair: Make sure to try to detach at least one movable task' (bsc#1228978).
  • CVE-2024-42241: mm/shmem: disable PMD-sized page cache if needed (bsc#1228986).
  • CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723).
  • CVE-2024-42162: gve: Account for stopped queues when reading NIC stats (bsc#1228706).
  • CVE-2024-42161: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756).
  • CVE-2024-42159: scsi: mpi3mr: fix sanitise num_phys (bsc#1228754).
  • CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
  • CVE-2024-42157: s390/pkey: Wipe sensitive data on failure (bsc#1228727).
  • CVE-2024-42156: s390/pkey: Wipe copies of clear-key structures on failure (bsc#1228722).
  • CVE-2024-42155: s390/pkey: Wipe copies of protected- and secure-keys (bsc#1228733).
  • CVE-2024-42148: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).
  • CVE-2024-42145:…
Record
SUSE-SU-2024:3383-1
Updated
2026-11-02
OSVSUSE-SU-2024:3483-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
  • CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
  • CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
  • CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
  • CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
  • CVE-2024-36270: Fix reference in patches.suse/netfilter-tproxy-bail-out-if-IP-has-been-disabled-on.patch (bsc#1226798)
  • CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
  • CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
  • CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
  • CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
  • CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
  • CVE-2024-44939: Fix null ptr deref in dtInsertEntry (bsc#1229820).
  • CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
  • CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
  • CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
  • CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
  • CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
  • CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
  • CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
  • CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
  • CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
  • CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
  • CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
  • CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
  • CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
  • CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
  • CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
  • CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
  • CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
  • CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
  • CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
  • CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
  • CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
  • CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
  • CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
  • CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
  • CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
  • CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
  • CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
  • CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
  • CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
  • CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
  • CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
  • CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
  • CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-27016: Validate pppoe header (bsc#1223807). -…
Record
SUSE-SU-2024:3483-1
Updated
2026-11-02
OSVSUSE-SU-2025:20044-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

This release includes the first live patch.

The following security bugs were fixed:

  • CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
  • CVE-2023-52581: netfilter: nf_tables: fix memleak when more than 255 elements expired (bsc#1220877).
  • CVE-2023-52859: perf: hisi: Fix use-after-free when register pmu fails (bsc#1225582).
  • CVE-2023-52889: apparmor: Fix null pointer deref when receiving skb during sock creation (bsc#1229287,).
  • CVE-2024-26590: erofs: fix inconsistent per-file compression format (bsc#1220252).
  • CVE-2024-26631: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
  • CVE-2024-26668: netfilter: nft_limit: reject configurations that cause integer overflow (bsc#1222335).
  • CVE-2024-26669: kABI fix for net/sched: flower: Fix chain template offload (bsc#1222350).
  • CVE-2024-26677: blacklist.conf: Add e7870cf13d20 ("rxrpc: Fix delayed ACKs to not set the reference serial number") (bsc#1222387)
  • CVE-2024-26735: ipv6: sr: fix possible use-after-free and null-ptr-deref (bsc#1222372).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26809: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1222633).
  • CVE-2024-26812: kABI: vfio: struct virqfd kABI workaround (bsc#1222808).
  • CVE-2024-26835: netfilter: nf_tables: set dormant flag on hook register failure (bsc#1222967).
  • CVE-2024-26837: net: bridge: switchdev: Skip MDB replays of deferred events on offload (bsc#1222973).
  • CVE-2024-26851: netfilter: nf_conntrack_h323: Add protection for bmp length out of range (bsc#1223074)
  • CVE-2024-27010: net/sched: Fix mirred deadlock on device recursion (bsc#1223720).
  • CVE-2024-27011: netfilter: nf_tables: fix memleak in map from abort path (bsc#1223803).
  • CVE-2024-27024: net/rds: fix WARNING in rds_conn_connect_if_down (bsc#1223777).
  • CVE-2024-27079: iommu/vt-d: Fix NULL domain on device release (bsc#1223742).
  • CVE-2024-27403: kabi: restore const specifier in flow_offload_route_init() (bsc#1224415).
  • CVE-2024-27433: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
  • CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
  • CVE-2024-35897: netfilter: nf_tables: discard table flag update with pending basechain deletion (bsc#1224510).
  • CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
  • CVE-2024-36286: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
  • CVE-2024-36489: tls: fix missing memory barrier in tls_init (bsc#1226874)
  • CVE-2024-36881: mm/userfaultfd: reset ptes when close() for wr-protected ones (bsc#1225718).
  • CVE-2024-36929: net: core: reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).
  • CVE-2024-36933: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).
  • CVE-2024-36979: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in bridge's mst code. (bsc#1226604).
  • CVE-2024-38662: selftests/bpf: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).
  • CVE-2024-39489: ipv6: sr: fix memleak in seg6_hmac_init_algo (bsc#1227623)
  • CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
  • CVE-2024-40905: ipv6: fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
  • CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798).
  • CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
  • CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
  • CVE-2024-40938: landlock: fix d_parent…
Record
SUSE-SU-2025:20044-1
Updated
2026-11-02
OSVSUSE-SU-2025:20047-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
  • CVE-2023-52581: netfilter: nf_tables: fix memleak when more than 255 elements expired (bsc#1220877).
  • CVE-2023-52859: perf: hisi: Fix use-after-free when register pmu fails (bsc#1225582).
  • CVE-2023-52889: apparmor: Fix null pointer deref when receiving skb during sock creation (bsc#1229287).
  • CVE-2024-26590: erofs: fix inconsistent per-file compression format (bsc#1220252).
  • CVE-2024-26631: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
  • CVE-2024-26668: netfilter: nft_limit: reject configurations that cause integer overflow (bsc#1222335).
  • CVE-2024-26669: kABI fix for net/sched: flower: Fix chain template offload (bsc#1222350).
  • CVE-2024-26677: Blacklist e7870cf13d20 (" Fix delayed ACKs to not set the reference serial number") (bsc#1222387)
  • CVE-2024-26735: ipv6: sr: fix possible use-after-free and null-ptr-deref (bsc#1222372).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26809: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1222633).
  • CVE-2024-26812: kABI: vfio: struct virqfd kABI workaround (bsc#1222808).
  • CVE-2024-26835: netfilter: nf_tables: set dormant flag on hook register failure (bsc#1222967).
  • CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
  • CVE-2024-26851: netfilter: nf_conntrack_h323: Add protection for bmp length out of range (bsc#1223074)
  • CVE-2024-27010: net/sched: Fix mirred deadlock on device recursion (bsc#1223720).
  • CVE-2024-27011: netfilter: nf_tables: fix memleak in map from abort path (bsc#1223803).
  • CVE-2024-27024: net/rds: fix WARNING in rds_conn_connect_if_down (bsc#1223777).
  • CVE-2024-27079: iommu/vt-d: Fix NULL domain on device release (bsc#1223742).
  • CVE-2024-27403: kabi: restore const specifier in flow_offload_route_init() (bsc#1224415).
  • CVE-2024-27433: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
  • CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
  • CVE-2024-35897: netfilter: nf_tables: discard table flag update with pending basechain deletion (bsc#1224510).
  • CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
  • CVE-2024-36286: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
  • CVE-2024-36489: tls: fix missing memory barrier in tls_init (bsc#1226874)
  • CVE-2024-36881: mm/userfaultfd: Fix reset ptes when close() for wr-protected (bsc#1225718).
  • CVE-2024-36929: net: core: reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).
  • CVE-2024-36933: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).
  • CVE-2024-36979: net: bridge: mst: fix vlan use-after-free (bsc#1226604).
  • CVE-2024-38662: selftests/bpf: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).
  • CVE-2024-39489: ipv6: sr: fix memleak in seg6_hmac_init_algo (bsc#1227623)
  • CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
  • CVE-2024-40905: ipv6: fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
  • CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798).
  • CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
  • CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
  • CVE-2024-40938: landlock: fix d_parent walk (bsc#1227840).
  • CVE-2024-40939: net: wwan: iosm: Fix tainted…
Record
SUSE-SU-2025:20047-1
Updated
2026-11-02
OSVUSN-6816-1 No score

