CVE-2024-26878

quota: Fix potential NULL pointer dereference

4.7 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

quota: Fix potential NULL pointer dereference

Below race may cause NULL pointer dereference

P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) ....

If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.

So let's fix it by using a temporary pointer to avoid this issue.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: High
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.19%Up 0.1 points since Apr 18, 2024

What each source reports

NVD Score used 4.7

In the Linux kernel, the following vulnerability has been resolved:

quota: Fix potential NULL pointer dereference

Below race may cause NULL pointer dereference

If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.

So let's fix it by using a temporary pointer to avoid this issue.

Record: CVE-2024-26878
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-362, CWE-476
Updated: 2026-11-02

CVE List No score

quota: Fix potential NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved:

quota: Fix potential NULL pointer dereference

Below race may cause NULL pointer dereference

If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.

So let's fix it by using a temporary pointer to avoid this issue.

Record: CVE-2024-26878
Updated: 2026-11-02

EUVDEUVD-2024-24140 No score

In the Linux kernel, the following vulnerability has been resolved:

quota: Fix potential NULL pointer dereference

Below race may cause NULL pointer dereference

If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.

So let's fix it by using a temporary pointer to avoid this issue.

Record: EUVD-2024-24140
Updated: 2026-11-02

GitHub AdvisoriesGHSA-jg7c-h6xh-f8hr 4.7

In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL...

In the Linux kernel, the following vulnerability has been resolved:

quota: Fix potential NULL pointer dereference

Below race may cause NULL pointer dereference

If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.

So let's fix it by using a temporary pointer to avoid this issue.

Record: GHSA-jg7c-h6xh-f8hr
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-362
Updated: 2026-11-02

OSVBELL-CVE-2024-26878 4.7

Record: BELL-CVE-2024-26878
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-26878 4.7

In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereference P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) .... If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered. So let's fix it by using a temporary pointer to avoid this issue.

Record: DEBIAN-CVE-2024-26878
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 45 moreShow less

OSVOESA-2024-1617 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate.

Note, writing '0' to kvmclock MSR doesn't clear memory location, it just prevents hypervisor from updating the location so for the short while after write and while CPU is still alive, the clock remains usable and correct so we don't need to switch to some other clocksource.(CVE-2021-47110)

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

Remove the reason of null pointer dereference in sync VSI filters. Added new I40E_VSI_RELEASING flag to signalize deleting and releasing of VSI resources to sync this thread with sync filters subtask. Without this patch it is possible to start update the VSI filter list after VSI is removed, that's causing a kernel oops.(CVE-2021-47184)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

CPU: 0 PID: 7789 Comm: stress Not tainted 6.0.0-rc1-00002-g0d53d2e882f9 #3 Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 Call Trace: <TASK> .. __mutex_lock+0xe5/0xc30 .. z_erofs_do_read_page+0x8ce/0x1560 .. z_erofs_readahead+0x31c/0x580 .. Freed by task 7787 kasan_save_stack+0x1e/0x40 kasan_set_track+0x20/0x30 kasan_set_free_info+0x20/0x40 __kasan_slab_free+0x10c/0x190 kmem_cache_free+0xed/0x380 rcu_core+0x3d5/0xc90 __do_softirq+0x12d/0x389

Last potentially related work creation: kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x97/0xb0 call_rcu+0x3d/0x3f0 erofs_shrink_workstation+0x11f/0x210 erofs_shrink_scan+0xdc/0x170 shrink_slab.constprop.0+0x296/0x530 drop_slab+0x1c/0x70 drop_caches_sysctl_handler+0x70/0x80 proc_sys_call_handler+0x20a/0x2f0 vfs_write+0x555/0x6c0 ksys_write+0xbe/0x160 do_syscall_64+0x3b/0x90

The root cause is that erofs_workgroup_unfreeze() doesn't reset to orig_val thus it causes a race that the pcluster reuses unexpectedly before freeing.

Since UP platforms are quite rare now, such path becomes unnecessary. Let's drop such specific-designed path directly instead.(CVE-2022-48674)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.(CVE-2023-52615)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: disallow timeout for anonymous sets

Never used from userspace, disallow these parameters.(CVE-2023-52620)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix a suspicious RCU usage warning

I received the following warning while running cthon against an ontap server running pNFS:

[ 57.202521] ============================= [ 57.202522] WARNING: suspicious RCU usage [ 57.202523] 6.7.0-rc3-g2cc14f52aeb7 #41492 Not tainted [ 57.202525] ----------------------------- [ 57.202525] net/sunrpc/xprtmultipath.c:349 RCU-list traversed in non-reader section!! [ 57.202527] other info that might help us debug this:

[ 57.202528] …

Record: OESA-2024-1617
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1618 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

tun: avoid double free in tun_free_netdev

Avoid double free in tun_free_netdev() by moving the dev->tstats and tun->security allocs to a new ndo_init routine (tun_net_init()) that will be called by register_netdevice(). ndo_init is paired with the desctructor (tun_free_netdev()), so if there's an error in register_netdevice() the destructor will handle the frees.

BUG: KASAN: double-free or invalid-free in selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605

CPU: 0 PID: 25750 Comm: syz-executor416 Not tainted 5.16.0-rc2-syzk #1 Hardware name: Red Hat KVM, BIOS Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x89/0xb5 lib/dump_stack.c:106 print_address_description.constprop.9+0x28/0x160 mm/kasan/report.c:247 kasan_report_invalid_free+0x55/0x80 mm/kasan/report.c:372 ____kasan_slab_free mm/kasan/common.c:346 [inline] __kasan_slab_free+0x107/0x120 mm/kasan/common.c:374 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:1723 [inline] slab_free_freelist_hook mm/slub.c:1749 [inline] slab_free mm/slub.c:3513 [inline] kfree+0xac/0x2d0 mm/slub.c:4561 selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605 security_tun_dev_free_security+0x4f/0x90 security/security.c:2342 tun_free_netdev+0xe6/0x150 drivers/net/tun.c:2215 netdev_run_todo+0x4df/0x840 net/core/dev.c:10627 rtnl_unlock+0x13/0x20 net/core/rtnetlink.c:112 __tun_chr_ioctl+0x80c/0x2870 drivers/net/tun.c:3302 tun_chr_ioctl+0x2f/0x40 drivers/net/tun.c:3311 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x19d/0x220 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3a/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae(CVE-2021-47082)

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this only happens for boot CPU. We need to disable it for all CPUs to guard against memory corruption e.g. on restore from hibernate.

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix NULL ptr dereference on VSI filter sync

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

Last potentially related work creation: …

Record: OESA-2024-1618
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1619 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Accessing reset domains descriptors by the index upon the SCMI drivers requests through the SCMI reset operations interface can potentially lead to out-of-bound violations if the SCMI driver misbehave.

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nftables: exthdr: fix 4-byte stack OOB write

If priv->len is a multiple of 4, then dst[len / 4] can write past the destination array which leads to stack corruption.

This construct is necessary to clean the remainder of the register in case ->len is NOT a multiple of the register size, so make it conditional just like nft_payload.c does.

The bug was added in 4.1 cycle and then copied/inherited when tcp/sctp and ip option support was added.

Bug reported by Zero Day Initiative project (ZDI-CAN-21950, ZDI-CAN-21951, ZDI-CAN-21961).(CVE-2023-52628)

In the Linux kernel, the following vulnerability has been resolved:

media: rc: bpf attach/detach requires write permission

Note that bpf attach/detach also requires CAP_NET_ADMIN.(CVE-2023-52642)

A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on struct net_device, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. This could lead to a denial of service condition or potential code execution.(CVE-2023-6270)

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: fix IO hang from sbitmap wakeup race

In blk_mq_mark_tag_wait(), __add_wait_queue() may be re-ordered with the following blk_mq_get_driver_tag() in case of getting driver tag failure.

