Every CVE Search/ Get API key

CVE-2024-26828

cifs: fix underflow in parse_server_interfaces()

9.4 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix underflow in parse_server_interfaces()

In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
Low
Availability
High

Exploit likelihood

0.75%Up 0.7 points since Apr 18, 2024
90%50%10%1%

What each source reports

CVE List Score used 9.4

cifs: fix underflow in parse_server_interfaces()

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix underflow in parse_server_interfaces()

In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.

Record
CVE-2024-26828
CVSS 3.1
9.4 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
CVSS 3.1
6.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2024-24090 9.4

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix underflow in parse_server_interfaces()

In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.

Record
EUVD-2024-24090
CVSS 3.1
9.4 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-q43w-g673-m6f4 6.7

In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in...

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix underflow in parse_server_interfaces()

In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.

Record
GHSA-q43w-g673-m6f4
CVSS 3.1
6.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Weakness
CWE-191
Updated
2026-11-02
NVD 9.4

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix underflow in parse_server_interfaces()

In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.

Record
CVE-2024-26828
CVSS 3.1
9.4 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
CVSS 3.1
6.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Weakness
CWE-191
Updated
2026-11-02
OSVBELL-CVE-2024-26828 9.4
Record
BELL-CVE-2024-26828
CVSS 3.1
9.4 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSV 9.4

cifs: fix underflow in parse_server_interfaces()

In the Linux kernel, the following vulnerability has been resolved:

cifs: fix underflow in parse_server_interfaces()

In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.

Record
CVE-2024-26828
CVSS 3.1
9.4 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2024-26828 9.4

In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.

Record
DEBIAN-CVE-2024-26828
CVSS 3.1
9.4 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVOESA-2024-1617 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate.

Note, writing '0' to kvmclock MSR doesn't clear memory location, it just prevents hypervisor from updating the location so for the short while after write and while CPU is still alive, the clock remains usable and correct so we don't need to switch to some other clocksource.(CVE-2021-47110)

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

Remove the reason of null pointer dereference in sync VSI filters. Added new I40E_VSI_RELEASING flag to signalize deleting and releasing of VSI resources to sync this thread with sync filters subtask. Without this patch it is possible to start update the VSI filter list after VSI is removed, that's causing a kernel oops.(CVE-2021-47184)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

CPU: 0 PID: 7789 Comm: stress Not tainted 6.0.0-rc1-00002-g0d53d2e882f9 #3 Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 Call Trace: <TASK> .. __mutex_lock+0xe5/0xc30 .. z_erofs_do_read_page+0x8ce/0x1560 .. z_erofs_readahead+0x31c/0x580 .. Freed by task 7787 kasan_save_stack+0x1e/0x40 kasan_set_track+0x20/0x30 kasan_set_free_info+0x20/0x40 __kasan_slab_free+0x10c/0x190 kmem_cache_free+0xed/0x380 rcu_core+0x3d5/0xc90 __do_softirq+0x12d/0x389

Last potentially related work creation: kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x97/0xb0 call_rcu+0x3d/0x3f0 erofs_shrink_workstation+0x11f/0x210 erofs_shrink_scan+0xdc/0x170 shrink_slab.constprop.0+0x296/0x530 drop_slab+0x1c/0x70 drop_caches_sysctl_handler+0x70/0x80 proc_sys_call_handler+0x20a/0x2f0 vfs_write+0x555/0x6c0 ksys_write+0xbe/0x160 do_syscall_64+0x3b/0x90

The root cause is that erofs_workgroup_unfreeze() doesn't reset to orig_val thus it causes a race that the pcluster reuses unexpectedly before freeing.

Since UP platforms are quite rare now, such path becomes unnecessary. Let's drop such specific-designed path directly instead.(CVE-2022-48674)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.(CVE-2023-52615)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: disallow timeout for anonymous sets

Never used from userspace, disallow these parameters.(CVE-2023-52620)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix a suspicious RCU usage warning

I received the following warning while running cthon against an ontap server running pNFS:

[ 57.202521] ============================= [ 57.202522] WARNING: suspicious RCU usage [ 57.202523] 6.7.0-rc3-g2cc14f52aeb7 #41492 Not tainted [ 57.202525] ----------------------------- [ 57.202525] net/sunrpc/xprtmultipath.c:349 RCU-list traversed in non-reader section!! [ 57.202527] other info that might help us debug this:

[ 57.202528] …

Record
OESA-2024-1617
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1618 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

tun: avoid double free in tun_free_netdev

Avoid double free in tun_free_netdev() by moving the dev->tstats and tun->security allocs to a new ndo_init routine (tun_net_init()) that will be called by register_netdevice(). ndo_init is paired with the desctructor (tun_free_netdev()), so if there's an error in register_netdevice() the destructor will handle the frees.

BUG: KASAN: double-free or invalid-free in selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605

CPU: 0 PID: 25750 Comm: syz-executor416 Not tainted 5.16.0-rc2-syzk #1 Hardware name: Red Hat KVM, BIOS Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x89/0xb5 lib/dump_stack.c:106 print_address_description.constprop.9+0x28/0x160 mm/kasan/report.c:247 kasan_report_invalid_free+0x55/0x80 mm/kasan/report.c:372 ____kasan_slab_free mm/kasan/common.c:346 [inline] __kasan_slab_free+0x107/0x120 mm/kasan/common.c:374 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:1723 [inline] slab_free_freelist_hook mm/slub.c:1749 [inline] slab_free mm/slub.c:3513 [inline] kfree+0xac/0x2d0 mm/slub.c:4561 selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605 security_tun_dev_free_security+0x4f/0x90 security/security.c:2342 tun_free_netdev+0xe6/0x150 drivers/net/tun.c:2215 netdev_run_todo+0x4df/0x840 net/core/dev.c:10627 rtnl_unlock+0x13/0x20 net/core/rtnetlink.c:112 __tun_chr_ioctl+0x80c/0x2870 drivers/net/tun.c:3302 tun_chr_ioctl+0x2f/0x40 drivers/net/tun.c:3311 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x19d/0x220 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3a/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae(CVE-2021-47082)

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate.

Note, writing '0' to kvmclock MSR doesn't clear memory location, it just prevents hypervisor from updating the location so for the short while after write and while CPU is still alive, the clock remains usable and correct so we don't need to switch to some other clocksource.(CVE-2021-47110)

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

Remove the reason of null pointer dereference in sync VSI filters. Added new I40E_VSI_RELEASING flag to signalize deleting and releasing of VSI resources to sync this thread with sync filters subtask. Without this patch it is possible to start update the VSI filter list after VSI is removed, that's causing a kernel oops.(CVE-2021-47184)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

CPU: 0 PID: 7789 Comm: stress Not tainted 6.0.0-rc1-00002-g0d53d2e882f9 #3 Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 Call Trace: <TASK> .. __mutex_lock+0xe5/0xc30 .. z_erofs_do_read_page+0x8ce/0x1560 .. z_erofs_readahead+0x31c/0x580 .. Freed by task 7787 kasan_save_stack+0x1e/0x40 kasan_set_track+0x20/0x30 kasan_set_free_info+0x20/0x40 __kasan_slab_free+0x10c/0x190 kmem_cache_free+0xed/0x380 rcu_core+0x3d5/0xc90 __do_softirq+0x12d/0x389

Last potentially related work creation: …

Record
OESA-2024-1618
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1620 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave.