linux, linux-ibm, linux-lowlatency, linux-raspi vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • DPLL subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Powercap sysfs driver;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • VFIO drivers;
  • Backlight driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • debug file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • Network file system client;
  • NILFS2 file system;
  • Overlay file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Packet sockets;
  • Network…
Record
USN-6816-1
Updated
2026-11-02
OSVUSN-6817-1 No score

linux-aws, linux-gcp vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • DPLL subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Powercap sysfs driver;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • VFIO drivers;
  • Backlight driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • debug file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • Network file system client;
  • NILFS2 file system;
  • Overlay file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Packet sockets;
  • Network traffic control;
  • Sun RPC protocol;
  • ALSA SH drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…
Record
USN-6817-1
Updated
2026-11-02
OSVUSN-6817-2 No score

linux-oem-6.8 vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • DPLL subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Powercap sysfs driver;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • VFIO drivers;
  • Backlight driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • debug file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • Network file system client;
  • NILFS2 file system;
  • Overlay file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Packet sockets;
  • Network traffic control;
  • Sun RPC protocol;
  • ALSA SH drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…
Record
USN-6817-2
Updated
2026-11-02
OSVUSN-6817-3 No score

linux-azure, linux-gke vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • DPLL subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Powercap sysfs driver;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • VFIO drivers;
  • Backlight driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • debug file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • Network file system client;
  • NILFS2 file system;
  • Overlay file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Packet sockets;
  • Network traffic control;
  • Sun RPC protocol;
  • ALSA SH drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…
Record
USN-6817-3
Updated
2026-11-02
OSVUSN-6878-1 No score

linux-oracle vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • DPLL subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • PCI subsystem;
  • Powercap sysfs driver;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • VFIO drivers;
  • Backlight driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • debug file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • Network file system client;
  • NILFS2 file system;
  • Overlay file system;
  • Pstore file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • PCI iomap interfaces;
  • Memory management;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Netfilter;
  • Packet sockets;
  • Network traffic control;
  • Sun RPC protocol;
  • ALSA SH drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-27032, CVE-2024-26868, CVE-2024-26879, CVE-2024-27033, CVE-2024-26943, CVE-2024-27040, CVE-2024-26950, CVE-2023-52650,…
Record
USN-6878-1
Updated
2026-11-02
OSVUSN-6896-1 No score