Then in __sbitmap_queue_wake_up(), waitqueue_active() may not observe the added waiter in blk_mq_mark_tag_wait() and wake up nothing, meantime blk_mq_mark_tag_wait() can't get driver tag successfully.

This issue can be reproduced by running the following test in loop, and fio hang can be observed in < 30min when running it on my test VM in laptop.

modprobe -r scsi_debug
modprobe scsi_debug delay=0 dev_size_mb=4096 max_queue=1 host_max_queue=1 submit_queues=4
dev=`ls -d /sys/bus/pseudo/drivers/scsi_debug/adapter*/host*/target*/*/block/* | head -1 | xargs basename`
fio --filename=/dev/&quot;$dev&quot; --direct=1 --rw=randrw --bs=4k --iodepth=1 \
   		--runtime=100 --numjobs=40 --time_based --name=test \
    	--ioengine=libaio

Fix the issue by adding one explicit barrier in blk_mq_mark_tag_wait(), which is just fine in case of running out of tag.(CVE-2024-26671)

In the Linux kernel, the following vulnerability has been resolved:

fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super

When configuring a hugetlb filesystem via the fsconfig() syscall, there is a possible NULL dereference in hugetlbfs_fill_super() caused by assigning NULL to ctx->hstate in hugetlbfs_parse_param() when the requested pagesize is non valid.

E.g: Taking the following steps:

 fd = fsopen(&quot;hugetlbfs&quot;, FSOPEN_CLOEXEC);
 fsconfig(fd, FSCONFIG_SET_STRING, &quot;pagesize&quot;, &quot;1024&quot;, 0);
 fsconfig(fd, FSCONFIG_CMD_CREATE, NULL, NULL, 0);

Given that the requested "pagesize" is invalid, ctxt->hstate will be replaced with NULL, losing its previous value, and we will print an error:

... ... case Opt_pagesize: ps = memparse(param->string, &rest); ctx->hstate = h; if (!ctx->hstate) { pr_err("Unsupported page size %lu MB\n", ps / SZ_1M); return -EINVAL; } return 0; ... ...

This is a problem because later on, we will…

Record: OESA-2024-1619
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1620 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev->bos without checking if it was allocated and initialized. If usb_get_bos_descriptor() fails for whatever reason, udev->bos will be NULL and those accesses will result in a crash:

BUG: kernel NULL pointer dereference, address: 0000000000000018 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1> Hardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021 Workqueue: usb_hub_wq hub_event RIP: 0010:hub_port_reset+0x193/0x788 Code: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9 RSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310 RDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840 RBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0 Call Trace: hub_event+0x73f/0x156e ? hub_activate+0x5b7/0x68f process_one_work+0x1a2/0x487 worker_thread+0x11a/0x288 kthread+0x13a/0x152 ? process_one_work+0x487/0x487 ? kthread_associate_blkcg+0x70/0x70 ret_from_fork+0x1f/0x30

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support checks, Super Speed capabilitiy checks, U1/U2 states setup.(CVE-2023-52477)

In the Linux kernel, the following vulnerability has been resolved:

block/rnbd-srv: Check for unlikely string overflow

Since "dev_search_path" can technically be as large as PATH_MAX, there was a risk of truncation when copying it and a second string into "full_path" since it was also PATH_MAX sized. The W=1 builds were reporting this warning:

drivers/block/rnbd/rnbd-srv.c: In function 'process_msg_open.isra': drivers/block/rnbd/rnbd-srv.c:616:51: warning: '%s' directive output may be truncated writing up to 254 bytes into a region of size between 0 and 4095 [-Wformat-truncation=] 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~ In function 'rnbd_srv_get_full_path', inlined from 'process_msg_open.isra' at drivers/block/rnbd/rnbd-srv.c:721:14: drivers/block/rnbd/rnbd-srv.c:616:17: note: 'snprintf' output between 2 and 4351 bytes into a destination of size 4096 616 | snprintf(full_path, PATH_MAX, "%s/%s", | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 617 | dev_search_path, dev_name); | ~~~~~~~~~~~~~~~~~~~~~~~~~~

To fix this, unconditionally check for truncation (as was already done for the case where "%SESSNAME%" was present).(CVE-2023-52618)

In the Linux kernel, the following…

Record: OESA-2024-1620
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1621 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

In the Linux kernel, the following vulnerability has been resolved:

block/rnbd-srv: Check for unlikely string overflow

To fix this, unconditionally check for truncation (as was already done for the case where "%SESSNAME%" was present).(CVE-2023-52618)

In the Linux kernel, the following…

Record: OESA-2024-1621
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-1622 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Harden accesses to the reset domains

Add an internal consistency check before any such domains descriptors accesses.(CVE-2022-48655)

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix pcluster use-after-free on UP platforms

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

================================================================== BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30 Read of size 8 at addr ffff8881094223f8 by task stress/7789

The root cause is that erofs_workgroup_unfreeze() doesn't reset to orig_val thus it causes a race that the pcluster reuses unexpectedly before freeing.

Since UP platforms are quite rare now, such path becomes unnecessary. Let's drop such specific-designed path directly instead.(CVE-2022-48674)

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Fall back to a default behavior if the BOS descriptor isn't accessible and skip all the functionalities that depend on it: LPM support…

Record: OESA-2024-1622
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:5101 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:5101
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:5102 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:5102
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:13946 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:13946
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-26878 4.7

Record: UBUNTU-CVE-2024-26878
CVSS 3.1: 4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

OSVALSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
[almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
[Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
(JIRA:AlmaLinux-31798)
(JIRA:AlmaLinux-10263)
(JIRA:AlmaLinux-40901)
(JIRA:AlmaLinux-43547)
(JIRA:AlmaLinux-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:AlmaLinux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: ALSA-2024:5101
Updated: 2026-11-02

OSVALSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: ALSA-2024:5102
Updated: 2026-11-02