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and initialized. If usb_get_bos_descriptor() fails for whatever reason, udev->bos will be NULL and those accesses will result in a crash:

BUG: kernel NULL pointer dereference, address: 0000000000000018 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1> Hardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021 Workqueue: usb_hub_wq hub_event RIP: 0010:hub_port_reset+0x193/0x788 Code: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9 RSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310 RDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840 RBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0 Call Trace: hub_event+0x73f/0x156e ? hub_activate+0x5b7/0x68f process_one_work+0x1a2/0x487 worker_thread+0x11a/0x288 kthread+0x13a/0x152 ? process_one_work+0x487/0x487 ? kthread_associate_blkcg+0x70/0x70 ret_from_fork+0x1f/0x30

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.(CVE-2023-52477)

In the Linux kernel, the following vulnerability has been resolved:

block/rnbd-srv: Check for unlikely string overflow

Since "dev_search_path" can technically be as large as PATH_MAX, there was a risk of truncation when copying it and a second string into "full_path" since it was also PATH_MAX sized. The W=1 builds were reporting this warning:

drivers/block/rnbd/rnbd-srv.c: In function 'process_msg_open.isra': drivers/block/rnbd/rnbd-srv.c:616:51: warning: '%s' directive output may be truncated writing up to 254 bytes into a region of size between 0 and 4095 [-Wformat-truncation=] 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~ In function 'rnbd_srv_get_full_path', inlined from 'process_msg_open.isra' at drivers/block/rnbd/rnbd-srv.c:721:14: drivers/block/rnbd/rnbd-srv.c:616:17: note: 'snprintf' output between 2 and 4351 bytes into a destination of size 4096 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 617 | dev_search_path, dev_name); | ~~~~~~~~~~~~~~~~~~~~~~~~~~

To fix this, unconditionally check for truncation (as was already done for the case where "%SESSNAME%" was present).(CVE-2023-52618)

In the Linux kernel, the following…

Record
OESA-2024-1620
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1621 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave.

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and initialized. If usb_get_bos_descriptor() fails for whatever reason, udev->bos will be NULL and those accesses will result in a crash:

BUG: kernel NULL pointer dereference, address: 0000000000000018 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1> Hardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021 Workqueue: usb_hub_wq hub_event RIP: 0010:hub_port_reset+0x193/0x788 Code: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9 RSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310 RDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840 RBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0 Call Trace: hub_event+0x73f/0x156e ? hub_activate+0x5b7/0x68f process_one_work+0x1a2/0x487 worker_thread+0x11a/0x288 kthread+0x13a/0x152 ? process_one_work+0x487/0x487 ? kthread_associate_blkcg+0x70/0x70 ret_from_fork+0x1f/0x30

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.(CVE-2023-52477)

In the Linux kernel, the following vulnerability has been resolved:

block/rnbd-srv: Check for unlikely string overflow

Since "dev_search_path" can technically be as large as PATH_MAX, there was a risk of truncation when copying it and a second string into "full_path" since it was also PATH_MAX sized. The W=1 builds were reporting this warning:

drivers/block/rnbd/rnbd-srv.c: In function 'process_msg_open.isra': drivers/block/rnbd/rnbd-srv.c:616:51: warning: '%s' directive output may be truncated writing up to 254 bytes into a region of size between 0 and 4095 [-Wformat-truncation=] 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~ In function 'rnbd_srv_get_full_path', inlined from 'process_msg_open.isra' at drivers/block/rnbd/rnbd-srv.c:721:14: drivers/block/rnbd/rnbd-srv.c:616:17: note: 'snprintf' output between 2 and 4351 bytes into a destination of size 4096 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 617 | dev_search_path, dev_name); | ~~~~~~~~~~~~~~~~~~~~~~~~~~

To fix this, unconditionally check for truncation (as was already done for the case where "%SESSNAME%" was present).(CVE-2023-52618)

In the Linux kernel, the following…

Record
OESA-2024-1621
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1622 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave.

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

CPU: 0 PID: 7789 Comm: stress Not tainted 6.0.0-rc1-00002-g0d53d2e882f9 #3 Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 Call Trace: <TASK> .. __mutex_lock+0xe5/0xc30 .. z_erofs_do_read_page+0x8ce/0x1560 .. z_erofs_readahead+0x31c/0x580 .. Freed by task 7787 kasan_save_stack+0x1e/0x40 kasan_set_track+0x20/0x30 kasan_set_free_info+0x20/0x40 __kasan_slab_free+0x10c/0x190 kmem_cache_free+0xed/0x380 rcu_core+0x3d5/0xc90 __do_softirq+0x12d/0x389

Last potentially related work creation: kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x97/0xb0 call_rcu+0x3d/0x3f0 erofs_shrink_workstation+0x11f/0x210 erofs_shrink_scan+0xdc/0x170 shrink_slab.constprop.0+0x296/0x530 drop_slab+0x1c/0x70 drop_caches_sysctl_handler+0x70/0x80 proc_sys_call_handler+0x20a/0x2f0 vfs_write+0x555/0x6c0 ksys_write+0xbe/0x160 do_syscall_64+0x3b/0x90

The root cause is that erofs_workgroup_unfreeze() doesn't reset to orig_val thus it causes a race that the pcluster reuses unexpectedly before freeing.

Since UP platforms are quite rare now, such path becomes unnecessary. Let's drop such specific-designed path directly instead.(CVE-2022-48674)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and initialized. If usb_get_bos_descriptor() fails for whatever reason, udev->bos will be NULL and those accesses will result in a crash:

BUG: kernel NULL pointer dereference, address: 0000000000000018 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1> Hardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021 Workqueue: usb_hub_wq hub_event RIP: 0010:hub_port_reset+0x193/0x788 Code: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9 RSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310 RDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840 RBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0 Call Trace: hub_event+0x73f/0x156e ? hub_activate+0x5b7/0x68f process_one_work+0x1a2/0x487 worker_thread+0x11a/0x288 kthread+0x13a/0x152 ? process_one_work+0x487/0x487 ? kthread_associate_blkcg+0x70/0x70 ret_from_fork+0x1f/0x30

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support…

Record
OESA-2024-1622
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1647 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()

memcpy() is called in a loop while 'operation->length' upper bound is not checked and 'data_idx' also increments.(CVE-2022-48632)

In the Linux kernel, the following vulnerability has been resolved:

mm/slub: fix to return errno if kmalloc() fails

In create_unique_id(), kmalloc(, GFP_KERNEL) can fail due to out-of-memory, if it fails, return errno correctly rather than triggering panic via BUG_ON();

kernel BUG at mm/slub.c:5893! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP

Call trace: sysfs_slab_add+0x258/0x260 mm/slub.c:5973 __kmem_cache_create+0x60/0x118 mm/slub.c:4899 create_cache mm/slab_common.c:229 [inline] kmem_cache_create_usercopy+0x19c/0x31c mm/slab_common.c:335 kmem_cache_create+0x1c/0x28 mm/slab_common.c:390 f2fs_kmem_cache_create fs/f2fs/f2fs.h:2766 [inline] f2fs_init_xattr_caches+0x78/0xb4 fs/f2fs/xattr.c:808 f2fs_fill_super+0x1050/0x1e0c fs/f2fs/super.c:4149 mount_bdev+0x1b8/0x210 fs/super.c:1400 f2fs_mount+0x44/0x58 fs/f2fs/super.c:4512 legacy_get_tree+0x30/0x74 fs/fs_context.c:610 vfs_get_tree+0x40/0x140 fs/super.c:1530 do_new_mount+0x1dc/0x4e4 fs/namespace.c:3040 path_mount+0x358/0x914 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x2f8/0x408 fs/namespace.c:3568(CVE-2022-48659)

In the Linux kernel, the following vulnerability has been resolved:

gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

When running gpio test on nxp-ls1028 platform with below command gpiomon --num-events=3 --rising-edge gpiochip1 25 There will be a warning trace as below: Call trace: free_irq+0x204/0x360 lineevent_free+0x64/0x70 gpio_ioctl+0x598/0x6a0 __arm64_sys_ioctl+0xb4/0x100 invoke_syscall+0x5c/0x130 ...... el0t_64_sync+0x1a0/0x1a4 The reason of this issue is that calling request_threaded_irq() function failed, and then lineevent_free() is invoked to release the resource. Since the lineevent_state::irq was already set, so the subsequent invocation of free_irq() would trigger the above warning call trace. To fix this issue, set the lineevent_state::irq after the IRQ register successfully.(CVE-2022-48660)

In the Linux kernel, the following vulnerability has been resolved:

binder: fix race between mmput() and do_exit()

Task A calls binder_update_page_range() to allocate and insert pages on a remote address space from Task B. For this, Task A pins the remote mm via mmget_not_zero() first. This can race with Task B do_exit() and the final mmput() refcount decrement will come from Task A.