linux, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-ibm, linux-ibm-5.4, linux-kvm vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • ACPI drivers;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • PCI subsystem;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • FAT file system;
  • NILFS2 file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Packet sockets;
  • RDS protocol;
  • Network traffic control;
  • Sun RPC protocol;
  • Unix domain sockets;
  • ALSA SH drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-35969, CVE-2024-35819, CVE-2024-26851, CVE-2024-26816, CVE-2024-26643, CVE-2023-52656, CVE-2024-27020, CVE-2024-35821, CVE-2024-35930, CVE-2024-35936, CVE-2024-27075, CVE-2024-26817, CVE-2024-26984, CVE-2024-35895, CVE-2024-35853, CVE-2024-27043, CVE-2024-35978, CVE-2024-35960, CVE-2024-26882, CVE-2024-35806, CVE-2024-35830, CVE-2024-26852, CVE-2024-35915, CVE-2024-36006, CVE-2024-35935, CVE-2024-26926, CVE-2024-35877, CVE-2024-27396, CVE-2024-26654, CVE-2024-27077, CVE-2024-27078, CVE-2024-27000, CVE-2024-35888, CVE-2024-27437, CVE-2024-26994, CVE-2024-26973, CVE-2024-26687, CVE-2024-26955, CVE-2024-26898, CVE-2024-26859, CVE-2023-52620,…
Record
USN-6896-1
Updated
2026-11-02
OSVUSN-6896-2 No score

linux-hwe-5.4, linux-oracle-5.4 vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • ACPI drivers;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • PCI subsystem;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • FAT file system;
  • NILFS2 file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Packet sockets;
  • RDS protocol;
  • Network traffic control;
  • Sun RPC protocol;
  • Unix domain sockets;
  • ALSA SH drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-27076, CVE-2024-35849, CVE-2024-35899, CVE-2024-27038, CVE-2024-35982, CVE-2024-26687, CVE-2024-26863, CVE-2024-36004, CVE-2024-27004, CVE-2024-27065, CVE-2024-36020, CVE-2024-27000, CVE-2024-26981, CVE-2024-26973, CVE-2024-35922, CVE-2024-35969, CVE-2024-26851, CVE-2023-52880, CVE-2024-35813, CVE-2024-26859, CVE-2024-27078, CVE-2024-27020, CVE-2024-35809, CVE-2024-27001, CVE-2024-26969, CVE-2024-26993, CVE-2024-35935, CVE-2024-35815, CVE-2024-26931, CVE-2024-35823, CVE-2024-26984, CVE-2024-27024, CVE-2024-27419, CVE-2024-27008, CVE-2024-35825, CVE-2023-52644, CVE-2024-35933, CVE-2024-35830, CVE-2024-35900, CVE-2024-27046, CVE-2024-26651,…
Record
USN-6896-2
Updated
2026-11-02
OSVUSN-6896-3 No score

linux-oracle, linux-xilinx-zynqmp vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • ACPI drivers;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • PCI subsystem;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • FAT file system;
  • NILFS2 file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Packet sockets;
  • RDS protocol;
  • Network traffic control;
  • Sun RPC protocol;
  • Unix domain sockets;
  • ALSA SH drivers;
  • USB sound devices;
  • KVM core; (CVE-2023-52620, CVE-2023-52650, CVE-2024-26999, CVE-2024-26857, CVE-2024-35984, CVE-2024-27043, CVE-2024-26810, CVE-2023-52880, CVE-2024-35915, CVE-2024-26955, CVE-2024-27396, CVE-2024-35922, CVE-2024-27395, CVE-2024-35899, CVE-2024-35809, CVE-2024-27000, CVE-2024-27004, CVE-2024-35830, CVE-2024-26931, CVE-2024-26993, CVE-2024-27013, CVE-2024-26812, CVE-2024-35893, CVE-2024-27073, CVE-2024-26687, CVE-2024-26969, CVE-2024-26901, CVE-2024-26875, CVE-2024-26976, CVE-2024-26889, CVE-2024-26586, CVE-2024-36020, CVE-2024-26859, CVE-2024-35944, CVE-2024-35888, CVE-2024-26965, CVE-2024-36007, CVE-2024-35847, CVE-2024-27436, CVE-2024-35982, CVE-2023-52699,…
Record
USN-6896-3
Updated
2026-11-02
OSVUSN-6896-4 No score

linux-raspi, linux-raspi-5.4 vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • ACPI drivers;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • PCI subsystem;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • FAT file system;
  • NILFS2 file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Packet sockets;
  • RDS protocol;
  • Network traffic control;
  • Sun RPC protocol;
  • Unix domain sockets;
  • ALSA SH drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-35930, CVE-2024-26687, CVE-2024-26828, CVE-2024-26903, CVE-2024-35893, CVE-2024-35847, CVE-2024-35849, CVE-2024-35789, CVE-2024-26812, CVE-2024-26898, CVE-2024-26937, CVE-2024-35809, CVE-2023-52620, CVE-2024-35852, CVE-2024-26922, CVE-2024-26923, CVE-2024-27001, CVE-2024-35915, CVE-2024-35935, CVE-2024-26974, CVE-2024-26859, CVE-2024-26999, CVE-2024-26981, CVE-2024-35982, CVE-2024-26969, CVE-2024-26889, CVE-2024-26984, CVE-2024-27077, CVE-2024-26973, CVE-2024-27436, CVE-2024-26965, CVE-2024-35855, CVE-2024-27024, CVE-2024-26934, CVE-2024-35806, CVE-2024-35895, CVE-2024-27076, CVE-2024-26931, CVE-2024-35888, CVE-2024-35899, CVE-2024-35815,…
Record
USN-6896-4
Updated
2026-11-02
OSVUSN-6896-5 No score