OSVCLSA-2024-1721659604 No score

Fix of 96 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-35902
- net/rds: fix possible cp null dereference
CVE-url: https://ubuntu.com/security/CVE-2024-38587
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
CVE-url: https://ubuntu.com/security/CVE-2024-39493
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
CVE-url: https://ubuntu.com/security/CVE-2024-38381
- nfc: nci: Fix uninit-value in nci_rx_work
CVE-url: https://ubuntu.com/security/CVE-2024-26810
- vfio/pci: Lock external INTx masking ops
CVE-url: https://ubuntu.com/security/CVE-2024-26687
- xen/events: close evtchn after mapping cleanup
CVE-url: https://ubuntu.com/security/CVE-2024-35893
- net: sched: change type of reference and bind counters
- net: sched: act_skbmod: remove dependency on rtnl lock
- net/sched: act_skbmod: prevent kernel-infoleak
CVE-url: https://ubuntu.com/security/CVE-2024-35823
- vt: preserve unicode values corresponding to screen characters
- vt: fix unicode buffer corruption when deleting characters
CVE-url: https://ubuntu.com/security/CVE-2024-35805
- dm snapshot: Replace mutex with rw semaphore
- dm snapshot: fix lockup in dm_exception_table_exit
CVE-url: https://ubuntu.com/security/CVE-2024-27004
- clk: core: clarify the check for runtime PM
- clk: Get runtime PM before walking tree during disable_unused
CVE-url: https://ubuntu.com/security/CVE-2024-26852
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
CVE-url: https://ubuntu.com/security/CVE-2023-52620
- netfilter: nf_tables: disallow timeout for anonymous sets
CVE-url: https://ubuntu.com/security/CVE-2024-25739
- ubi: Check for too small LEB size in VTBL code
CVE-url: https://ubuntu.com/security/CVE-2024-27437
- genirq: Add IRQF_NO_AUTOEN for request_irq/nmi()
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
CVE-url: https://ubuntu.com/security/CVE-2022-48627
- vc: separate state
- vt: fix memory overlapping when deleting chars in the buffer
CVE-url: https://ubuntu.com/security/CVE-2024-35910
- mptcp: add sk_stop_timer_sync helper
- tcp: properly terminate timers for kernel sockets
CVE-url: https://ubuntu.com/security/CVE-2024-35969
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
CVE-url: https://ubuntu.com/security/CVE-2024-27024
- RDS: RDMA: Fix the NULL-ptr deref in rds_ib_get_mr
- net/rds: fix WARNING in rds_conn_connect_if_down
CVE-url: https://ubuntu.com/security/CVE-2024-26863
- hsr: Fix uninit-value access in hsr_get_node()
CVE-url: https://ubuntu.com/security/CVE-2024-26984
- nouveau: fix instmem race condition around ptr stores
CVE-url: https://ubuntu.com/security/CVE-2024-36020
- i40e: fix vf may be used uninitialized in this function warning
CVE-url: https://ubuntu.com/security/CVE-2024-35849
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
CVE-url: https://ubuntu.com/security/CVE-2024-27388
- SUNRPC: fix some memleaks in gssx_dec_option_array
CVE-url: https://ubuntu.com/security/CVE-2024-35886
- ipv6: Fix infinite recursion in fib6_dump_done().
CVE-url: https://ubuntu.com/security/CVE-2024-35809
- PCI/PM: Drain runtime-idle callbacks before driver removal
CVE-url: https://ubuntu.com/security/CVE-2024-26875
- media: pvrusb2: fix uaf in pvr2_context_set_notify
CVE-url: https://ubuntu.com/security/CVE-2024-26851
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
CVE-url: https://ubuntu.com/security/CVE-2024-26999
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood
CVE-url: https://ubuntu.com/security/CVE-2024-35819
- soc: fsl: qbman: Use raw spinlock for cgr_lock
CVE-url: https://ubuntu.com/security/CVE-2024-35806
- soc: fsl: qbman: Always disable interrupts when taking…

Record: CLSA-2024-1721659604
Updated: 2026-11-02

OSVCLSA-2024-1721660263 No score

Update of linux-meta

Bump ABI 4.15.0-232

Record: CLSA-2024-1721660263
Updated: 2026-11-02

OSVCLSA-2026-1783791447 No score

kernel: Fix of 307 CVEs

gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660}
ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008}
KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975}
Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027}
xhci: Fix null pointer dereference when host dies {CVE-2023-52898}
sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638}
blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671}
net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977}
gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975}
HID: betop: check shape of output reports {CVE-2023-53015}
mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932}
HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937}
drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002}
ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013}
RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026}
Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018}
scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760}
sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331}
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038}
cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194}
ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160}
nbd: don't allow reconnect after disconnect {CVE-2025-21731}
openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820}
net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321}
ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121}
i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041}
net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000}
bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994}
xsk: check IFF_UP earlier in Tx path {CVE-2023-53240}
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
virtgpu: don't reset on shutdown {CVE-2025-38064}
xen/netfront: fix crash when removing device {CVE-2022-48969}
mptcp: do not fallback when OoO is present {CVE-2024-50185}
can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925}
netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160}
xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053}
ext4: fix racy may inline data check in dio write {CVE-2023-52786}
drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738}
macsec: fix UAF bug for real_dev {CVE-2022-49390}
drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259}
mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241}
driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715}
udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712}
ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657}
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611}
eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302}
udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544}
RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224}
dlm: fix possible lkb_resource…

Record: CLSA-2026-1783791447
Updated: 2026-11-02

OSVCLSA-2026-1789898700 No score

kernel: Fix of 163 CVEs

drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() {CVE-2026-68251}
amd/amdkfd: sync all devices to wait all processes being evicted {CVE-2024-36949}
Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted {CVE-2024-36909}
Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl {CVE-2024-36912}
xfs: save ailp before dropping the AIL lock in push callbacks {CVE-2026-31454}
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak {CVE-2026-43041}
netfilter: nf_conntrack: destroy stale expectfn expectations on unregister {CVE-2026-53349}
cifs: avoid NULL pointer dereference in dbg call {CVE-2025-37844}
fs/notify: call exportfs_encode_fid with s_umount {CVE-2025-40237}
cifs: fix potential oops in cifs_oplock_break {CVE-2023-54258}
pstore/ram: fix buffer overflow in persistent_ram_save_old() {CVE-2026-46253}
Bluetooth: ISO: fix iso_conn related locking and validity issues {CVE-2023-54164}
netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets {CVE-2026-45873}
ext4: always drain queued discard work in ext4_mb_release() {CVE-2026-43065}
ipvs: Defer ip_vs_ftp unregister during netns cleanup {CVE-2025-40018}
Bluetooth: MGMT: Fix memory leak in set_ssp_complete {CVE-2026-23151}
sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto {CVE-2025-40281}
fscache: Use wait_on_bit() to wait for the freeing of relinquished volume {CVE-2023-52982}
libceph: prevent potential out-of-bounds reads in process_message_header() {CVE-2026-43406}
netfilter: nf_tables: reject immediate NF_QUEUE verdict {CVE-2026-43024}
ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() {CVE-2025-68261}
bpf, sockmap: Fix af_unix iter deadlock {CVE-2026-53035}
sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}
netfilter: xt_CT: drop pending enqueued packets on template removal {CVE-2026-23391}
netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() {CVE-2026-23457}
libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() {CVE-2026-43407}
af_unix: read UNIX_DIAG_VFS data under unix_state_lock {CVE-2026-31673}
jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted {CVE-2025-68337}
Bluetooth: Fix NULL pointer deference on eir_get_service_data {CVE-2025-38304}
net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption {CVE-2026-31533}
fsnotify: do not generate ACCESS/MODIFY events on child for special files {CVE-2025-68788}
isofs: validate Rock Ridge CE continuation extent against volume size {CVE-2026-46303}
net: strparser: fix skb_head leak in strp_abort_strp() {CVE-2026-46102}
sctp: fix uninit-value in __sctp_rcv_asconf_lookup() {CVE-2026-53225}
xfs: don't swallow dquot recovery verification errors {CVE-2026-80529}
xfs: dquot recovery does not validate the recovered dquot {CVE-2026-80529}
bpf: tcp: fix double sock release on batch realloc {CVE-2026-64575}
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() {CVE-2026-74714}
bpf: tcp: Avoid socket skips and repeats during iteration {CVE-2026-74714}
bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items {CVE-2026-74714}
bpf: tcp: Get rid of st_bucket_done {CVE-2026-74714}
bpf: tcp: Make sure iter->batch always contains a full bucket snapshot {CVE-2026-64575}
bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch {CVE-2026-74714}
USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
net: Make copy_safe_from_sockptr() match documentation {CVE-2026-74689}
net: add copy_safe_from_sockptr() helper {CVE-2026-74689}
xfs: close crash window in attr dabtree…

Record: CLSA-2026-1789898700
Updated: 2026-11-02

OSV No score

quota: Fix potential NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved:

quota: Fix potential NULL pointer dereference

Below race may cause NULL pointer dereference

If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.

So let's fix it by using a temporary pointer to avoid this issue.

