CVE-2024-26906

x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()

5.5 MediumFix available

What does this mean?

: 5.5v3.1, from NVD
: 0.25%16th percentile
Fixed in: 6.1.89-r0linux-lts
Published: April 17, 2024
Modified: November 2, 2026
Also known as: ALSA-2024:4211ALSA-2024:4352BELL-CVE-2024-26906CLSA-2026-1783791447DEBIAN-CVE-2024-26906DLA-3842-1DSA-5681-1EUVD-2024-24168
Show 32 moreShow less
GHSA-h4jh-5vqp-vw3pRHSA-2024:4211RHSA-2024:4352RHSA-2024:9315RHSA-2024:9497RHSA-2024:9498RHSA-2024:9546RLSA-2024:4211RLSA-2024:4352RXSA-2024:4211SUSE-SU-2024:1642-1SUSE-SU-2024:1645-1SUSE-SU-2024:1650-1SUSE-SU-2024:2135-1SUSE-SU-2024:2203-1SUSE-SU-2024:2973-1SUSE-SU-2024:4315-1SUSE-SU-2024:4364-1SUSE-SU-2024:4376-1SUSE-SU-2025:20008-1SUSE-SU-2025:20028-1UBUNTU-CVE-2024-26906USN-6820-1USN-6820-2USN-6821-1USN-6821-2USN-6821-3USN-6821-4USN-6828-1USN-6871-1USN-6892-1USN-6919-1

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()

When trying to use copy_from_kernel_nofault() to read vsyscall page through a bpf program, the following oops was reported:

BUG: unable to handle page fault for address: ffffffffff600000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 3231067 P4D 3231067 PUD 3233067 PMD 3235067 PTE 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 1 PID: 20390 Comm: test_progs ...... 6.7.0+ #58 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:copy_from_kernel_nofault+0x6f/0x110 ...... Call Trace: <TASK> ? copy_from_kernel_nofault+0x6f/0x110 bpf_probe_read_kernel+0x1d/0x50 bpf_prog_2061065e56845f08_do_probe_read+0x51/0x8d trace_call_bpf+0xc5/0x1c0 perf_call_bpf_enter.isra.0+0x69/0xb0 perf_syscall_enter+0x13e/0x200 syscall_trace_enter+0x188/0x1c0 do_syscall_64+0xb5/0xe0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK> ...... ---[ end trace 0000000000000000 ]---

The oops is triggered when:

A bpf program uses bpf_probe_read_kernel() to read from the vsyscall page and invokes copy_from_kernel_nofault() which in turn calls __get_user_asm().
Because the vsyscall page address is not readable from kernel space, a page fault exception is triggered accordingly.
handle_page_fault() considers the vsyscall page address as a user space address instead of a kernel space address. This results in the fix-up setup by bpf not being applied and a page_fault_oops() is invoked due to SMAP.

Considering handle_page_fault() has already considered the vsyscall page address as a userspace address, fix the problem by disallowing vsyscall page read for copy_from_kernel_nofault().

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.25%Up 0.2 points since Apr 18, 2024

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()

When trying to use copy_from_kernel_nofault() to read vsyscall page through a bpf program, the following oops was reported:

The oops is triggered when:

A bpf program uses bpf_probe_read_kernel() to read from the vsyscall page and invokes copy_from_kernel_nofault() which in turn calls __get_user_asm().
Because the vsyscall page address is not readable from kernel space, a page fault exception is triggered accordingly.
handle_page_fault() considers the vsyscall page address as a user space address instead of a kernel space address. This results in the fix-up setup by bpf not being applied and a page_fault_oops() is invoked due to SMAP.

Considering handle_page_fault() has already considered the vsyscall page address as a userspace address, fix the problem by disallowing vsyscall page read for copy_from_kernel_nofault().

Record: CVE-2024-26906
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

CVE List No score

x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()

When trying to use copy_from_kernel_nofault() to read vsyscall page through a bpf program, the following oops was reported:

The oops is triggered when:

A bpf program uses bpf_probe_read_kernel() to read from the vsyscall page and invokes copy_from_kernel_nofault() which in turn calls __get_user_asm().
Because the vsyscall page address is not readable from kernel space, a page fault exception is triggered accordingly.
handle_page_fault() considers the vsyscall page address as a user space address instead of a kernel space address. This results in the fix-up setup by bpf not being applied and a page_fault_oops() is invoked due to SMAP.

Considering handle_page_fault() has already considered the vsyscall page address as a userspace address, fix the problem by disallowing vsyscall page read for copy_from_kernel_nofault().