linux-aws, linux-aws-5.4, linux-iot vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • ACPI drivers;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • PCI subsystem;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • FAT file system;
  • NILFS2 file system;
  • Diskquota system;
  • SMB network file system;
  • UBI file system;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Networking core;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Packet sockets;
  • RDS protocol;
  • Network traffic control;
  • Sun RPC protocol;
  • Unix domain sockets;
  • ALSA SH drivers;
  • USB sound devices;
  • KVM core; (CVE-2024-35982, CVE-2024-26862, CVE-2024-35997, CVE-2024-26851, CVE-2024-26817, CVE-2024-26820, CVE-2024-26974, CVE-2024-35806, CVE-2024-26903, CVE-2024-35822, CVE-2024-27076, CVE-2024-26901, CVE-2024-26955, CVE-2024-26976, CVE-2024-35821, CVE-2024-27038, CVE-2024-26994, CVE-2023-52656, CVE-2024-27008, CVE-2024-26966, CVE-2024-26898, CVE-2024-26931, CVE-2024-35888, CVE-2024-26810, CVE-2024-26969, CVE-2024-35960, CVE-2024-26884, CVE-2024-26999, CVE-2024-35847, CVE-2024-35807, CVE-2024-26857, CVE-2024-35915, CVE-2023-52880, CVE-2024-35936, CVE-2024-26875, CVE-2024-26973, CVE-2024-35899, CVE-2024-35910, CVE-2024-27020, CVE-2024-26828, CVE-2024-26957,…
Record
USN-6896-5
Updated
2026-11-02
OSVUSN-6898-1 No score

linux, linux-gcp, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-oracle vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • Freescale SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • FAT file system;
  • Network file system client;
  • Network file system server daemon;
  • NILFS2 file system;
  • Pstore file system;
  • SMB network file system;
  • UBI file system;
  • Netfilter;
  • BPF subsystem;
  • Core kernel;
  • PCI iomap interfaces;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • NFC subsystem;
  • Open vSwitch;
  • RDS protocol;
  • Network traffic control;
  • SMC sockets;
  • Unix domain sockets;
  • eXpress Data Path;
  • ALSA SH drivers;
  • KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…
Record
USN-6898-1
Updated
2026-11-02
OSVUSN-6898-2 No score

linux-ibm-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • Freescale SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • FAT file system;
  • Network file system client;
  • Network file system server daemon;
  • NILFS2 file system;
  • Pstore file system;
  • SMB network file system;
  • UBI file system;
  • Netfilter;
  • BPF subsystem;
  • Core kernel;
  • PCI iomap interfaces;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • NFC subsystem;
  • Open vSwitch;
  • RDS protocol;
  • Network traffic control;
  • SMC sockets;
  • Unix domain sockets;
  • eXpress Data Path;
  • ALSA SH drivers;
  • KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…
Record
USN-6898-2
Updated
2026-11-02
OSVUSN-6898-3 No score

linux-aws, linux-hwe-5.15 vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • Freescale SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • FAT file system;
  • Network file system client;
  • Network file system server daemon;
  • NILFS2 file system;
  • Pstore file system;
  • SMB network file system;
  • UBI file system;
  • Netfilter;
  • BPF subsystem;
  • Core kernel;
  • PCI iomap interfaces;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • NFC subsystem;
  • Open vSwitch;
  • RDS protocol;
  • Network traffic control;
  • SMC sockets;
  • Unix domain sockets;
  • eXpress Data Path;
  • ALSA SH drivers;
  • KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…
Record
USN-6898-3
Updated
2026-11-02
OSVUSN-6898-4 No score

linux-aws-5.15 vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • Freescale SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • FAT file system;
  • Network file system client;
  • Network file system server daemon;
  • NILFS2 file system;
  • Pstore file system;
  • SMB network file system;
  • UBI file system;
  • Netfilter;
  • BPF subsystem;
  • Core kernel;
  • PCI iomap interfaces;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • NFC subsystem;
  • Open vSwitch;
  • RDS protocol;
  • Network traffic control;
  • SMC sockets;
  • Unix domain sockets;
  • eXpress Data Path;
  • ALSA SH drivers;
  • KVM core; (CVE-2024-35872, CVE-2024-35807, CVE-2024-27013, CVE-2024-35989, CVE-2024-36008, CVE-2024-26957, CVE-2024-35912, CVE-2024-27000, CVE-2024-35918, CVE-2024-26977, CVE-2024-35821, CVE-2024-35853, CVE-2024-26814, CVE-2024-35823, CVE-2024-35958, CVE-2024-26813, CVE-2024-26811, CVE-2024-26937, CVE-2024-26951, CVE-2024-35925, CVE-2024-26929, CVE-2024-35988, CVE-2024-35902, CVE-2024-26994, CVE-2024-27001, CVE-2024-36029, CVE-2024-36005, CVE-2024-35970, CVE-2024-36007, CVE-2024-35809, CVE-2024-27019, CVE-2024-26970, CVE-2024-27059, CVE-2024-35877, CVE-2024-35899, CVE-2024-26989, CVE-2024-27008, CVE-2024-26812, CVE-2024-35969, CVE-2024-35785, CVE-2024-35871, CVE-2024-35847, CVE-2024-36006, CVE-2024-35973, CVE-2024-27396, CVE-2024-35849, CVE-2024-35990, CVE-2024-26960, CVE-2024-26931, CVE-2024-35852, CVE-2024-26965, CVE-2024-35960, CVE-2024-35813, CVE-2024-26976, CVE-2024-36004, CVE-2024-35895, CVE-2024-27018, CVE-2024-26969, CVE-2024-27016, CVE-2024-27437, CVE-2024-26956, CVE-2024-26629,…
Record
USN-6898-4
Updated
2026-11-02
OSVUSN-6917-1 No score

linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15 vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • Freescale SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • FAT file system;
  • Network file system client;
  • Network file system server daemon;
  • NILFS2 file system;
  • Pstore file system;
  • SMB network file system;
  • UBI file system;
  • Netfilter;
  • BPF subsystem;
  • Core kernel;
  • PCI iomap interfaces;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Networking core;
  • Distributed Switch Architecture;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • NFC subsystem;
  • Open vSwitch;
  • RDS protocol;
  • Network traffic control;
  • SMC sockets;
  • Unix domain sockets;
  • eXpress Data Path;
  • Key management;
  • ALSA SH drivers;
  • KVM core; (CVE-2024-26993, CVE-2024-26996, CVE-2024-35879, CVE-2024-26812, CVE-2024-26984, CVE-2024-26817, CVE-2024-35950, CVE-2024-26960, CVE-2024-27437, CVE-2024-26964, CVE-2024-27059, CVE-2024-35969, CVE-2024-35936, CVE-2024-35912, CVE-2024-35915, CVE-2024-35938, CVE-2024-27019, CVE-2024-35822, CVE-2024-35997, CVE-2024-35855, CVE-2024-26925, CVE-2024-26654, CVE-2024-26923, CVE-2024-36031, CVE-2024-36020, CVE-2024-35823, CVE-2024-35852, CVE-2024-35989, CVE-2024-27000, CVE-2024-35853, CVE-2024-27013, CVE-2024-35854, CVE-2024-35922, CVE-2024-26937, CVE-2023-52880, CVE-2024-26974, CVE-2024-26629, CVE-2024-35804, CVE-2024-35958, CVE-2024-26814, CVE-2024-35890, CVE-2024-35940, CVE-2024-26999, CVE-2024-35847, CVE-2024-27015, CVE-2024-26687, CVE-2024-26970, CVE-2024-35930, CVE-2024-26813, CVE-2024-26810, CVE-2024-26969, CVE-2024-26977, CVE-2024-26956, CVE-2024-35901, CVE-2024-27020,…
Record
USN-6917-1
Updated
2026-11-02
OSVUSN-6919-1 No score

linux-raspi vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • ACPI drivers;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Cryptographic API;
  • DMA engine subsystem;
  • EFI core;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • MediaTek PM domains;
  • Power supply drivers;
  • S/390 drivers;
  • SCSI drivers;
  • Freescale SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FAT file system;
  • Network file system client; -…
Record
USN-6919-1
Updated
2026-11-02
OSVUSN-6927-1 No score

linux-gcp-5.15 vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • Android drivers;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IRQ chip drivers;
  • Multiple devices driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • Freescale SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB subsystem;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • FAT file system;
  • Network file system client;
  • Network file system server daemon;
  • NILFS2 file system;
  • Pstore file system;
  • SMB network file system;
  • UBI file system;
  • Netfilter;
  • BPF subsystem;
  • Core kernel;
  • PCI iomap interfaces;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Networking core;
  • Distributed Switch Architecture;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • NFC subsystem;
  • Open vSwitch;
  • RDS protocol;
  • Network traffic control;
  • SMC sockets;
  • Unix domain sockets;
  • eXpress Data Path;
  • ALSA SH drivers;
  • KVM core; (CVE-2024-35902, CVE-2024-35958, CVE-2024-35978, CVE-2024-35886, CVE-2024-35807, CVE-2024-26994, CVE-2024-36004, CVE-2024-35955, CVE-2024-26925, CVE-2024-27059, CVE-2024-35989, CVE-2024-35940, CVE-2024-26952, CVE-2024-35907, CVE-2024-35819, CVE-2024-35872, CVE-2024-36016, CVE-2023-52488, CVE-2024-35884, CVE-2024-26886, CVE-2024-27018, CVE-2024-35905, CVE-2024-35897, CVE-2024-26929, CVE-2024-36007, CVE-2024-35855, CVE-2024-35885, CVE-2024-26965, CVE-2024-35896, CVE-2024-36029, CVE-2024-35813, CVE-2024-26811, CVE-2024-26923,…
Record
USN-6927-1
Updated
2026-11-02
OSVUSN-7019-1 No score

linux-xilinx-zynqmp vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-40902)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • M68K architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • SuperH RISC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Accessibility subsystem;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Bluetooth drivers;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • FireWire subsystem;
  • FPGA Framework;
  • GPIO subsystem;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • HW tracing;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device (Mouse) drivers;
  • IRQ chip drivers;
  • Macintosh device drivers;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • Pin controllers subsystem;
  • PTP clock framework;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • Freescale SoC…
Record
USN-7019-1
Updated
2026-11-02
OSVUSN-7069-1 No score