Task A | Task B ------------------+------------------ mmget_not_zero() | | do_exit() | exit_mm() | mmput() mmput() | exit_mmap() | remove_vma() | fput() |

In this case, the work of ____fput() from Task B is queued up in Task A as TWA_RESUME. So in theory, Task A returns to userspace and the cleanup work gets executed. However, Task A instead sleep, waiting for a reply from Task B that never comes (it's dead).

This means the binder_deferred_release() is blocked until an unrelated binder event forces Task A to go back to userspace. All the associated death notifications will also be delayed until then.

In order to fix this use mmput_async() that will schedule the work in the corresponding mm->async_put_work WQ instead of Task A.(CVE-2023-52609)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng…

Record
OESA-2024-1647
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3460 6.7

Red Hat Security Advisory: kernel-rt security and bug fix update

Record
RHSA-2024:3460
CVSS 3.1
6.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3461 6.7

Red Hat Security Advisory: kernel security and bug fix update

Record
RHSA-2024:3461
CVSS 3.1
6.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:5363 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:5363
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-26828 6.7

In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that "bytes_left" is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.

Record
UBUNTU-CVE-2024-26828
CVSS 3.1
6.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
CVSS 3.1
9.4 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVALSA-2024:5363 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

  • kernel: phy: (CVE-2024-26600)
  • kernel: netfilter: multiple flaws (CVE-2024-26808, CVE-2024-27065, CVE-2024-35899, CVE-2024-36005)
  • kernel: cifs: (CVE-2024-26828)
  • kernel: wifi: multiple flaws (CVE-2024-26897, CVE-2024-27052, CVE-2024-27049, CVE-2023-52651, CVE-2024-35789, CVE-2024-27434, CVE-2024-35845, CVE-2024-35937, CVE-2024-36941, CVE-2024-36922, CVE-2024-36921, CVE-2024-38575)
  • kernel: nfs: (CVE-2024-26868)
  • kernel: igc: (CVE-2024-26853)
  • kernel: dmaengine/idxd: (CVE-2024-21823)
  • kernel: ipv6: multiple flaws (CVE-2024-27417, CVE-2024-35969, CVE-2024-36903, CVE-2024-40961)
  • kernel: vt: (CVE-2024-35823)
  • kernel: efi: (CVE-2024-35800)
  • kernel: mlxsw: (CVE-2024-35852)
  • kernel: eeprom: (CVE-2024-35848)
  • kernel: ice: (CVE-2024-35911)
  • kernel: platform/x86: (CVE-2023-52864)
  • kernel: i40e: (CVE-2024-36020)
  • kernel: rtnetlink: (CVE-2024-36017)
  • kernel: net: multiple flaws (CVE-2024-36929, CVE-2024-36971, CVE-2021-47606, CVE-2024-38558, CVE-2024-40928, CVE-2024-40954)
  • kernel: ipvlan: (CVE-2024-33621)
  • kernel: tcp: (CVE-2024-37356)
  • kernel: virtio: (CVE-2024-37353)
  • kernel: tls: (CVE-2024-36489)
  • kernel: cxl/region: (CVE-2024-38391)
  • kernel: bonding: (CVE-2024-39487)
  • kernel: netns: (CVE-2024-40958)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:5363
Updated
2026-11-02
OSVCLSA-2024-1719231016 No score

kernel: Fix of 52 CVEs

  • net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882}
  • tls: fix use-after-free on failed backlog decryption {CVE-2024-26800}
  • tls: separate no-async decryption request handling from async {CVE-2024-26584}
  • tls: decrement decrypt_pending if no async completion will be called {CVE-2024-26584}
  • net: tls: fix use-after-free with partial reads and async decrypt {CVE-2024-26582}
  • net: tls: handle backlogging of crypto requests {CVE-2024-26584}
  • net: tls: factor out tls_*crypt_async_wait()
  • tap: tap_open(): correctly initialize socket uid {CVE-2023-1076}
  • tun: tun_chr_open(): correctly initialize socket uid {CVE-2023-1076}
  • net: add sock_init_data_uid() {CVE-2023-1076}
  • netfilter: nf_tables: bail out on mismatching dynset and set expressions {CVE-2023-6622}
  • drm/qxl: fix UAF on handle creation {CVE-2023-39198}
  • smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
  • USB: core: Fix deadlock in port "disable" sysfs attribute {CVE-2024-26933}
  • USB: core: Add hub_get() and hub_put() routines {CVE-2024-26933}
  • USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934}
  • scsi: qla2xxx: Fix double free of fcport {CVE-2024-26929}
  • netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020}
  • net: ip_tunnel: prevent perpetual headroom growth {CVE-2024-26804}
  • netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout {CVE-2024-26643}
  • netfilter: nf_tables: disallow anonymous set with timeout flag {CVE-2024-26642}
  • netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations {CVE-2024-26673}
  • ipv6: sr: fix possible use-after-free and null-ptr-deref {CVE-2024-26735}
  • fs: sysfs: Fix reference leak in sysfs_break_active_protection() {CVE-2024-26993}
  • cifs: fix underflow in parse_server_interfaces() {CVE-2024-26828}
  • mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path {CVE-2024-26595}
  • mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code {CVE-2024-26595}
  • mlxsw: spectrum_acl_tcam: Make fini symmetric to init {CVE-2024-26595}
  • mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() {CVE-2024-26595}
  • net: xfrm: Fix xfrm_address_filter OOB read {CVE-2023-39194}
  • exfat: check if filename entries exceeds max filename length {CVE-2023-4273}
  • xfrm: add NULL check in xfrm_update_ae_params {CVE-2023-3772}
  • firmware: arm_scmi: Harden accesses to the reset domains {CVE-2022-48655}
  • tcp: Reduce chance of collisions in inet6_hashfn(). {CVE-2023-1206}
  • ipv4: fix null-deref in ipv4_link_failure {CVE-2023-42754}
  • netfilter: nfnetlink_osf: avoid OOB read {CVE-2023-39189}
  • netfilter: xt_sctp: validate the flag_info count {CVE-2023-39193}
  • net: qcom/emac: Fix use after free bug in emac_remove due to race condition {CVE-2023-33203}
  • net/tls: tls_is_tx_ready() checked list_entry {CVE-2023-1075}
  • HID: asus: use spinlock to safely schedule workers {CVE-2023-1079}
  • HID: asus: use spinlock to protect concurrent accesses {CVE-2023-1079}
  • HID: intel_ish-hid: Add check for ishtp_dma_tx_map {CVE-2023-3358}
  • gfs2: Don't deref jdesc in evict {CVE-2023-3212}
  • fbcon: Check font dimension limits {CVE-2023-3161}
  • KVM: nVMX: add missing consistency checks for CR0 and CR4 {CVE-2023-30456}
  • hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition {CVE-2023-1855}
  • Bluetooth: HCI: Fix global-out-of-bounds {CVE-2023-28866}
  • HID: check empty report_list in hid_validate_values() {CVE-2023-1073}
  • net: mpls: fix stale pointer if allocation fails during device rename {CVE-2023-26545}
  • r8152: Rate limit overflow messages {CVE-2022-3594}
  • drm/vmwgfx: Fix shader stage validation {CVE-2022-36402}
  • Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895}
  • dm ioctl: fix nested locking in table_clear() to remove deadlock concern {CVE-2023-2269}
  • mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() {CVE-2023-52562} -…
Record
CLSA-2024-1719231016
Updated
2026-11-02
OSVCLSA-2026-1788449727 No score