Record: CVE-2024-26906
Updated: 2026-11-02

EUVDEUVD-2024-24168 No score

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()

When trying to use copy_from_kernel_nofault() to read vsyscall page through a bpf program, the following oops was reported:

The oops is triggered when:

A bpf program uses bpf_probe_read_kernel() to read from the vsyscall page and invokes copy_from_kernel_nofault() which in turn calls __get_user_asm().
Because the vsyscall page address is not readable from kernel space, a page fault exception is triggered accordingly.
handle_page_fault() considers the vsyscall page address as a user space address instead of a kernel space address. This results in the fix-up setup by bpf not being applied and a page_fault_oops() is invoked due to SMAP.

Considering handle_page_fault() has already considered the vsyscall page address as a userspace address, fix the problem by disallowing vsyscall page read for copy_from_kernel_nofault().

Record: EUVD-2024-24168
Updated: 2026-11-02

GitHub AdvisoriesGHSA-h4jh-5vqp-vw3p 5.5

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disallow vsyscall...

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()

When trying to use copy_from_kernel_nofault() to read vsyscall page through a bpf program, the following oops was reported:

The oops is triggered when:

A bpf program uses bpf_probe_read_kernel() to read from the vsyscall page and invokes copy_from_kernel_nofault() which in turn calls __get_user_asm().
Because the vsyscall page address is not readable from kernel space, a page fault exception is triggered accordingly.
handle_page_fault() considers the vsyscall page address as a user space address instead of a kernel space address. This results in the fix-up setup by bpf not being applied and a page_fault_oops() is invoked due to SMAP.

Considering handle_page_fault() has already considered the vsyscall page address as a userspace address, fix the problem by disallowing vsyscall page read for copy_from_kernel_nofault().

Record: GHSA-h4jh-5vqp-vw3p
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2024-26906 5.5

Record: BELL-CVE-2024-26906
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-26906 5.5

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() When trying to use copy_from_kernel_nofault() to read vsyscall page through a bpf program, the following oops was reported: BUG: unable to handle page fault for address: ffffffffff600000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 3231067 P4D 3231067 PUD 3233067 PMD 3235067 PTE 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 1 PID: 20390 Comm: test_progs ...... 6.7.0+ #58 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:copy_from_kernel_nofault+0x6f/0x110 ...... Call Trace: <TASK> ? copy_from_kernel_nofault+0x6f/0x110 bpf_probe_read_kernel+0x1d/0x50 bpf_prog_2061065e56845f08_do_probe_read+0x51/0x8d trace_call_bpf+0xc5/0x1c0 perf_call_bpf_enter.isra.0+0x69/0xb0 perf_syscall_enter+0x13e/0x200 syscall_trace_enter+0x188/0x1c0 do_syscall_64+0xb5/0xe0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK> ...... ---[ end trace 0000000000000000 ]--- The oops is triggered when: 1) A bpf program uses bpf_probe_read_kernel() to read from the vsyscall page and invokes copy_from_kernel_nofault() which in turn calls __get_user_asm(). 2) Because the vsyscall page address is not readable from kernel space, a page fault exception is triggered accordingly. 3) handle_page_fault() considers the vsyscall page address as a user space address instead of a kernel space address. This results in the fix-up setup by bpf not being applied and a page_fault_oops() is invoked due to SMAP. Considering handle_page_fault() has already considered the vsyscall page address as a userspace address, fix the problem by disallowing vsyscall page read for copy_from_kernel_nofault().

Record: DEBIAN-CVE-2024-26906
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 35 moreShow less

OSVRHSA-2024:4211 7.3

Red Hat Security Advisory: kernel security and bug fix update

Record: RHSA-2024:4211
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:4352 7.0

Red Hat Security Advisory: kernel-rt security and bug fix update

Record: RHSA-2024:4352
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9497 7.0

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9497
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9498 7.0

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:9498
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9546 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9546
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2024:4211 7.0