linux, linux-aws, linux-aws-hwe, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 architecture;
  • Cryptographic API;
  • CPU frequency scaling framework;
  • HW tracing;
  • ISDN/mISDN subsystem;
  • Media drivers;
  • Network drivers;
  • NVME drivers;
  • S/390 drivers;
  • SCSI drivers;
  • USB subsystem;
  • VFIO drivers;
  • Watchdog drivers;
  • JFS file system;
  • IRQ subsystem;
  • Core kernel;
  • Memory management;
  • Amateur Radio drivers;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • Network traffic control;
  • TIPC protocol;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • SoC Audio for Freescale CPUs drivers;
  • USB sound devices; (CVE-2024-36971, CVE-2024-42271, CVE-2024-38630, CVE-2024-38602, CVE-2024-42223, CVE-2024-44940, CVE-2023-52528, CVE-2024-41097, CVE-2024-27051, CVE-2024-42157, CVE-2024-46673, CVE-2024-39494, CVE-2024-42089, CVE-2024-41073, CVE-2024-26810, CVE-2024-26960, CVE-2024-38611, CVE-2024-31076, CVE-2024-26754, CVE-2023-52510, CVE-2024-40941, CVE-2024-45016, CVE-2024-38627, CVE-2024-38621, CVE-2024-39487, CVE-2024-27436, CVE-2024-40901, CVE-2024-26812, CVE-2024-42244, CVE-2024-42229, CVE-2024-43858, CVE-2024-42280, CVE-2024-26641, CVE-2024-42284, CVE-2024-26602)
Record
USN-7069-1
Updated
2026-11-02
OSVUSN-7069-2 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 architecture;
  • Cryptographic API;
  • CPU frequency scaling framework;
  • HW tracing;
  • ISDN/mISDN subsystem;
  • Media drivers;
  • Network drivers;
  • NVME drivers;
  • S/390 drivers;
  • SCSI drivers;
  • USB subsystem;
  • VFIO drivers;
  • Watchdog drivers;
  • JFS file system;
  • IRQ subsystem;
  • Core kernel;
  • Memory management;
  • Amateur Radio drivers;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • Network traffic control;
  • TIPC protocol;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • SoC Audio for Freescale CPUs drivers;
  • USB sound devices; (CVE-2024-36971, CVE-2024-42271, CVE-2024-38630, CVE-2024-38602, CVE-2024-42223, CVE-2024-44940, CVE-2023-52528, CVE-2024-41097, CVE-2024-27051, CVE-2024-42157, CVE-2024-46673, CVE-2024-39494, CVE-2024-42089, CVE-2024-41073, CVE-2024-26810, CVE-2024-26960, CVE-2024-38611, CVE-2024-31076, CVE-2024-26754, CVE-2023-52510, CVE-2024-40941, CVE-2024-45016, CVE-2024-38627, CVE-2024-38621, CVE-2024-39487, CVE-2024-27436, CVE-2024-40901, CVE-2024-26812, CVE-2024-42244, CVE-2024-42229, CVE-2024-43858, CVE-2024-42280, CVE-2024-26641, CVE-2024-42284, CVE-2024-26602)
Record
USN-7069-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Azure Linux:2
 before 5.15.176.3-3
5.15.176.3-3
linux-lts
Alpaquita:23
 6.1.82-r0 up to 6.1.89-r0
6.1.89-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
linux-buildinfo-4.15.0-239-tuxcare.els27-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-buildinfo-4.15.0-239-tuxcare.els27-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-cloud-tools-4.15.0-239-tuxcare.els27
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-cloud-tools-4.15.0-239-tuxcare.els27-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-cloud-tools-4.15.0-239-tuxcare.els27-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
Show 290 moreShow less
Affected packages
PackageAffectedFixed
linux-cloud-tools-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-crashdump
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-headers-4.15.0-239-tuxcare.els27
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-headers-4.15.0-239-tuxcare.els27-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-headers-4.15.0-239-tuxcare.els27-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-headers-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-headers-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-image-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-image-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-image-unsigned-4.15.0-239-tuxcare.els27-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-image-unsigned-4.15.0-239-tuxcare.els27-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-modules-4.15.0-239-tuxcare.els27-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-modules-4.15.0-239-tuxcare.els27-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-modules-extra-4.15.0-239-tuxcare.els27-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-source
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-tools-4.15.0-239-tuxcare.els27
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-tools-4.15.0-239-tuxcare.els27-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-tools-4.15.0-239-tuxcare.els27-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-tools-generic
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-tools-host
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0-239.250
4.15.0-239.250
linux-tools-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 15 CVEs
 before 4.15.0.239.250
4.15.0.239.250
linux-buildinfo-4.4.0-267-tuxcare.els38-generic
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-buildinfo-4.4.0-267-tuxcare.els38-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-cloud-tools-4.4.0-267-tuxcare.els38
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-cloud-tools-4.4.0-267-tuxcare.els38-generic
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-cloud-tools-4.4.0-267-tuxcare.els38-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-cloud-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-cloud-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0.267.301
4.4.0.267.301
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0.267.301
4.4.0.267.301
linux-crashdump
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0.267.301
4.4.0.267.301
linux-doc
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-generic
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0.267.301
4.4.0.267.301
linux-headers-4.4.0-267-tuxcare.els38
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-headers-4.4.0-267-tuxcare.els38-generic
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-headers-4.4.0-267-tuxcare.els38-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-headers-generic
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0.267.301
4.4.0.267.301
linux-headers-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0.267.301
4.4.0.267.301
linux-image-generic
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0.267.301
4.4.0.267.301
linux-image-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0.267.301
4.4.0.267.301
linux-image-unsigned-4.4.0-267-tuxcare.els38-generic
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-image-unsigned-4.4.0-267-tuxcare.els38-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-libc-dev
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0.267.301
4.4.0.267.301
linux-modules-4.4.0-267-tuxcare.els38-generic
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-modules-4.4.0-267-tuxcare.els38-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-modules-extra-4.4.0-267-tuxcare.els38-generic
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
linux-source
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0.267.301
4.4.0.267.301
linux-source-4.4.0
TuxCare:Ubuntu:16.04
From an advisory covering 67 CVEs
 before 4.4.0-267.301
4.4.0-267.301
Kernel
Linux
 3.6.0 up to 5.4.274, 5.5.0 up to 5.10.215, 5.11.0 up to 5.15.154, 5.16.0 up to 6.1.84, 6.2.0 up to 6.6.24, 6.7.0 up to 6.7.12, 6.8.0 up to 6.8.3
5.4.2745.10.2155.15.1546.1.846.6.246.7.126.8.3
linux
Debian:12
 before 6.1.85-1, plus listed versions
6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1
Show 14 moreShow less
6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1
6.1.85-1
linux
Debian:13
 before 6.7.12-1