Fix of 235 CVEs

  • Bump kernel ABI to 29: ship the ELS kernel as 4.19.0-29-*, distinct from the prior 4.19.0-28.
  • CVE-2021-46984
    • kyber: fix out of bounds access when preempted {CVE-2021-46984}
  • CVE-2021-47049
    • Drivers: hv: vmbus: Use after free in __vmbus_open() {CVE-2021-47049}
  • CVE-2021-47101
    • asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101}
  • CVE-2021-47191
    • scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() {CVE-2021-47191}
  • CVE-2021-47352
    • virtio-net: Add validation for used length {CVE-2021-47352}
  • CVE-2021-47379
    • blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd {CVE-2021-47379}
  • CVE-2021-47391
    • RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests {CVE-2021-47391}
  • CVE-2021-47479
    • staging: rtl8712: fix use-after-free in rtl8712_dl_fw {CVE-2021-47479}
  • CVE-2022-21546
    • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • CVE-2022-39189
    • KVM: x86: do not report a vCPU as preempted outside instruction boundaries {CVE-2022-39189}
  • CVE-2022-43945
    • SUNRPC: Fix svcxdr_init_encode's buflen calculation {CVE-2022-43945}
    • NFSD: Cap rsize_bop result based on send buffer size {CVE-2022-43945}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2022-49026
    • e100: Fix possible use after free in e100_xmit_prepare {CVE-2022-49026}
  • CVE-2022-49720
    • block: Fix handling of offline queues in blk_mq_alloc_request_hctx() {CVE-2022-49720}
  • CVE-2022-49975
    • bpf: Don't redirect packets with invalid pkt_len {CVE-2022-49975}
    • bpf: Move skb->len == 0 checks into __bpf_redirect {CVE-2022-49975}
  • CVE-2022-50066
    • net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
  • CVE-2022-50103
    • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • CVE-2022-50129
    • RDMA/srpt: Introduce a reference count in struct srpt_device {CVE-2022-50129}
    • RDMA/srpt: Fix a use-after-free {CVE-2022-50129}
  • CVE-2022-50300
    • btrfs: fix extent map use-after-free when handling missing device in read_one_chunk {CVE-2022-50300}
  • CVE-2022-50406
    • iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406}
  • CVE-2022-50422
    • scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
  • CVE-2022-50552
    • blk-mq: use quiesced elevator switch when reinitializing queues {CVE-2022-50552}
  • CVE-2023-51779
    • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • CVE-2023-52434
    • smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}
  • CVE-2023-52515
    • RDMA/srp: Do not call scsi_done() from srp_abort() {CVE-2023-52515}
  • CVE-2023-52531
    • wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531}
  • CVE-2023-52741
    • cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741}
  • CVE-2023-53000
    • netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
  • CVE-2023-53039
    • workqueue: Add resource managed version of delayed work init {CVE-2023-53039}
    • devm-helpers: Fix devm_delayed_work_autocancel() kerneldoc {CVE-2023-53039}
    • devm-helpers: Add resource managed version of work init {CVE-2023-53039}
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
    • HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc {CVE-2023-53039}
  • CVE-2023-53111
    • loop: Fix use-after-free issues {CVE-2023-53111}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels…
Record
CLSA-2026-1788449727
Updated
2026-11-02
OSVLSN-0105-1 No score

Kernel Live Patch Security Notice

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code.(CVE-2023-6270)

It was discovered that the netfilter connection tracker for netlink in the Linux kernel did not properly perform reference counting in some error conditions. A local attacker could possibly use this to cause a denial of service (memory exhaustion).(CVE-2023-7192)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.(CVE-2024-26642)

In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item we check if the size_left is greater than the minimum size we need. However, the problem is that 'bytes_left' is type ssize_t while sizeof() is type size_t. That means that because of type promotion, the comparison is done as an unsigned and if we have negative bytes left the loop continues instead of ending.(CVE-2024-26828)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: do not free live element (CVE-2024-26924)

Record
LSN-0105-1
Updated
2026-11-02
OSVRLSA-2024:5363 No score

Important: kernel security update

Errata Tool Automation could not update the description because it is longer (4803) than ET limit of 4000 characters. (OSCI-6058) Please update the description manually.

Record
RLSA-2024:5363
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2024-26828 No score