Record: CVE-2024-26878
Updated: 2026-11-02

OSVRLSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

Rocky Linux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux-23841)
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux-33437)
[Hyper-V][Rocky Linux-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux-40939)
(JIRA:Rocky Linux-31798)
(JIRA:Rocky Linux-10263)
(JIRA:Rocky Linux-40901)
(JIRA:Rocky Linux-43547)
(JIRA:Rocky Linux-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RLSA-2024:5101
Updated: 2026-11-02

OSVRLSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
(CVE-2023-52832)
(CVE-2023-52803)
(CVE-2023-52756)
(CVE-2023-52834)
(CVE-2023-52791)
(CVE-2023-52764)
(CVE-2021-47468)
(CVE-2021-47284)
(CVE-2024-36025)
(CVE-2024-36941)
(CVE-2024-36940)
(CVE-2024-36904)
(CVE-2024-36896)
(CVE-2024-36954)
(CVE-2024-36950)
(CVE-2024-38575)
(CVE-2024-36917)
(CVE-2024-36016)
(CVE-2023-52762)
(CVE-2024-27025)
(CVE-2021-47548)
(CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RLSA-2024:5102
Updated: 2026-11-02

OSVRXSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
(CVE-2023-28746)
(CVE-2023-52847)
(CVE-2021-47548)
(CVE-2024-36921)
(CVE-2024-26921)
(CVE-2021-47579)
(CVE-2024-36927)
(CVE-2024-39276)
(CVE-2024-33621)
(CVE-2024-27010)
(CVE-2024-26960)
(CVE-2024-38596)
(CVE-2022-48743)
(CVE-2024-26733)
(CVE-2024-26586)
(CVE-2024-26698)
(CVE-2023-52619)

Bug Fix(es):

Rocky Linux SIG Cloud8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux SIG Cloud-17678)
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux SIG Cloud-23841)
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux SIG Cloud-32941)
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux SIG Cloud-33437)
[Hyper-V][Rocky Linux SIG Cloud-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux SIG Cloud-39074)
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux SIG Cloud-40167)
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-40939)
(JIRA:Rocky Linux SIG Cloud-31798)
(JIRA:Rocky Linux SIG Cloud-10263)
(JIRA:Rocky Linux SIG Cloud-40901)
(JIRA:Rocky Linux SIG Cloud-43547)
(JIRA:Rocky Linux SIG Cloud-34876)

Enhancement(s):

[RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux SIG Cloud-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record: RXSA-2024:5101
Updated: 2026-11-02

OSVSUSE-SU-2024:1643-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509).
CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47113: Abort…

Record: SUSE-SU-2024:1643-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1644-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-27042: Fixed drm/amdgpu for potential out-of-bounds access in amdgpu_discovery_reg_base_init() (bsc#1223823).
CVE-2024-27041: Fixed drm/amd/display NULL checks for adev->dm.dc in amdgpu_dm_fini() (bsc#1223714).
CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-26939: Fixed drm/i915/vma UAF on destroy against retire race (bsc#1223679).
CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
CVE-2024-26915: Fixed drm/amdgpu reset IH OVERFLOW_CLEAR bit (bsc#1223207).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26898: Fixed aoe potential use-after-free problem in aoecmd_cfg_pkts (bsc#1223016).
CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26876: Fixed drm/bridge/adv7511 crash on irq during probe (bsc#1223119).
CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
CVE-2024-26857: Fixed geneve to make sure to pull inner header in…

Record: SUSE-SU-2024:1644-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1646-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed a PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed a double free of blk_mq_tag_set in dev remove after table load fails in dm rq (bsc#1220554).
CVE-2021-46939: Fixed a denial of service in trace_clock_global() in tracing (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed a data corruption bug in raid1 arrays using bitmaps in md/raid1 (bsc#1220662).
CVE-2021-46958: Fixed a race between transaction aborts and fsyncs leading to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed a warning on smb2_get_enc_key in cifs (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed a NULL pointer in flush_workqueue in nbd (bsc#1220611).
CVE-2021-46988: Fixed release page in error path to avoid BUG_ON (bsc#1220706).
CVE-2021-46990: Fixed a denial of service when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed an use after free bug in enic_hard_start_xmit in ethernet/enic (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed a RX consumer index logic in the error path in bnxt_rx_pkt() in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed a kernel memory fault for pte update on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed a null pointer dereference in lpfc_prep_els_iocb() in scsi lpfc (bsc#1220640).
CVE-2021-47049: Fixed an after free in __vmbus_open() in hv vmbus (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed a user-memory-access error on vf2pf_lock in crypto (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed a potential use-after-free during bridge detach in drm bridge/panel (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed a memory leak in error handling paths in hv_uio_cleanup() in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47114: Fixed a data corruption by fallocate in ocfs2 (bsc#1221548).
CVE-2021-47117: Fixed a crash in ext4_es_cache_extent as ext4_split_extent_at failed in ext4 (bsc#1221575).
CVE-2021-47118: Fixed an use-after-free in init task's struct pid in pid (bsc#1221605).
CVE-2021-47119: Fixed a memory leak in ext4_fill_super in ext4 (bsc#1221608). -…

Record: SUSE-SU-2024:1646-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1659-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26760: Fixed scsi/target/pscsi bio_put() for error case (bsc#1222596).
CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-27041: Fixed drm/amd/display NULL checks for adev->dm.dc in amdgpu_dm_fini() (bsc#1223714).
CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
CVE-2024-26857: Fixed geneve to make sure to pull inner header in geneve_rx() (bsc#1223058).
CVE-2024-26856: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052).
CVE-2024-26855: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051).
CVE-2024-26853: Fixed igc returning frame twice in XDP_REDIRECT (bsc#1223061).
CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify()…

Record: SUSE-SU-2024:1659-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1663-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Real Time kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705).
CVE-2024-27062: Fixed nouveau lock inside client object tree (bsc#1223834).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-27046: Fixed nfp/flower handling acti_netdevs allocation failure (bsc#1223827).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2024-27041: Fixed drm/amd/display NULL checks for adev->dm.dc in amdgpu_dm_fini() (bsc#1223714).
CVE-2024-27039: Fixed clk/hisilicon/hi3559a an erroneous devm_kfree() (bsc#1223821).
CVE-2024-27038: Fixed clk_core_get NULL pointer dereference (bsc#1223816).
CVE-2024-27030: Fixed octeontx2-af to use separate handlers for interrupts (bsc#1223790).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26970: Fixed clk/qcom/gcc-ipq6018 termination of frequency table arrays (bsc#1223644).
CVE-2024-26969: Fixed clk/qcom/gcc-ipq8074 termination of frequency table arrays (bsc#1223645).
CVE-2024-26966: Fixed clk/qcom/mmcc-apq8084 termination of frequency table arrays (bsc#1223646).
CVE-2024-26965: Fixed clk/qcom/mmcc-msm8974 termination of frequency table arrays (bsc#1223648).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2024-26951: Fixed wireguard/netlink check for dangling peer via is_dead instead of empty list (bsc#1223660).
CVE-2024-26950: Fixed wireguard/netlink to access device through ctx instead of peer (bsc#1223661).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-26927: Fixed ASoC/SOF bounds checking to firmware data Smatch (bsc#1223525).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26896: Fixed wifi/wfx memory leak when starting AP (bsc#1223042).
CVE-2024-26893: Fixed firmware/arm_scmi for possible double free in SMC transport cleanup path (bsc#1223196).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2024-26881: Fixed net/hns3 kernel crash when 1588 is received on HIP08 devices (bsc#1223041).
CVE-2024-26879: Fixed clk/meson by adding missing clocks to axg_clk_regmaps (bsc#1223066).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26866: Fixed spi/spi-fsl-lpspi by removing redundant spi_controller_put call (bsc#1223024).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26861: Fixed wireguard/receive annotate data-race around receiving_counter.counter (bsc#1223076).
CVE-2024-26857: Fixed geneve to make sure to pull inner header in geneve_rx() (bsc#1223058).
CVE-2024-26856: Fixed use-after-free inside sparx5_del_mact_entry (bsc#1223052).
CVE-2024-26855: Fixed net/ice potential NULL pointer dereference in ice_bridge_setlink() (bsc#1223051).
CVE-2024-26853: Fixed igc returning frame twice in XDP_REDIRECT (bsc#1223061).
CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).
CVE-2024-26848: Fixed afs endless loop in directory parsing…