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)
kernel: ovl: fix leaked entry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: gro: fix ownership transfer (CVE-2024-35890)
kernel: tls: (CVE-2024-26584, CVE-2024-26583, CVE-2024-26585)
kernel: wifi: (CVE-2024-35789, CVE-2024-27410, CVE-2024-35838, CVE-2024-35845)
kernel: mlxsw: (CVE-2024-35855, CVE-2024-35854, CVE-2024-35853, CVE-2024-35852, CVE-2024-36007)
kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)
kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng [rhel-8] (CVE-2023-52615)
kernel: net/mlx5e: (CVE-2023-52626, CVE-2024-35835, CVE-2023-52667, CVE-2024-35959)
kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)
kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset [rhel-8] (CVE-2024-26801)
kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
kernel: netfilter: nf_tables: use timestamp to check for set element timeout [rhel-8.10] (CVE-2024-27397)
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: x86/mm/swap: (CVE-2024-26759, CVE-2024-26906)
kernel: tipc: fix kernel warning when sending SYN message [rhel-8] (CVE-2023-52700)
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)
kernel: powerpc/imc-pmu/powernv: (CVE-2023-52675, CVE-2023-52686)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: crypto: (CVE-2024-26974, CVE-2023-52669, CVE-2023-52813)
kernel: net/mlx5/bnx2x/usb: (CVE-2024-35960, CVE-2024-35958, CVE-2021-47310, CVE-2024-26804, CVE-2021-47311, CVE-2024-26859, CVE-2021-47236, CVE-2023-52703)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)
kernel: USB/usbnet: (CVE-2023-52781, CVE-2023-52877, CVE-2021-47495)
kernel: can: (CVE-2023-52878, CVE-2021-47456)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:Rocky Linux-29783)
Temporary values in FIPS integrity test should be zeroized [rhel-8.10.z] (JIRA:Rocky Linux-35361)
Rocky Linux8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:Rocky Linux-36048)
[Rocky Linux8] blktests block/024 failed (JIRA:Rocky Linux-8130)
Rocky Linux8.9: EEH injections results Error: Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:Rocky Linux-14195)
Latency spikes with Matrox G200 graphic cards (JIRA:Rocky Linux-36172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2024:4211
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2024:4352 7.0

Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: tls (CVE-2024-26585,CVE-2024-26584, CVE-2024-26583
kernel-rt: kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)
kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng (CVE-2023-52615)
kernel-rt: kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)
kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset CVE-2024-26801)
kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)
kernel: wifi: mac80211: (CVE-2024-35789, CVE-2024-35838, CVE-2024-35845)
kernel: wifi: nl80211: reject iftype change with mesh ID change (CVE-2024-27410)
kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)
kernel:TCP-spoofed ghost ACKs and leak initial sequence number (CVE-2023-52881)
kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel: ovl: fix leaked dentry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: mm/swap: fix race when skipping swapcache (CVE-2024-26759)
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)
kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)
kernel: net/usb: kalmia: avoid printing uninitialized value on error path (CVE-2023-52703)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: net/bnx2x: Prevent access to a freed page in page_pool (CVE-2024-26859)
kernel: crypto: (CVE-2024-26974, CVE-2023-52813)
kernel: can: (CVE-2023-52878, CVE-2021-47456)
kernel: usb: (CVE-2023-52781, CVE-2023-52877)
kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
kernel: usbnet: sanity check for maxpacket (CVE-2021-47495)
kernel: gro: fix ownership transfer (CVE-2024-35890)
kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)
kernel: tipc: fix kernel warning when sending SYN message (CVE-2023-52700)
kernel: net/mlx5/mlxsw: (CVE-2024-35960, CVE-2024-36007, CVE-2024-35855)
kernel: net/mlx5e: (CVE-2024-35959, CVE-2023-52626, CVE-2024-35835)
kernel: mlxsw: (CVE-2024-35854, CVE-2024-35853, CVE-2024-35852)
kernel: net: (CVE-2024-35958, CVE-2021-47311, CVE-2021-47236, CVE-2021-47310)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

kernel-rt: update RT source tree to the latest Rocky Linux-8.10.z kernel (JIRA:Rocky Linux-40882)
[rhel8.9][cxgb4]BUG: using smp_processor_id() in preemptible [00000000] code: ethtool/54735 (JIRA:Rocky Linux-8779)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2024:4352
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRXSA-2024:4211 7.0