CVE-2024-26828 in linux - Patched by Root

Root has patched CVE-2024-26828 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2024-26828
Updated
2026-11-02
OSVSUSE-SU-2024:1979-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2022-48686: Fix UAF when detecting digest errors (bsc#1223948). Update blacklist.conf: remove entry
  • CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
  • CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
  • CVE-2022-48697: Fix a use-after-free (bsc#1223922). Update blacklist.conf: drop entry from it
  • CVE-2024-26846: Do not wait in vain when unloading module (bsc#1223023).
  • CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2021-47246: Fix page reclaim for dead peer hairpin (bsc#1224831).
  • CVE-2023-52732: Blocklist the kclient when receiving corrupted snap trace (bsc#1225222 CVE-2023-52732).
  • CVE-2024-35936: Add missing mutex_unlock in btrfs_relocate_sys_chunks() (bsc#1224644)
  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2024-36029: Pervent access to suspended controller (bsc#1225708 CVE-2024-36029)
  • CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
  • CVE-2021-47352: Add validation for used length (bsc#1225124).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
  • CVE-2021-47431: Fix gart.bo pin_count leak (bsc#1225390).
  • CVE-2024-35935: Handle path ref underflow in header iterate_inode_ref() (bsc#1224645)
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2021-47423: Fix file release memory leak (bsc#1225366).
  • CVE-2022-48710: Fix a possible null pointer dereference (bsc#1225230).
  • CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
  • CVE-2024-35932: Do not check if plane->state->fb == state->fb (bsc#1224650).
  • CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
  • CVE-2024-35809: Drain runtime-idle callbacks before driver removal (bsc#1224738).
  • CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
  • CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
  • CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
  • CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
  • CVE-2024-35982: Avoid infinite loop trying to resize local TT (bsc#1224566)
  • CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
  • CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960, CVE-2021-47277).
  • CVE-2024-35791: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (bsc#1224725).
  • CVE-2021-47401: Fix stack information leak (bsc#1225242).
  • CVE-2023-52867: Fix possible buffer overflow (bsc#1225009).
  • CVE-2023-52821: Fix a possible null pointer dereference (bsc#1225022).
  • CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
  • CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
  • CVE-2021-47361: Fix error handling in mcb_alloc_bus() (bsc#1225151).
  • CVE-2023-52864: Fix opening of char device (bsc#1225132).
  • CVE-2022-48708: Fix potential NULL dereference (bsc#1224942).
  • CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648).
  • CVE-2021-47238: Fix memory leak in ip_mc_add1_src (bsc#1224847)
  • CVE-2023-52730: Fix possible resource leaks in some error paths (bsc#1224956).
  • CVE-2021-47355: Fix possible use-after-free in nicstar_cleanup() (bsc#1225141).
  • CVE-2021-47245: Fix out of bounds when parsing TCP options (bsc#1224838)
  • CVE-2024-35878: Prevent NULL pointer dereference in vsnprintf() (bsc#1224671).
  • CVE-2023-52747: Restore allocated resources on failed copyout (bsc#1224931) -…
Record
SUSE-SU-2024:1979-1
Updated
2026-11-02
OSVSUSE-SU-2024:1983-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2022-48686: Fix UAF when detecting digest errors (bsc#1223948).
  • CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
  • CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
  • CVE-2022-48697: Fix a use-after-free (bsc#1223922).
  • CVE-2024-26846: Do not wait in vain when unloading module (bsc#1223023).
  • CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2021-47246: Fix page reclaim for dead peer hairpin (bsc#1224831).
  • CVE-2023-52732: Blocklist the kclient when receiving corrupted snap trace (bsc#1225222).
  • CVE-2024-35936: Add missing mutex_unlock in btrfs_relocate_sys_chunks() (bsc#1224644)
  • CVE-2021-47548: Fixed a possible array out-of-bounds (bsc#1225506)
  • CVE-2024-36029: Pervent access to suspended controller (bsc#1225708)
  • CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
  • CVE-2021-47352: Add validation for used length (bsc#1225124).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
  • CVE-2021-47431: Fix gart.bo pin_count leak (bsc#1225390).
  • CVE-2024-35935: Handle path ref underflow in header iterate_inode_ref() (bsc#1224645)
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2021-47423: Fix file release memory leak (bsc#1225366).
  • CVE-2022-48710: Fix a possible null pointer dereference (bsc#1225230).
  • CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
  • CVE-2024-35932: Do not check if plane->state->fb == state->fb (bsc#1224650).
  • CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
  • CVE-2024-35809: Drain runtime-idle callbacks before driver removal (bsc#1224738).
  • CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
  • CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
  • CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
  • CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
  • CVE-2024-35982: Avoid infinite loop trying to resize local TT (bsc#1224566)
  • CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
  • CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960).
  • CVE-2024-35791: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (bsc#1224725).
  • CVE-2021-47401: Fix stack information leak (bsc#1225242).
  • CVE-2023-52867: Fix possible buffer overflow (bsc#1225009).
  • CVE-2023-52821: Fix a possible null pointer dereference (bsc#1225022).
  • CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
  • CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
  • CVE-2021-47361: Fix error handling in mcb_alloc_bus() (bsc#1225151).
  • CVE-2023-52864: Fix opening of char device (bsc#1225132).
  • CVE-2022-48708: Fix potential NULL dereference (bsc#1224942).
  • CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648).
  • CVE-2021-47238: Fix memory leak in ip_mc_add1_src (bsc#1224847)
  • CVE-2023-52730: Fix possible resource leaks in some error paths (bsc#1224956).
  • CVE-2021-47355: Fix possible use-after-free in nicstar_cleanup() (bsc#1225141).
  • CVE-2021-47245: Fix out of bounds when parsing TCP options (bsc#1224838)
  • CVE-2024-35878: Prevent NULL pointer dereference in vsnprintf() (bsc#1224671).
  • CVE-2023-52747: Restore allocated resources on failed copyout (bsc#1224931)
  • CVE-2021-47249: Fix memory leak in rds_recvmsg (bsc#1224880)
  • CVE-2021-47397: Break out if skb_header_pointer returns NULL in…
Record
SUSE-SU-2024:1983-1
Updated
2026-11-02
OSVSUSE-SU-2024:2008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
  • CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
  • CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
  • CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
  • CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
  • CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
  • CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
  • CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
  • CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
  • CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
  • CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
  • CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
  • CVE-2024-27417: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721)
  • CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
  • CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
  • CVE-2024-35791: Flush pages under…
Record
SUSE-SU-2024:2008-1
Updated
2026-11-02
OSVSUSE-SU-2024:2010-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
  • CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
  • CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
  • CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
  • CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
  • CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
  • CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
  • CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
  • CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
  • CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
  • CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
  • CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
  • CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
  • CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).

The following non-security bugs were fixed:

  • af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
  • af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
  • af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
  • btrfs: do not start relocation until in progress drops are done (bsc#1222251).
  • btrfs: do not start relocation until in progress drops are done (bsc#1222251).
  • cifs: add missing spinlock around tcon refcount (bsc#1213476).
  • cifs: avoid dup prefix path in dfs_get_automount_devname() (bsc#1213476).
  • cifs: avoid race conditions with parallel reconnects (bsc#1213476).
  • cifs: avoid re-lookups in dfs_cache_find() (bsc#1213476).
  • cifs: avoid use of global locks for high contention data (bsc#1213476).
  • cifs: check only tcon status on tcon related functions (bsc#1213476).
  • cifs: do all necessary checks for credits within or before locking (bsc#1213476).
  • cifs: do not block in dfs_cache_noreq_update_tgthint() (bsc#1213476).
  • cifs: do not refresh cached referrals from unactive mounts (bsc#1213476).
  • cifs: do not take exclusive lock for updating target hints (bsc#1213476).
  • cifs: fix confusing debug message (bsc#1213476).
  • cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1213476).
  • cifs: fix potential deadlock in cache_refresh_path() (bsc#1213476).
  • cifs: fix refresh of cached referrals (bsc#1213476).
  • cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1213476).
  • cifs: fix source pathname comparison of dfs supers (bsc#1213476).
  • cifs: fix status checks in cifs_tree_connect (bsc#1213476).
  • cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1213476).
  • cifs: get rid of dns resolve worker (bsc#1213476).
  • cifs: get rid of mount options string parsing (bsc#1213476).
  • cifs: handle cache lookup errors different than -ENOENT (bsc#1213476).
  • cifs: ignore ipc reconnect failures during dfs failover (bsc#1213476).
  • cifs: match even the scope id for ipv6 addresses (bsc#1213476).
  • cifs: optimize reconnect of nested links (bsc#1213476).
  • cifs: prevent data race in smb2_reconnect() (bsc#1213476). -…
Record
SUSE-SU-2024:2010-1
Updated
2026-11-02
OSVSUSE-SU-2024:2011-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
  • CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
  • CVE-2024-35904: Fixed dereference of garbage after mount failure (bsc#1224494).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
  • CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).

The following non-security bugs were fixed:

  • af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
  • af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
  • af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
  • filemap: remove use of wait bookmarks (bsc#1224085).
  • idpf: extend tx watchdog timeout (bsc#1224137).
  • ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
  • powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
  • powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
  • powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
  • powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
  • powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
  • powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
  • powerpc: Refactor verification of MSR_RI (bsc#1223191).
  • supported.conf: support tcp_dctcp module (jsc#PED-8111)
Record
SUSE-SU-2024:2011-1
Updated
2026-11-02
OSVSUSE-SU-2024:2019-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
  • CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
  • CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
  • CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-35869: Guarantee refcounted children from parent session (bsc#1224679).
  • CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2024-35964: Fixed not validating setsockopt user input (bsc#1224581).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
  • CVE-2024-35860: struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
  • CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
  • CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
  • CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
  • CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios (bsc#1224530).
  • CVE-2024-35852: Fixed memory leak when canceling rehash work (bsc#1224502).
  • CVE-2024-36006: Fixed incorrect list API usage (bsc#1224541).
  • CVE-2024-36007: Fixed warning during rehash (bsc#1224543).
  • CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
  • CVE-2024-35907: Call request_irq() after NAPI initialized (bsc#1224492).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure…
Record
SUSE-SU-2024:2019-1
Updated
2026-11-02
OSVSUSE-SU-2024:2135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
  • CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
  • CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
  • CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
  • CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
  • CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
  • CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
  • CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
  • CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
  • CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
  • CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
  • CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
  • CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
  • CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
  • CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
  • CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
  • CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
  • CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
  • CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
  • CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
  • CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
  • CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
  • CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2023-6270: Fixed a use-after-free issue in…
Record
SUSE-SU-2024:2135-1
Updated
2026-11-02
OSVSUSE-SU-2024:2183-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
  • CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
  • CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
  • CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
  • CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
  • CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
  • CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
  • CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
  • CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
  • CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
  • CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
  • CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
  • CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
  • CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
  • CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).