Record: SUSE-SU-2024:1663-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1870-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394).
CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bsc#1184509).
CVE-2021-23134: Fixed a use-after-free issue in nfc sockets (bsc#1186060).
CVE-2021-46904: Fixed NULL pointer dereference during tty device unregistration (bsc#1220416).
CVE-2021-46905: Fixed NULL pointer dereference on disconnect regression (bsc#1220418).
CVE-2021-46909: Fixed PCI interrupt mapping in ARM footbridge (bsc#1220442).
CVE-2021-46938: Fixed double free of blk_mq_tag_set in dev remove after table load fails (bsc#1220554).
CVE-2021-46939: Fixed possible hung in trace_clock_global() (bsc#1220580).
CVE-2021-46941: Fixed core softreset when switch mode in usb dwc3 (bsc#1220628).
CVE-2021-46950: Fixed possible data corruption in md/raid1 when ending a failed write request (bsc#1220662).
CVE-2021-46958: Fixed race between transaction aborts and fsyncs that could lead to use-after-free in btrfs (bsc#1220521).
CVE-2021-46960: Fixed wrong error code from smb2_get_enc_key() (bsc#1220528).
CVE-2021-46963: Fixed crash in qla2xxx_mqueuecommand() (bsc#1220536).
CVE-2021-46964: Fixed unreserved extra IRQ vectors in qla2xxx (bsc#1220538).
CVE-2021-46966: Fixed potential use-after-free issue in cm_write() (bsc#1220572).
CVE-2021-46981: Fixed NULL pointer in flush_workqueue (bsc#1220611).
CVE-2021-46988: Fixed possible crash in userfaultfd due to unreleased page (bsc#1220706).
CVE-2021-46990: Fixed crashes when toggling entry flush barrier in powerpc/64s (bsc#1220743).
CVE-2021-46998: Fixed a use after free bug in enic_hard_start_xmit() (bsc#1220625).
CVE-2021-47006: Fixed wrong check in overflow_handler hook in ARM 9064/1 hw_breakpoint (bsc#1220751).
CVE-2021-47015: Fixed RX consumer index logic in the error path in bnxt_en (bsc#1220794).
CVE-2021-47024: Fixed possible memory leak in vsock/virtio when closing socket (bsc#1220637).
CVE-2021-47034: Fixed resolved pte update for kernel memory on radix in powerpc/64s (bsc#1220687).
CVE-2021-47045: Fixed null pointer dereference in lpfc_prep_els_iocb() (bsc#1220640).
CVE-2021-47049: Fixed Use after free in __vmbus_open() (bsc#1220692).
CVE-2021-47055: Fixed missing permissions for locking and badblock ioctls in mtd (bsc#1220768).
CVE-2021-47056: Fixed uninitialized lock in adf_vf2pf_shutdown() (bsc#1220769).
CVE-2021-47060: Fixed a bug in KVM by stop looking for coalesced MMIO zones if the bus is destroyed (bsc#1220742).
CVE-2021-47061: Fixed a bug in KVM by destroy I/O bus devices on unregister failure after sync'ing SRCU (bsc#1220745).
CVE-2021-47063: Fixed possible use-after-free in panel_bridge_detach() (bsc#1220777).
CVE-2021-47068: Fixed a use-after-free issue in llcp_sock_bind/connect (bsc#1220739).
CVE-2021-47070: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220829).
CVE-2021-47071: Fixed memory leak in error handling paths in uio_hv_generic (bsc#1220846).
CVE-2021-47073: Fixed oops on rmmod dell_smbios init_dell_smbios_wmi() (bsc#1220850).
CVE-2021-47100: Fixed UAF when uninstall in ipmi (bsc#1220985).
CVE-2021-47101: Fixed uninit-value in asix_mdio_read() (bsc#1220987).
CVE-2021-47104: Fixed memory leak in qib_user_sdma_queue_pkts() (bsc#1220960).
CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532).
CVE-2021-47112: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221541).
CVE-2021-47114: Fixed data corruption by fallocate in ocfs2 (bsc#1221548).
CVE-2021-47117: Fixed bug on in ext4_es_cache_extent() as ext4_split_extent_at() failed (bsc#1221575).
CVE-2021-47118: Fixed possible use-after-free when initializing cad_pid (bsc#1221605). -…

Record: SUSE-SU-2024:1870-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2023-6270: Fixed a use-after-free issue in…

Record: SUSE-SU-2024:2135-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2203-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26632: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635).
CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26704: Fixed a…

Record: SUSE-SU-2024:2203-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…

Record: SUSE-SU-2024:2973-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
CVE-2024-35890:…

Record: SUSE-SU-2025:20008-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…

Record: SUSE-SU-2025:20028-1
Updated: 2026-11-02

OSVUSN-6816-1 No score

linux, linux-ibm, linux-lowlatency, linux-raspi vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network…

Record: USN-6816-1
Updated: 2026-11-02

OSVUSN-6817-1 No score

linux-aws, linux-gcp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…

Record: USN-6817-1
Updated: 2026-11-02

OSVUSN-6817-2 No score

linux-oem-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…

Record: USN-6817-2
Updated: 2026-11-02

OSVUSN-6817-3 No score

linux-azure, linux-gke vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-26859, CVE-2024-26944, CVE-2024-27049, CVE-2024-26868, CVE-2024-26932, CVE-2024-35843, CVE-2024-35814, CVE-2024-26866, CVE-2024-26941, CVE-2024-27080,…

Record: USN-6817-3
Updated: 2026-11-02

OSVUSN-6820-1 No score

linux, linux-gcp, linux-gcp-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-xilinx-zynqmp vulnerabilities

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26776, CVE-2024-26802, CVE-2024-26790, CVE-2024-27388, CVE-2024-27077, CVE-2024-26884, CVE-2024-26779, CVE-2024-26897, CVE-2024-27045, CVE-2024-26851, CVE-2024-27065, CVE-2024-26843, CVE-2024-26743, CVE-2024-27052, CVE-2024-26855, CVE-2024-27436, CVE-2024-27078, CVE-2024-26898, CVE-2024-27405, CVE-2024-26894, CVE-2024-26584, CVE-2024-26915, CVE-2024-26763, CVE-2024-27047, CVE-2024-26809, CVE-2024-26883, CVE-2024-26901, CVE-2024-27412, CVE-2024-26803, CVE-2024-26751, CVE-2024-35829, CVE-2024-27432, CVE-2023-52447, CVE-2024-26748, CVE-2024-27051, CVE-2023-52434, CVE-2024-26749, CVE-2024-27034, CVE-2024-27390, CVE-2024-26879, CVE-2024-26859, CVE-2024-26835, CVE-2024-26861, CVE-2024-27030, CVE-2024-27415, CVE-2023-52656, CVE-2024-26773, CVE-2024-27043, CVE-2024-26601, CVE-2024-27073, CVE-2024-26782, CVE-2024-27413, CVE-2024-26880, CVE-2024-26793, CVE-2024-26766, CVE-2024-26750, CVE-2024-26852, CVE-2024-26805, CVE-2024-35830, CVE-2024-26798, CVE-2023-52644, CVE-2024-26787, CVE-2024-26846,…