6.7.12-1
linux
Debian:14
 before 6.7.12-1
6.7.12-1
linux-5.10
Debian:10
From an advisory covering 344 CVEs
 before 5.10.216-1~deb10u1, plus listed versions
5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1
Show 8 moreShow less
5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1
5.10.216-1~deb10u1
linux
Debian:12
From an advisory covering 19 CVEs
 before 6.1.85-1, plus listed versions
6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1
Show 14 moreShow less
6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1
6.1.85-1
linux
Debian:11
From an advisory covering 246 CVEs
 before 5.10.216-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 34 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.216-1
kernel
openEuler:20.03-LTS-SP1
From an advisory covering 61 CVEs
 before 4.19.90-2405.3.0.0249.oe1
4.19.90-2405.3.0.0249.oe1
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 63 CVEs
 before 4.19.90-2405.3.0.0276.oe2003sp4
4.19.90-2405.3.0.0276.oe2003sp4
kernel
openEuler:22.03-LTS-SP1
From an advisory covering 28 CVEs
 before 5.10.0-136.75.0.155.oe2203sp1
5.10.0-136.75.0.155.oe2203sp1
kernel
openEuler:22.03-LTS-SP2
From an advisory covering 28 CVEs
 before 5.10.0-153.54.0.132.oe2203sp2
5.10.0-153.54.0.132.oe2203sp2
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 77 CVEs
 before 5.10.0-199.0.0.112.oe2203sp3
5.10.0-199.0.0.112.oe2203sp3
kernel
openEuler:22.03-LTS
From an advisory covering 76 CVEs
 before 5.10.0-60.138.0.165.oe2203
5.10.0-60.138.0.165.oe2203
bpftool-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:7.4.0-503.11.1.el9_5
0:7.4.0-503.11.1.el9_5
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
bpftool
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:7.4.0-503.11.1.el9_5
0:7.4.0-503.11.1.el9_5
bpftool-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:7.4.0-503.11.1.el9_5
0:7.4.0-503.11.1.el9_5
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 104 CVEs
 before 4.12.14-10.200.1
4.12.14-10.200.1
kernel-rt_debug
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 104 CVEs
 before 4.12.14-10.200.1
4.12.14-10.200.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 104 CVEs
 before 4.12.14-10.200.1
4.12.14-10.200.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 104 CVEs
 before 4.12.14-10.200.1
4.12.14-10.200.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 292 CVEs
 before 5.14.21-150500.33.66.1
5.14.21-150500.33.66.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 292 CVEs
 before 5.14.21-150500.33.66.1
5.14.21-150500.33.66.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 292 CVEs
 before 5.14.21-150500.33.66.1
5.14.21-150500.33.66.1
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 292 CVEs
 before 5.14.21-150500.33.66.1
5.14.21-150500.33.66.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 292 CVEs
 before 5.14.21-150500.33.66.1
5.14.21-150500.33.66.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 292 CVEs
 before 5.14.21-150500.33.66.1
5.14.21-150500.33.66.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.8.11.1
6.4.0-150600.8.11.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.8.11.1
6.4.0-150600.8.11.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.8.11.1
6.4.0-150600.8.11.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.8.11.1
6.4.0-150600.8.11.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.8.11.1
6.4.0-150600.8.11.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.8.11.1
6.4.0-150600.8.11.1
kernel-livepatch-SLE15-SP6-RT_Update_2
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 393 CVEs
 before 1-150600.1.3.2
1-150600.1.3.2
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 393 CVEs
 before 6.4.0-150600.10.8.3
6.4.0-150600.10.8.3
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 393 CVEs
 before 6.4.0-150600.10.8.3
6.4.0-150600.10.8.3
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 393 CVEs
 before 6.4.0-150600.10.8.3
6.4.0-150600.10.8.3
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 393 CVEs
 before 6.4.0-150600.10.8.1
6.4.0-150600.10.8.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 393 CVEs
 before 6.4.0-150600.10.8.3
6.4.0-150600.10.8.3
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 393 CVEs
 before 6.4.0-150600.10.8.3
6.4.0-150600.10.8.3
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 393 CVEs
 before 6.4.0-150600.10.8.3
6.4.0-150600.10.8.3
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 393 CVEs
 before 6.4.0-150600.10.8.1
6.4.0-150600.10.8.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 292 CVEs
 before 5.14.21-150500.13.67.3
5.14.21-150500.13.67.3
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 292 CVEs
 before 5.14.21-150500.13.67.3
5.14.21-150500.13.67.3
kernel-livepatch-SLE15-SP5-RT_Update_19
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 292 CVEs
 before 1-150500.11.3.2
1-150500.11.3.2
kernel-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 292 CVEs
 before 5.14.21-150500.13.67.3
5.14.21-150500.13.67.3
kernel-rt_debug
SUSE:Real Time Module 15 SP5
From an advisory covering 292 CVEs
 before 5.14.21-150500.13.67.3
5.14.21-150500.13.67.3
kernel-source-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 292 CVEs
 before 5.14.21-150500.13.67.3
5.14.21-150500.13.67.3
kernel-syms-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 292 CVEs
 before 5.14.21-150500.13.67.1
5.14.21-150500.13.67.1
kernel-rt
openSUSE:Leap Micro 5.5
From an advisory covering 292 CVEs
 before 5.14.21-150500.13.67.3
5.14.21-150500.13.67.3
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 292 CVEs
 before 5.14.21-150500.13.67.3
5.14.21-150500.13.67.3
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 292 CVEs
 before 5.14.21-150500.13.67.3
5.14.21-150500.13.67.3
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 292 CVEs
 before 5.14.21-150500.13.67.3
5.14.21-150500.13.67.3
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 292 CVEs
 before 5.14.21-150500.13.67.1
5.14.21-150500.13.67.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-122.228.1
4.12.14-122.228.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-122.228.1
4.12.14-122.228.1
kgraft-patch-SLE12-SP5_Update_60
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 105 CVEs
 before 1-8.3.1
1-8.3.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-122.228.2
4.12.14-122.228.2
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-122.228.2
4.12.14-122.228.2
kernel-default
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-122.228.1
4.12.14-122.228.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-122.228.1
4.12.14-122.228.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-122.228.1
4.12.14-122.228.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-122.228.1
4.12.14-122.228.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-122.228.1
4.12.14-122.228.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-122.228.1
4.12.14-122.228.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-122.228.1
4.12.14-122.228.1
kernel-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-16.197.1
4.12.14-16.197.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-16.197.1
4.12.14-16.197.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-16.197.1
4.12.14-16.197.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-16.197.1
4.12.14-16.197.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-16.197.1
4.12.14-16.197.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 105 CVEs
 before 4.12.14-16.197.1
4.12.14-16.197.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1.150600.12.8.3
6.4.0-150600.23.22.1.150600.12.8.3
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-livepatch-SLE15-SP6_Update_4