The following non-security bugs were fixed:

  • NFC: nxp: add NXP1002 (bsc#1185589).
  • PCI: rpaphp: Add MODULE_DESCRIPTION (bsc#1176869 ltc#188243).
  • af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
  • af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
  • af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
  • btrfs: do not start relocation until in progress drops are done (bsc#1222251).
  • md: Replace snprintf with scnprintf (git-fixes).
  • netfilter: nf_tables: GC transaction race with abort path (git-fixes).
  • netfilter: nf_tables: GC transaction race with netns dismantle (git-fixes).
  • netfilter: nf_tables: defer gc run if previous batch is still pending (git-fixes).
  • netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (git-fixes).
  • netfilter: nf_tables: fix kdoc warnings after gc rework (git-fixes).
  • netfilter: nf_tables: fix memleak when more than 255 elements expired (git-fixes).
  • netfilter: nf_tables: mark newset as dead on transaction abort (git-fixes).
  • netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (git-fixes).
  • netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure (git-fixes).
  • netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (git-fixes).
  • netfilter: nf_tables: skip dead set elements in netlink dump (git-fixes).
  • netfilter: nf_tables: use correct lock to protect gc_list (git-fixes).
  • netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (git-fixes).
  • netfilter: nft_set_rbtree: Add missing expired checks (git-fixes).
  • netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match (git-fixes).
  • netfilter: nft_set_rbtree: Detect partial overlaps on insertion (git-fixes).
  • netfilter: nft_set_rbtree: Do not account for expired elements on insertion (git-fixes).
  • netfilter: nft_set_rbtree: Drop spurious condition for overlap detection on insertion (git-fixes).
  • netfilter: nft_set_rbtree: Handle outcomes of tree rotations in overlap detection (git-fixes).
  • netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start() (git-fixes). -…
Record
SUSE-SU-2024:2183-1
Updated
2026-11-02
OSVSUSE-SU-2024:2184-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487).
  • CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
  • CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
  • CVE-2021-47113: Abort btrfs rename_exchange if we fail to insert the second ref (bsc#1221543).
  • CVE-2021-47131: Fixed a use-after-free after the TLS device goes down and up (bsc#1221545).
  • CVE-2021-47206: Check return value after calling platform_get_resource() (bsc#1222894).
  • CVE-2021-47238: Fixed memory leak in ip_mc_add1_src (bsc#1224847)
  • CVE-2021-47245: Fixed out of bounds when parsing TCP options (bsc#1224838)
  • CVE-2021-47246: Fixed page reclaim for dead peer hairpin (CVE-2021-47246 bsc#1224831).
  • CVE-2021-47249: Fixed memory leak in rds_recvmsg (bsc#1224880)
  • CVE-2021-47250: Fixed memory leak in netlbl_cipsov4_add_std (bsc#1224827)
  • CVE-2021-47265: Verify port when creating flow rule (bsc#1224957)
  • CVE-2021-47277: Avoid speculation-based attacks from out-of-range memslot accesses (bsc#1224960).
  • CVE-2021-47281: Fixed race of snd_seq_timer_open() (bsc#1224983).
  • CVE-2021-47334: Fixed two use after free in ibmasm_init_one (bsc#1225112).
  • CVE-2021-47352: Add validation for used length (bsc#1225124).
  • CVE-2021-47355: Fixed possible use-after-free in nicstar_cleanup() (bsc#1225141).
  • CVE-2021-47357: Fixed possible use-after-free in ia_module_exit() (bsc#1225144).
  • CVE-2021-47361: Fixed error handling in mcb_alloc_bus() (bsc#1225151).
  • CVE-2021-47362: Update intermediate power state for SI (bsc#1225153).
  • CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225208).
  • CVE-2021-47397: Break out if skb_header_pointer returns NULL in sctp_rcv_ootb (bsc#1225082)
  • CVE-2021-47401: Fixed stack information leak (bsc#1225242).
  • CVE-2021-47423: Fixed file release memory leak (bsc#1225366).
  • CVE-2021-47431: Fixed gart.bo pin_count leak (bsc#1225390).
  • CVE-2021-47469: Add SPI fix commit to be ignored (bsc#1225347)
  • CVE-2021-47483: Fixed possible double-free in regcache_rbtree_exit() (bsc#1224907).
  • CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
  • CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
  • CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
  • CVE-2021-47509: Limit the period size to 16MB (bsc#1225409).
  • CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2022-48672: Fixed off-by-one error in unflatten_dt_nodes() (CVE-2022-48672 bsc#1223931).
  • CVE-2022-48686: Fixed UAF when detecting digest errors (bsc#1223948).
  • CVE-2022-48697: Fixed a use-after-free (bsc#1223922).
  • CVE-2022-48702: Fixed out of bounds access in snd_emu10k1_pcm_channel_alloc() (bsc#1223923).
  • CVE-2022-48704: Add a force flush to delay work when radeon (bsc#1223932)
  • CVE-2022-48708: Fixed potential NULL dereference (bsc#1224942).
  • CVE-2022-48710: Fixed a possible null pointer dereference (bsc#1225230).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
  • CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52691: Fixed a double-free in si_dpm_init (bsc#1224607).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
  • CVE-2023-52730: Fixed possible resource leaks in some error paths (bsc#1224956).
  • CVE-2023-52732: Blocklist the kclient when…
Record
SUSE-SU-2024:2184-1
Updated
2026-11-02
OSVSUSE-SU-2024:2185-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
  • CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
  • CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
  • CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
  • CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
  • CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
  • CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
  • CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
  • CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
  • CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
  • CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
  • CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
  • CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
  • CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
  • CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).

The following non-security bugs were fixed:

  • af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
  • af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
  • af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
  • btrfs: do not start relocation until in progress drops are done (bsc#1222251).
  • btrfs: do not start relocation until in progress drops are done (bsc#1222251).
  • cifs: add missing spinlock around tcon refcount (bsc#1213476).
  • cifs: avoid dup prefix path in dfs_get_automount_devname() (bsc#1213476).
  • cifs: avoid race conditions with parallel reconnects (bsc#1213476).
  • cifs: avoid re-lookups in dfs_cache_find() (bsc#1213476).
  • cifs: avoid use of global locks for high contention data (bsc#1213476).
  • cifs: check only tcon status on tcon related functions (bsc#1213476).
  • cifs: do all necessary checks for credits within or before locking (bsc#1213476).
  • cifs: do not block in dfs_cache_noreq_update_tgthint() (bsc#1213476).
  • cifs: do not refresh cached referrals from unactive mounts (bsc#1213476).
  • cifs: do not take exclusive lock for updating target hints (bsc#1213476).
  • cifs: fix confusing debug message (bsc#1213476).
  • cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1213476).
  • cifs: fix potential deadlock in cache_refresh_path() (bsc#1213476).
  • cifs: fix refresh of cached referrals (bsc#1213476).
  • cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1213476).
  • cifs: fix source pathname comparison of dfs supers (bsc#1213476).
  • cifs: fix status checks in cifs_tree_connect (bsc#1213476).
  • cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1213476).
  • cifs: get rid of dns resolve worker (bsc#1213476).
  • cifs: get rid of mount options string parsing (bsc#1213476).
  • cifs: handle cache lookup errors different than -ENOENT (bsc#1213476).
  • cifs: ignore ipc reconnect failures during dfs failover (bsc#1213476).
  • cifs: match even the scope id for ipv6 addresses (bsc#1213476).
  • cifs: optimize reconnect of nested links (bsc#1213476).
  • cifs: prevent data race in smb2_reconnect() (bsc#1213476). -…
Record
SUSE-SU-2024:2185-1
Updated
2026-11-02
OSVSUSE-SU-2024:2189-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
  • CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-35863: Fix potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-35867: Fix potential UAF in cifs_stats_proc_show() (bsc#1224664).
  • CVE-2024-35868: Fix potential UAF in cifs_stats_proc_write() (bsc#1224678).
  • CVE-2024-26928: Fix potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
  • CVE-2024-35904: Avoid dereference of garbage after mount failure (bsc#1224494).
  • CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
  • CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).