Record: USN-6820-1
Updated: 2026-11-02

OSVUSN-6820-2 No score

linux-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26776, CVE-2024-26802, CVE-2024-26790, CVE-2024-27388, CVE-2024-27077, CVE-2024-26884, CVE-2024-26779, CVE-2024-26897, CVE-2024-27045, CVE-2024-26851, CVE-2024-27065, CVE-2024-26843, CVE-2024-26743, CVE-2024-27052, CVE-2024-26855, CVE-2024-27436, CVE-2024-27078, CVE-2024-26898, CVE-2024-27405, CVE-2024-26894, CVE-2024-26584, CVE-2024-26915, CVE-2024-26763, CVE-2024-27047, CVE-2024-26809, CVE-2024-26883, CVE-2024-26901, CVE-2024-27412, CVE-2024-26803, CVE-2024-26751, CVE-2024-35829, CVE-2024-27432, CVE-2023-52447, CVE-2024-26748, CVE-2024-27051, CVE-2023-52434, CVE-2024-26749, CVE-2024-27034, CVE-2024-27390, CVE-2024-26879, CVE-2024-26859, CVE-2024-26835, CVE-2024-26861, CVE-2024-27030, CVE-2024-27415, CVE-2023-52656, CVE-2024-26773, CVE-2024-27043, CVE-2024-26601, CVE-2024-27073, CVE-2024-26782, CVE-2024-27413, CVE-2024-26880, CVE-2024-26793, CVE-2024-26766, CVE-2024-26750, CVE-2024-26852, CVE-2024-26805, CVE-2024-35830, CVE-2024-26798, CVE-2023-52644, CVE-2024-26787, CVE-2024-26846,…

Record: USN-6820-2
Updated: 2026-11-02

OSVUSN-6821-1 No score

linux-gke, linux-ibm, linux-intel-iotg, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26877, CVE-2024-35829, CVE-2024-26737, CVE-2024-27075, CVE-2024-27414, CVE-2024-27053, CVE-2024-26889, CVE-2024-26792, CVE-2024-26882, CVE-2024-26906, CVE-2024-26851, CVE-2024-27037, CVE-2024-26782, CVE-2024-27388, CVE-2024-26748, CVE-2024-27419, CVE-2024-27034, CVE-2023-52662, CVE-2024-27047, CVE-2024-26874, CVE-2024-26779, CVE-2024-26872, CVE-2024-26820, CVE-2024-35811, CVE-2024-26771, CVE-2024-26733, CVE-2024-26903, CVE-2024-26736, CVE-2024-26870, CVE-2024-26883, CVE-2024-27403, CVE-2024-26878, CVE-2024-26857, CVE-2023-52645, CVE-2024-26601, CVE-2024-26891, CVE-2024-27028, CVE-2024-27054, CVE-2024-26804, CVE-2024-27405, CVE-2024-35830, CVE-2024-26898, CVE-2024-26754, CVE-2024-26793, CVE-2024-26747, CVE-2024-26901, CVE-2023-52652, CVE-2023-52650, CVE-2024-26651, CVE-2024-26816, CVE-2024-35845, CVE-2024-26862, CVE-2024-26884, CVE-2024-26752, CVE-2024-26852, CVE-2023-52656, CVE-2024-26790, CVE-2024-26603, CVE-2024-27078, CVE-2024-26802, CVE-2024-27045, CVE-2024-27024, CVE-2024-27073, CVE-2024-26585, CVE-2024-26894, CVE-2024-26583, CVE-2024-27416, CVE-2024-27431, CVE-2024-35844, CVE-2024-26838, CVE-2024-27410, CVE-2024-26915, CVE-2024-26772, CVE-2024-26897, CVE-2024-26798, CVE-2024-27415, CVE-2024-26855, CVE-2024-26833, CVE-2024-26764, CVE-2024-26659,…

Record: USN-6821-1
Updated: 2026-11-02

OSVUSN-6821-2 No score

linux-gkeop, linux-gkeop-5.15, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26877, CVE-2024-35829, CVE-2024-26737, CVE-2024-27075, CVE-2024-27414, CVE-2024-27053, CVE-2024-26889, CVE-2024-26792, CVE-2024-26882, CVE-2024-26906, CVE-2024-26851, CVE-2024-27037, CVE-2024-26782, CVE-2024-27388, CVE-2024-26748, CVE-2024-27419, CVE-2024-27034, CVE-2023-52662, CVE-2024-27047, CVE-2024-26874, CVE-2024-26779, CVE-2024-26872, CVE-2024-26820, CVE-2024-35811, CVE-2024-26771, CVE-2024-26733, CVE-2024-26903, CVE-2024-26736, CVE-2024-26870, CVE-2024-26883, CVE-2024-27403, CVE-2024-26878, CVE-2024-26857, CVE-2023-52645, CVE-2024-26601, CVE-2024-26891, CVE-2024-27028, CVE-2024-27054, CVE-2024-26804, CVE-2024-27405, CVE-2024-35830, CVE-2024-26898, CVE-2024-26754, CVE-2024-26793, CVE-2024-26747, CVE-2024-26901, CVE-2023-52652, CVE-2023-52650, CVE-2024-26651, CVE-2024-26816, CVE-2024-35845, CVE-2024-26862, CVE-2024-26884, CVE-2024-26752, CVE-2024-26852, CVE-2023-52656, CVE-2024-26790, CVE-2024-26603, CVE-2024-27078, CVE-2024-26802, CVE-2024-27045, CVE-2024-27024, CVE-2024-27073, CVE-2024-26585, CVE-2024-26894, CVE-2024-26583, CVE-2024-27416, CVE-2024-27431, CVE-2024-35844, CVE-2024-26838, CVE-2024-27410, CVE-2024-26915, CVE-2024-26772, CVE-2024-26897, CVE-2024-26798, CVE-2024-27415, CVE-2024-26855, CVE-2024-26833, CVE-2024-26764, CVE-2024-26659,…

Record: USN-6821-2
Updated: 2026-11-02

OSVUSN-6821-3 No score

linux-aws, linux-aws-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26877, CVE-2024-35829, CVE-2024-26737, CVE-2024-27075, CVE-2024-27414, CVE-2024-27053, CVE-2024-26889, CVE-2024-26792, CVE-2024-26882, CVE-2024-26906, CVE-2024-26851, CVE-2024-27037, CVE-2024-26782, CVE-2024-27388, CVE-2024-26748, CVE-2024-27419, CVE-2024-27034, CVE-2023-52662, CVE-2024-27047, CVE-2024-26874, CVE-2024-26779, CVE-2024-26872, CVE-2024-26820, CVE-2024-35811, CVE-2024-26771, CVE-2024-26733, CVE-2024-26903, CVE-2024-26736, CVE-2024-26870, CVE-2024-26883, CVE-2024-27403, CVE-2024-26878, CVE-2024-26857, CVE-2023-52645, CVE-2024-26601, CVE-2024-26891, CVE-2024-27028, CVE-2024-27054, CVE-2024-26804, CVE-2024-27405, CVE-2024-35830, CVE-2024-26898, CVE-2024-26754, CVE-2024-26793, CVE-2024-26747, CVE-2024-26901, CVE-2023-52652, CVE-2023-52650, CVE-2024-26651, CVE-2024-26816, CVE-2024-35845, CVE-2024-26862, CVE-2024-26884, CVE-2024-26752, CVE-2024-26852, CVE-2023-52656, CVE-2024-26790, CVE-2024-26603, CVE-2024-27078, CVE-2024-26802, CVE-2024-27045, CVE-2024-27024, CVE-2024-27073, CVE-2024-26585, CVE-2024-26894, CVE-2024-26583, CVE-2024-27416, CVE-2024-27431, CVE-2024-35844, CVE-2024-26838, CVE-2024-27410, CVE-2024-26915, CVE-2024-26772, CVE-2024-26897, CVE-2024-26798, CVE-2024-27415, CVE-2024-26855, CVE-2024-26833, CVE-2024-26764, CVE-2024-26659,…