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 394 CVEs
 before 1-150600.13.3.3
1-150600.13.3.3
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1.150600.12.8.3
6.4.0-150600.23.22.1.150600.12.8.3
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 394 CVEs
 before 6.4.0-150600.23.22.1
6.4.0-150600.23.22.1
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2.150500.6.35.6
5.14.21-150500.55.80.2.150500.6.35.6
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2.150500.6.35.6
5.14.21-150500.55.80.2.150500.6.35.6
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
kernel-default
openSUSE:Leap Micro 5.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
kernel-default-base
openSUSE:Leap Micro 5.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2.150500.6.35.6
5.14.21-150500.55.80.2.150500.6.35.6
dtb-aarch64
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.1
5.14.21-150500.55.80.1
kernel-64kb
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
kernel-debug
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
kernel-default
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
kernel-default-base
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2.150500.6.35.6
5.14.21-150500.55.80.2.150500.6.35.6
kernel-docs
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
kernel-kvmsmall
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
kernel-obs-build
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.1
5.14.21-150500.55.80.1
kernel-obs-qa
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.1
5.14.21-150500.55.80.1
kernel-source
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
kernel-syms
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.1
5.14.21-150500.55.80.1
kernel-zfcpdump
openSUSE:Leap 15.5
From an advisory covering 296 CVEs
 before 5.14.21-150500.55.80.2
5.14.21-150500.55.80.2
linux-aws
Ubuntu:Pro:14.04:LTS
 before 4.4.0-1137.143, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
4.4.0-1137.143
linux-azure
Ubuntu:Pro:14.04:LTS
 before 4.15.0-1182.197~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
4.15.0-1182.197~14.04.1
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 before 4.4.0-260.294~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
4.4.0-260.294~14.04.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux
Ubuntu:Pro:16.04:LTS
 before 4.4.0-260.294, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-260.294
linux-aws
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1175.190, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1175.190
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1174.187~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1174.187~16.04.1
linux-azure
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1182.197~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1182.197~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1167.184~16.04.2, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1167.184~16.04.2
linux-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-230.242~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-230.242~16.04.1
linux-kvm
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1138.148, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
4.4.0-1138.148
linux-oracle
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1136.147~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
4.15.0-1136.147~16.04.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 before 4.4.0-1106.113, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
4.4.0-1106.113
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 before 4.15.0-230.242, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-230.242
linux-aws
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1174.187, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1174.187
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1128.138~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
5.4.0-1128.138~18.04.1
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1182.197, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1182.197
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1133.140~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
5.4.0-1133.140~18.04.1
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1167.184, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1167.184
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1132.141~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
5.4.0-1132.141~18.04.1
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-189.209~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-189.209~18.04.1
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1075.80~18.04.1, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
5.4.0-1075.80~18.04.1
linux-kvm
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1157.162, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
4.15.0-1157.162
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1136.147, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1136.147
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1127.136~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
5.4.0-1127.136~18.04.1
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1112.124~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
5.4.0-1112.124~18.04.1
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2112.118, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
4.15.0-2112.118
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2091.97, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
4.15.0-2091.97
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-1128.139, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
4.15.0-1128.139
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2075.80, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 42 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.79
4.15.0-2075.80
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:20.04:LTS
 before 5.4.0-189.209, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-189.209
linux-aws
Ubuntu:20.04:LTS
 before 5.4.0-1128.138, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1128.138
linux-aws-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1065.71~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 35 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.1
5.15.0-1065.71~20.04.1
linux-azure
Ubuntu:20.04:LTS
 before 5.4.0-1133.140, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
5.4.0-1133.140
linux-azure-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1068.77~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 38 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.1
5.15.0-1068.77~20.04.1
linux-bluefield
Ubuntu:20.04:LTS
 before 5.4.0-1088.95, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
5.4.0-1088.95
linux-gcp
Ubuntu:20.04:LTS
 before 5.4.0-1132.141, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
5.4.0-1132.141
linux-gcp-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1065.73~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 35 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.1
5.15.0-1065.73~20.04.1
linux-gkeop
Ubuntu:20.04:LTS
 before 5.4.0-1095.99, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
5.4.0-1095.99

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26812 is a high vulnerability (CVSS 7.8) in Debian Linux, published April 5, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in kernel 5.15.176.3-3.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 303 package rows, 1,667 versions, 4,802 references and the rest of 37 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 1 source record.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open