The following non-security bugs were fixed:

  • af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
  • af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
  • af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
  • filemap: remove use of wait bookmarks (bsc#1224085).
  • idpf: extend tx watchdog timeout (bsc#1224137).
  • ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
  • powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
  • powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
  • powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
  • powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
  • powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
  • powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
  • powerpc: Refactor verification of MSR_RI (bsc#1223191).
Record
SUSE-SU-2024:2189-1
Updated
2026-11-02
OSVSUSE-SU-2024:2190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
  • CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
  • CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26700: Fixed drm/amd/display: Fix MST Null Ptr for RV (bsc#1222870)
  • CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
  • CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
  • CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
  • CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)
  • CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)
  • CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)
  • CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
  • CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
  • CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).
  • CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
  • CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
  • CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
  • CVE-2024-27042: Fixed potential out-of-bounds access in…
Record
SUSE-SU-2024:2190-1
Updated
2026-11-02
OSVSUSE-SU-2024:2326-1 No score

Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_11 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2326-1
Updated
2026-11-02
OSVSUSE-SU-2024:2335-1 No score

Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
Record
SUSE-SU-2024:2335-1
Updated
2026-11-02
OSVSUSE-SU-2024:2337-1 No score

Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828).
  • CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296).
Record
SUSE-SU-2024:2337-1
Updated
2026-11-02
OSVSUSE-SU-2024:2338-1 No score

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_11 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2338-1
Updated
2026-11-02
OSVSUSE-SU-2024:2341-1 No score

Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-150200_24_172 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2341-1
Updated
2026-11-02
OSVSUSE-SU-2024:2342-1 No score

Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_141 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2342-1
Updated
2026-11-02
OSVSUSE-SU-2024:2343-1 No score

Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-150200_24_183 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
  • CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
Record
SUSE-SU-2024:2343-1
Updated
2026-11-02
OSVSUSE-SU-2024:2344-1 No score

Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-150200_24_188 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
Record
SUSE-SU-2024:2344-1
Updated
2026-11-02
OSVSUSE-SU-2024:2351-1 No score

Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-150200_24_191 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
Record
SUSE-SU-2024:2351-1
Updated
2026-11-02
OSVSUSE-SU-2024:2357-1 No score

Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
Record
SUSE-SU-2024:2357-1
Updated
2026-11-02
OSVSUSE-SU-2024:2358-1 No score

Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_21 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2358-1
Updated
2026-11-02
OSVSUSE-SU-2024:2368-1 No score

Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_147 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2368-1
Updated
2026-11-02
OSVSUSE-SU-2024:2369-1 No score

Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
Record
SUSE-SU-2024:2369-1
Updated
2026-11-02
OSVSUSE-SU-2024:2373-1 No score

Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
  • CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
Record
SUSE-SU-2024:2373-1
Updated
2026-11-02
OSVSUSE-SU-2024:2382-1 No score

Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
Record
SUSE-SU-2024:2382-1
Updated
2026-11-02
OSVSUSE-SU-2024:2396-1 No score

Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_133 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2396-1
Updated
2026-11-02
OSVSUSE-SU-2024:2407-1 No score

Security update for the Linux Kernel RT (Live Patch 15 for SLE 15 SP5)

This update for the Linux Kernel 5.15.21-150500_13_55 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
Record
SUSE-SU-2024:2407-1
Updated
2026-11-02
OSVSUSE-SU-2024:2410-1 No score

Security update for the Linux Kernel RT (Live Patch 14 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_52 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
Record
SUSE-SU-2024:2410-1
Updated
2026-11-02
OSVSUSE-SU-2024:2437-1 No score

Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_36 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2437-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:9
From an advisory covering 46 CVEs
 before 7.3.0-427.31.1.el9_4
7.3.0-427.31.1.el9_4
kernel
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-devel
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-modules
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-cross-headers
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-debug
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-debug-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-debug-devel
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-debug-modules
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-devel
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-devel-matched
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-doc
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-headers
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-modules
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-modules-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-modules-extra
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt-debug
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt-devel
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt-modules
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt-modules-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-rt-modules-extra
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-tools
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-tools-libs
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-tools-libs-devel
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-uki-virt
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-zfcpdump
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-zfcpdump-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
linux-lts
Alpaquita:23
 6.1.74-r0 up to 6.1.81-r0
6.1.81-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 7.0.0-284.30.1.el9_2.tuxcare.els4
7.0.0-284.30.1.el9_2.tuxcare.els4
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
hyperv-daemons
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
libbpf-dev
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
libbpf4.19
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
libcpupower-dev
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
libcpupower1
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-compiler-gcc-8-x86
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-config-4.19
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-cpupower
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-doc-4.19
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-headers-4.19.0-29-all
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-headers-4.19.0-29-all-amd64
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-headers-4.19.0-29-amd64
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-headers-4.19.0-29-common
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-image-4.19.0-29-amd64-unsigned
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-image-amd64-signed-template
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-kbuild-4.19
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-libc-dev
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
linux-perf-4.19
TuxCare:Debian:10
From an advisory covering 237 CVEs
 before 4.19.325-2+tuxcare.els1
4.19.325-2+tuxcare.els1
Kernel
Linux
 4.18.0 up to 5.15.224, 5.16.0 up to 6.1.79, 6.2.0 up to 6.6.18, 6.7.0 up to 6.7.6
5.15.2246.1.796.6.186.7.6
linux
Debian:12
 before 6.1.82-1, plus listed versions
6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1
Show 13 moreShow less
6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1
6.1.82-1
linux
Debian:13
 before 6.7.7-1
6.7.7-1
linux
Debian:14
 before 6.7.7-1
6.7.7-1
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
From an advisory covering 5 CVEs
 before 4.4.0-256.290~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
4.4.0-256.290~14.04.1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1169.182~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1169.182~16.04.1
linux-aws
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.4.0-1171.186, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1171.186
linux-azure
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1178.193~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1178.193~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1163.180~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1163.180~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-226.238~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-226.238~16.04.1
linux
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.4.0-256.290, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-256.290
linux-aws
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1169.182, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1169.182
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1178.193, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1178.193
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1163.180, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1163.180
linux
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-226.238, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-226.238
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-189.209~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-189.209~18.04.1
linux-oracle
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1132.143, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1132.143
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1065.71~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 35 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.1
5.15.0-1065.71~20.04.1
linux-aws
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1128.138, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1128.138
linux-azure
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1133.140, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
5.4.0-1133.140
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1065.73~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 35 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.1
5.15.0-1065.73~20.04.1
linux-gcp
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1132.141, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
5.4.0-1132.141
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-116.126~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 35 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.1
5.15.0-116.126~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-116.126~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 35 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.1
5.15.0-116.126~20.04.1
linux
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-189.209, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-189.209
linux-gke-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gke
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gkeop
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1095.99, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
5.4.0-1095.99
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1058.61~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 16 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.1
5.15.0-1058.61~20.04.1
linux-ibm
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1075.80, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
5.4.0-1075.80
linux-oracle-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1063.69~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 34 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.1
5.15.0-1063.69~20.04.1
linux-oracle
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1127.136, plus listed versions
5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1061.655.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1066.715.4.0-1067.725.4.0-1069.755.4.0-1070.765.4.0-1071.775.4.0-1073.795.4.0-1076.83
5.4.0-1127.136
linux-aws
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1065.71, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 44 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1065.71
linux-gcp
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1064.72, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 43 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.71
5.15.0-1064.72
linux
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-116.126, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-116.126
linux-gke
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1062.68, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7
Show 42 moreShow less
5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.67
5.15.0-1062.68
linux-ibm
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1058.61, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8
Show 40 moreShow less
5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.60
5.15.0-1058.61
linux-oracle
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1063.69, plus listed versions
5.13.0-1008.105.15.0-1001.35.15.0-1002.45.15.0-1003.55.15.0-1006.8
Show 43 moreShow less
5.15.0-1007.95.15.0-1009.125.15.0-1011.155.15.0-1013.175.15.0-1016.205.15.0-1017.225.15.0-1018.235.15.0-1019.245.15.0-1021.275.15.0-1022.285.15.0-1025.315.15.0-1026.325.15.0-1027.335.15.0-1029.355.15.0-1030.365.15.0-1032.385.15.0-1033.395.15.0-1034.405.15.0-1035.415.15.0-1036.425.15.0-1037.435.15.0-1038.445.15.0-1039.455.15.0-1040.465.15.0-1041.475.15.0-1042.485.15.0-1044.505.15.0-1045.515.15.0-1046.525.15.0-1047.535.15.0-1048.545.15.0-1049.555.15.0-1050.565.15.0-1051.575.15.0-1052.585.15.0-1053.595.15.0-1054.605.15.0-1055.615.15.0-1058.645.15.0-1059.655.15.0-1060.665.15.0-1061.675.15.0-1062.68
5.15.0-1063.69
linux-aws
Ubuntu:Pro:24.04:LTS
From an advisory covering 5 CVEs
 before 6.8.0-1010.10, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.86.8.0-1009.9
6.8.0-1010.10
linux-azure
Ubuntu:Pro:24.04:LTS
From an advisory covering 5 CVEs
 before 6.8.0-1009.9, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.66.8.0-1007.76.8.0-1008.8
6.8.0-1009.9
linux-gcp
Ubuntu:Pro:24.04:LTS
From an advisory covering 5 CVEs
 before 6.8.0-1009.10, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.66.8.0-1007.76.8.0-1008.9
6.8.0-1009.10
linux
Ubuntu:Pro:24.04:LTS
From an advisory covering 5 CVEs
 before 6.8.0-36.36, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.226.8.0-28.286.8.0-31.316.8.0-35.35
6.8.0-36.36
linux-ibm
Ubuntu:Pro:24.04:LTS
From an advisory covering 5 CVEs
 before 6.8.0-1007.7, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.6
6.8.0-1007.7
kernel
openEuler:20.03-LTS-SP1
From an advisory covering 61 CVEs
 before 4.19.90-2405.3.0.0249.oe1
4.19.90-2405.3.0.0249.oe1
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 63 CVEs
 before 4.19.90-2405.3.0.0276.oe2003sp4
4.19.90-2405.3.0.0276.oe2003sp4
kernel
openEuler:22.03-LTS-SP1
From an advisory covering 28 CVEs
 before 5.10.0-136.75.0.155.oe2203sp1
5.10.0-136.75.0.155.oe2203sp1
kernel
openEuler:22.03-LTS-SP2
From an advisory covering 28 CVEs
 before 5.10.0-153.54.0.132.oe2203sp2
5.10.0-153.54.0.132.oe2203sp2
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 77 CVEs
 before 5.10.0-199.0.0.112.oe2203sp3
5.10.0-199.0.0.112.oe2203sp3
kernel
openEuler:22.03-LTS
From an advisory covering 76 CVEs
 before 5.10.0-60.138.0.165.oe2203
5.10.0-60.138.0.165.oe2203
kernel-rt
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-core
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-core
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-debuginfo
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-devel
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-kvm
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-modules
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-modules-core
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-modules-extra
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debuginfo
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debuginfo-common-x86_64
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-devel
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-kvm
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-modules
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-modules-core
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-modules-extra
Red Hat:rhel_eus:9.2::nfv
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-core
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-core
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-debuginfo
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-devel
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-modules
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-modules-core
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debug-modules-extra
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debuginfo
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-debuginfo-common-x86_64
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-devel
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-modules
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-modules-core
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
kernel-rt-modules-extra
Red Hat:rhel_eus:9.2::realtime
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.rt14.352.el9_2
0:5.14.0-284.67.1.rt14.352.el9_2
bpftool-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:7.0.0-284.67.1.el9_2
0:7.0.0-284.67.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-64k-debug-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-64k-debug-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-64k-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-64k-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-64k-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-debug-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-debug-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-debug-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-tools-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 7 CVEs
 before 0:5.14.0-284.67.1.el9_2
0:5.14.0-284.67.1.el9_2
kernel
Rocky Linux:9
From an advisory covering 46 CVEs
 before 0:5.14.0-427.31.1.el9_4
0:5.14.0-427.31.1.el9_4
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
kernel-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 180 CVEs
 before 4.12.14-16.188.1
4.12.14-16.188.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 180 CVEs
 before 4.12.14-16.188.1
4.12.14-16.188.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 180 CVEs
 before 4.12.14-16.188.1
4.12.14-16.188.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 180 CVEs
 before 4.12.14-16.188.1
4.12.14-16.188.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 180 CVEs
 before 4.12.14-16.188.1
4.12.14-16.188.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 180 CVEs
 before 4.12.14-16.188.1
4.12.14-16.188.1
kernel-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 199 CVEs
 before 4.12.14-10.188.1
4.12.14-10.188.1
kernel-rt_debug
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 199 CVEs
 before 4.12.14-10.188.1
4.12.14-10.188.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 199 CVEs
 before 4.12.14-10.188.1
4.12.14-10.188.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 199 CVEs
 before 4.12.14-10.188.1
4.12.14-10.188.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-livepatch-SLE15-SP5-RT_Update_16
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 561 CVEs
 before 1-150500.11.3.1
1-150500.11.3.1
kernel-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt_debug
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-syms-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 186 CVEs
 before 5.3.18-150300.172.1
5.3.18-150300.172.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 186 CVEs
 before 5.3.18-150300.172.1
5.3.18-150300.172.1
kernel-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 186 CVEs
 before 5.3.18-150300.172.1
5.3.18-150300.172.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 186 CVEs
 before 5.3.18-150300.172.1
5.3.18-150300.172.1
kernel-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-rt
openSUSE:Leap Micro 5.3
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-rt
openSUSE:Leap Micro 5.4
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-livepatch-SLE15-SP2_Update_49
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 130 CVEs
 before 1-150200.5.3.1
1-150200.5.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP2
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1.150200.9.99.1
5.3.18-150200.24.194.1.150200.9.99.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-default
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1.150200.9.99.1
5.3.18-150200.24.194.1.150200.9.99.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-preempt
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-source
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1.150200.9.99.1
5.3.18-150200.24.194.1.150200.9.99.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 130 CVEs
 before 5.3.18-150200.24.194.1
5.3.18-150200.24.194.1
kernel-default
openSUSE:Leap Micro 5.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
openSUSE:Leap Micro 5.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
kernel-default
openSUSE:Leap Micro 5.4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
openSUSE:Leap Micro 5.4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
dtb-aarch64
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-64kb
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-debug
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default-base
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1.150500.6.31.1
5.14.21-150500.55.68.1.150500.6.31.1
kernel-docs
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-kvmsmall
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-obs-build
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-obs-qa
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-source
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-syms
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-zfcpdump
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1128.138~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
5.4.0-1128.138~18.04.1
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1133.140~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
5.4.0-1133.140~18.04.1
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1132.141~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
5.4.0-1132.141~18.04.1
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known

History

History
RecordedChangedSources
affected
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26828 is a critical vulnerability (CVSS 9.4) in Linux, published April 17, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.75%, the 55th percentile. Fixed in linux-lts 6.1.81-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 700 package rows, 1,127 versions, 4,160 references and the rest of 18 source descriptions. The JSON record has them. Also not on the record: 112 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 161 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open