Record: USN-6821-3
Updated: 2026-11-02

OSVUSN-6821-4 No score

linux-azure, linux-azure-fde vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-35830, CVE-2024-27052, CVE-2023-52620, CVE-2024-26903, CVE-2024-27413, CVE-2024-26766, CVE-2024-27077, CVE-2024-27044, CVE-2024-27076, CVE-2024-26833, CVE-2024-26874, CVE-2024-26863, CVE-2023-52650, CVE-2024-26820, CVE-2024-26787, CVE-2023-52656, CVE-2024-26651, CVE-2024-27065, CVE-2024-27053, CVE-2024-26583, CVE-2024-26774, CVE-2024-26782, CVE-2023-52640, CVE-2024-26838, CVE-2024-27410, CVE-2024-26870, CVE-2024-27024, CVE-2024-26891, CVE-2024-26889, CVE-2024-26897, CVE-2024-26857, CVE-2023-52434, CVE-2023-52645, CVE-2024-26901, CVE-2024-26872, CVE-2024-27051, CVE-2024-27388, CVE-2024-26584, CVE-2024-26802, CVE-2024-26733, CVE-2024-27419, CVE-2023-52447, CVE-2024-27054, CVE-2024-26840, CVE-2024-27038, CVE-2024-27028, CVE-2024-26883, CVE-2024-27074, CVE-2024-26735, CVE-2024-26852, CVE-2024-27034, CVE-2024-26744, CVE-2024-26907, CVE-2024-26777, CVE-2024-26835, CVE-2024-35845, CVE-2024-35828, CVE-2024-27037, CVE-2024-26764, CVE-2024-26798, CVE-2024-27414, CVE-2024-26878, CVE-2024-27390, CVE-2024-26856, CVE-2024-26884, CVE-2024-26779, CVE-2024-26895, CVE-2024-27436, CVE-2023-52641, CVE-2024-27039, CVE-2024-26776, CVE-2024-26749, CVE-2024-27047, CVE-2024-26882, CVE-2023-52652, CVE-2023-52662, CVE-2024-26763, CVE-2024-27030, CVE-2024-26772, CVE-2024-26859, CVE-2024-26791, CVE-2024-26788, CVE-2024-27046, CVE-2024-26736, CVE-2024-26750, CVE-2024-26801, CVE-2024-35811, CVE-2024-26737, CVE-2024-27416, CVE-2024-26769, CVE-2024-26906, CVE-2024-26795, CVE-2024-27417, CVE-2024-27078, CVE-2024-26790,…

Record: USN-6821-4
Updated: 2026-11-02

OSVUSN-6828-1 No score

linux-intel-iotg-5.15 vulnerabilities

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-23849)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
Core kernel;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Android drivers;
Power management core;
Bus devices;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
PCI driver for MicroSemi Switchtec;
PHY drivers;
MediaTek PM domains;
Power supply drivers;
SCSI drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system client;
NILFS2 file system;
NTFS3 file system;
Pstore file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Memory management;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
Logical Link…

Record: USN-6828-1
Updated: 2026-11-02

OSVUSN-6871-1 No score

linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26901, CVE-2024-35844, CVE-2024-27024, CVE-2024-26835, CVE-2024-26879, CVE-2024-26846, CVE-2024-35829, CVE-2024-26804, CVE-2024-26802, CVE-2024-27039, CVE-2024-27075, CVE-2024-27076, CVE-2024-26863, CVE-2024-27046, CVE-2024-26776, CVE-2024-26875, CVE-2024-26885, CVE-2024-26583, CVE-2024-26777, CVE-2024-26803, CVE-2024-27047, CVE-2024-26748, CVE-2024-27044, CVE-2024-27416, CVE-2024-26906, CVE-2024-27405, CVE-2024-26749, CVE-2024-27436, CVE-2024-26895, CVE-2023-52662, CVE-2024-26772, CVE-2023-52645, CVE-2024-26787, CVE-2024-26788, CVE-2023-52497, CVE-2024-26795, CVE-2024-26763, CVE-2024-27414, CVE-2024-26870, CVE-2024-27412, CVE-2024-27078, CVE-2024-27388, CVE-2024-26894, CVE-2023-52641, CVE-2024-27053, CVE-2024-26584, CVE-2024-26752, CVE-2024-35845, CVE-2024-26884, CVE-2024-26782, CVE-2024-26859, CVE-2024-26809, CVE-2024-27038, CVE-2024-26897, CVE-2024-26750, CVE-2023-52644, CVE-2024-26848, CVE-2024-26833, CVE-2024-26801, CVE-2024-26872, CVE-2023-52620, CVE-2023-52652, CVE-2024-26839, CVE-2024-26851, CVE-2024-26805, CVE-2024-26659, CVE-2024-26791, CVE-2023-52640, CVE-2024-26883, CVE-2024-26737, CVE-2024-27028, CVE-2024-26603, CVE-2024-27073, CVE-2024-26792, CVE-2024-35830, CVE-2024-26585, CVE-2024-27045, CVE-2024-26880,…

Record: USN-6871-1
Updated: 2026-11-02

OSVUSN-6878-1 No score

linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Bluetooth drivers;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DPLL subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Powercap sysfs driver;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
VFIO drivers;
Backlight driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
debug file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client;
NILFS2 file system;
Overlay file system;
Pstore file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Netfilter;
Packet sockets;
Network traffic control;
Sun RPC protocol;
ALSA SH drivers;
SOF drivers;
USB sound devices;
KVM core; (CVE-2024-27032, CVE-2024-26868, CVE-2024-26879, CVE-2024-27033, CVE-2024-26943, CVE-2024-27040, CVE-2024-26950, CVE-2023-52650,…

Record: USN-6878-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 160 CVEs	before 4.18.0-553.16.1.el8_10	4.18.0-553.16.1.el8_10
`kernel-rt` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-kvm` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 149 CVEs	before 4.18.0-553.16.1.rt7.357.el8_10	4.18.0-553.16.1.rt7.357.el8_10
`linux-lts` Alpaquita:23	6.1.82-r0 up to 6.1.89-r0	6.1.89-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`linux-buildinfo-4.15.0-232-tuxcare.els20-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-buildinfo-4.15.0-232-tuxcare.els20-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-cloud-tools-4.15.0-232-tuxcare.els20` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-cloud-tools-4.15.0-232-tuxcare.els20-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-cloud-tools-4.15.0-232-tuxcare.els20-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-cloud-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-doc` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-headers-4.15.0-232-tuxcare.els20` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-headers-4.15.0-232-tuxcare.els20-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-headers-4.15.0-232-tuxcare.els20-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-image-unsigned-4.15.0-232-tuxcare.els20-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-image-unsigned-4.15.0-232-tuxcare.els20-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-libc-dev` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-modules-4.15.0-232-tuxcare.els20-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-modules-4.15.0-232-tuxcare.els20-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-modules-extra-4.15.0-232-tuxcare.els20-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-source-4.15.0` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-tools-4.15.0-232-tuxcare.els20` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-tools-4.15.0-232-tuxcare.els20-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-tools-4.15.0-232-tuxcare.els20-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-tools-host` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0-232.243	4.15.0-232.243
`linux-cloud-tools-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`linux-cloud-tools-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`linux-crashdump` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`linux-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`linux-headers-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`linux-headers-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`linux-image-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`linux-image-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`linux-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`linux-source` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`linux-tools-generic` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`linux-tools-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 96 CVEs	before 4.15.0.232.243	4.15.0.232.243
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.11.els8	7.0.0-284.1101.el9_2.tuxcare.11.els8
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`Kernel` Linux	4.14.0 up to 4.19.311, 4.20.0 up to 5.4.273, 5.5.0 up to 5.10.214, 5.11.0 up to 5.15.153, 5.16.0 up to 6.1.83, 6.2.0 up to 6.6.23, 6.7.0 up to 6.7.11, 6.8.0 up to 6.8.2	4.19.3115.4.2735.10.2145.15.1536.1.836.6.236.7.116.8.2
`linux` Debian:12	before 6.1.85-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 14 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1	6.1.85-1
`linux` Debian:13	before 6.7.12-1	6.7.12-1
`linux` Debian:14	before 6.7.12-1	6.7.12-1
`linux` Debian:10 From an advisory covering 258 CVEs	before 4.19.316-1, plus listed versions 4.19.118-14.19.118-24.19.118-2+deb10u14.19.118-2+deb10u1~bpo9+14.19.118-2~bpo9+1 Show 41 moreShow less 4.19.131-14.19.131-24.19.132-14.19.146-14.19.152-14.19.160-14.19.160-24.19.171-14.19.171-24.19.177-14.19.181-14.19.194-14.19.194-24.19.194-34.19.208-14.19.232-14.19.235-14.19.249-14.19.249-24.19.260-14.19.269-14.19.282-14.19.289-14.19.289-24.19.304-14.19.37-54.19.37-5+deb10u14.19.37-5+deb10u24.19.37-5+deb10u2~bpo9+14.19.37-64.19.67-14.19.67-24.19.67-2+deb10u14.19.67-2+deb10u1~bpo9+14.19.67-2+deb10u24.19.67-2+deb10u2~bpo9+14.19.67-2~bpo9+14.19.87-14.19.98-14.19.98-1+deb10u14.19.98-1~bpo9+1	4.19.316-1
`linux-5.10` Debian:10 From an advisory covering 344 CVEs	before 5.10.216-1~deb10u1, plus listed versions 5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1 Show 8 moreShow less 5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1	5.10.216-1~deb10u1
`linux` Debian:11 From an advisory covering 246 CVEs	before 5.10.216-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 34 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.216-1
`kernel` openEuler:20.03-LTS-SP1 From an advisory covering 61 CVEs	before 4.19.90-2405.3.0.0249.oe1	4.19.90-2405.3.0.0249.oe1
`kernel` openEuler:20.03-LTS-SP4 From an advisory covering 63 CVEs	before 4.19.90-2405.3.0.0276.oe2003sp4	4.19.90-2405.3.0.0276.oe2003sp4
`kernel` openEuler:22.03-LTS From an advisory covering 16 CVEs	before 5.10.0-60.137.0.164.oe2203	5.10.0-60.137.0.164.oe2203
`kernel` openEuler:22.03-LTS-SP1 From an advisory covering 28 CVEs	before 5.10.0-136.75.0.155.oe2203sp1	5.10.0-136.75.0.155.oe2203sp1
`kernel` openEuler:22.03-LTS-SP2 From an advisory covering 28 CVEs	before 5.10.0-153.54.0.132.oe2203sp2	5.10.0-153.54.0.132.oe2203sp2
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 77 CVEs	before 5.10.0-199.0.0.112.oe2203sp3	5.10.0-199.0.0.112.oe2203sp3
`bpftool` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 170 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:8::nfv From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel` Rocky Linux:8 From an advisory covering 160 CVEs	before 0:4.18.0-553.16.1.el8_10	0:4.18.0-553.16.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 149 CVEs	before 0:4.18.0-553.16.1.rt7.357.el8_10	0:4.18.0-553.16.1.rt7.357.el8_10
`kernel` Rocky Linux:8 From an advisory covering 160 CVEs	before 0:4.18.0-553.16.1.el8_10.cloud.0.1	0:4.18.0-553.16.1.el8_10.cloud.0.1
`kernel-azure` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 201 CVEs	before 4.12.14-16.182.1	4.12.14-16.182.1
`kernel-source-azure` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 201 CVEs	before 4.12.14-16.182.1	4.12.14-16.182.1
`kernel-syms-azure` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 201 CVEs	before 4.12.14-16.182.1	4.12.14-16.182.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 201 CVEs	before 4.12.14-16.182.1	4.12.14-16.182.1
`kernel-source-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 201 CVEs	before 4.12.14-16.182.1	4.12.14-16.182.1
`kernel-syms-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 201 CVEs	before 4.12.14-16.182.1	4.12.14-16.182.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 190 CVEs	before 5.14.21-150500.33.51.1	5.14.21-150500.33.51.1
`kernel-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 187 CVEs	before 4.12.14-10.182.1	4.12.14-10.182.1
`kernel-rt_debug` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 187 CVEs	before 4.12.14-10.182.1	4.12.14-10.182.1
`kernel-source-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 187 CVEs	before 4.12.14-10.182.1	4.12.14-10.182.1
`kernel-syms-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 187 CVEs	before 4.12.14-10.182.1	4.12.14-10.182.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2.150500.6.27.2	5.14.21-150500.55.62.2.150500.6.27.2
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2.150500.6.27.2	5.14.21-150500.55.62.2.150500.6.27.2
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.1	5.14.21-150500.55.62.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-livepatch-SLE15-SP5_Update_13` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 218 CVEs	before 1-150500.11.3.2	1-150500.11.3.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.1	5.14.21-150500.55.62.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2.150500.6.27.2	5.14.21-150500.55.62.2.150500.6.27.2
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.1	5.14.21-150500.55.62.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.1	5.14.21-150500.55.62.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 218 CVEs	before 5.14.21-150500.55.62.2	5.14.21-150500.55.62.2
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-livepatch-SLE15-SP5-RT_Update_14` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 219 CVEs	before 1-150500.11.5.1	1-150500.11.5.1
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 219 CVEs	before 5.14.21-150500.13.52.1	5.14.21-150500.13.52.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 12 SP5 From an advisory covering 193 CVEs	before 4.12.14-122.216.1	4.12.14-122.216.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 193 CVEs	before 4.12.14-122.216.1	4.12.14-122.216.1
`kgraft-patch-SLE12-SP5_Update_56` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 193 CVEs	before 1-8.3.1	1-8.3.1
`kernel-docs` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 193 CVEs	before 4.12.14-122.216.1	4.12.14-122.216.1
`kernel-obs-build` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 193 CVEs	before 4.12.14-122.216.1	4.12.14-122.216.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 193 CVEs	before 4.12.14-122.216.1	4.12.14-122.216.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 193 CVEs	before 4.12.14-122.216.1	4.12.14-122.216.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 193 CVEs	before 4.12.14-122.216.1	4.12.14-122.216.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 193 CVEs	before 4.12.14-122.216.1	4.12.14-122.216.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 193 CVEs	before 4.12.14-122.216.1	4.12.14-122.216.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 193 CVEs	before 4.12.14-122.216.1	4.12.14-122.216.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 193 CVEs	before 4.12.14-122.216.1	4.12.14-122.216.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.1	6.4.0-150600.8.5.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.1	6.4.0-150600.8.5.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3.150600.12.2.7	6.4.0-150600.23.7.3.150600.12.2.7
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.4	6.4.0-150600.23.7.4
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.2	6.4.0-150600.23.7.2
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1128.138~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1128.138~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1133.140~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1133.140~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1132.141~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1132.141~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-189.209~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-189.209~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1075.80~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	5.4.0-1075.80~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1127.136~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1127.136~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1112.124~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1112.124~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-189.209, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-189.209
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1128.138, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1128.138
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1063.69~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 33 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.1	5.15.0-1063.69~20.04.1
`linux-azure` Ubuntu:20.04:LTS	before 5.4.0-1133.140, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	5.4.0-1133.140
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1065.74~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 36 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.1	5.15.0-1065.74~20.04.1
`linux-bluefield` Ubuntu:20.04:LTS	before 5.4.0-1088.95, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92	5.4.0-1088.95
`linux-gcp` Ubuntu:20.04:LTS	before 5.4.0-1132.141, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	5.4.0-1132.141
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1062.70~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 34 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.1	5.15.0-1062.70~20.04.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26878 is a medium vulnerability (CVSS 4.7) in Debian Linux, published April 17, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in linux-lts 6.1.89-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 577 package rows, 1,478 versions, 7,016 references and the rest of 33 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 7 source records.