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)
kernel: ovl: fix leaked entry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: gro: fix ownership transfer (CVE-2024-35890)
kernel: tls: (CVE-2024-26584, CVE-2024-26583, CVE-2024-26585)
kernel: wifi: (CVE-2024-35789, CVE-2024-27410, CVE-2024-35838, CVE-2024-35845)
kernel: mlxsw: (CVE-2024-35855, CVE-2024-35854, CVE-2024-35853, CVE-2024-35852, CVE-2024-36007)
kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)
kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng [rhel-8] (CVE-2023-52615)
kernel: net/mlx5e: (CVE-2023-52626, CVE-2024-35835, CVE-2023-52667, CVE-2024-35959)
kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)
kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset [rhel-8] (CVE-2024-26801)
kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
kernel: netfilter: nf_tables: use timestamp to check for set element timeout [rhel-8.10] (CVE-2024-27397)
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: x86/mm/swap: (CVE-2024-26759, CVE-2024-26906)
kernel: tipc: fix kernel warning when sending SYN message [rhel-8] (CVE-2023-52700)
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)
kernel: powerpc/imc-pmu/powernv: (CVE-2023-52675, CVE-2023-52686)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: crypto: (CVE-2024-26974, CVE-2023-52669, CVE-2023-52813)
kernel: net/mlx5/bnx2x/usb: (CVE-2024-35960, CVE-2024-35958, CVE-2021-47310, CVE-2024-26804, CVE-2021-47311, CVE-2024-26859, CVE-2021-47236, CVE-2023-52703)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)
kernel: USB/usbnet: (CVE-2023-52781, CVE-2023-52877, CVE-2021-47495)
kernel: can: (CVE-2023-52878, CVE-2021-47456)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:Rocky Linux SIG Cloud-29783)
Temporary values in FIPS integrity test should be zeroized [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-35361)
Rocky Linux SIG Cloud8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:Rocky Linux SIG Cloud-36048)
[Rocky Linux SIG Cloud8] blktests block/024 failed (JIRA:Rocky Linux SIG Cloud-8130)
Rocky Linux SIG Cloud8.9: EEH injections results Error: Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:Rocky Linux SIG Cloud-14195)
Latency spikes with Matrox G200 graphic cards (JIRA:Rocky Linux SIG Cloud-36172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RXSA-2024:4211
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-26906 5.5

Record: UBUNTU-CVE-2024-26906
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2024:4211 No score

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel:TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)
kernel: ovl: fix leaked dentry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: mm/swap: fix race when skipping swapcache (CVE-2024-26759)
kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)
kernel: powerpc/powernv: Add a null pointer check in opal_event_init() (CVE-2023-52686)
kernel: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (CVE-2023-52675)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: net/bnx2x: Prevent access to a freed page in page_pool (CVE-2024-26859)
kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974)
kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960)
kernel: net/mlx5e: Fix mlx5e_priv_init() cleanup flow (CVE-2024-35959)
kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)
kernel: net: ti: fix UAF in tlan_remove_one (CVE-2021-47310)

Bug Fix(es):

Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:AlmaLinux-29783)
Temporary values in FIPS integrity test should be zeroized [almalinux-8.10.z] (JIRA:AlmaLinux-35361)
AlmaLinux8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:AlmaLinux-36048)
[AlmaLinux8] blktests block/024 failed (JIRA:AlmaLinux-8130)
AlmaLinux8.9: EEH injections results Error: Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:AlmaLinux-14195)
Latency spikes with Matrox G200 graphic cards (JIRA:AlmaLinux-36172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:4211
Updated: 2026-11-02

OSVALSA-2024:4352 No score

Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: tls (CVE-2024-26585,CVE-2024-26584, CVE-2024-26583
kernel-rt: kernel: PCI interrupt mapping cause oops [almalinux-8] (CVE-2021-46909)
kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng (CVE-2023-52615)
kernel-rt: kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)
kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset CVE-2024-26801)
kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)
kernel: wifi: mac80211: (CVE-2024-35789, CVE-2024-35838, CVE-2024-35845)
kernel: wifi: nl80211: reject iftype change with mesh ID change (CVE-2024-27410)
kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)
kernel:TCP-spoofed ghost ACKs and leak initial sequence number (CVE-2023-52881)
kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel: ovl: fix leaked dentry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: mm/swap: fix race when skipping swapcache (CVE-2024-26759)
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)
kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)
kernel: net/usb: kalmia: avoid printing uninitialized value on error path (CVE-2023-52703)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: net/bnx2x: Prevent access to a freed page in page_pool (CVE-2024-26859)
kernel: crypto: (CVE-2024-26974, CVE-2023-52813)
kernel: can: (CVE-2023-52878, CVE-2021-47456)
kernel: usb: (CVE-2023-52781, CVE-2023-52877)
kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
kernel: usbnet: sanity check for maxpacket (CVE-2021-47495)
kernel: gro: fix ownership transfer (CVE-2024-35890)
kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)
kernel: tipc: fix kernel warning when sending SYN message (CVE-2023-52700)
kernel: net/mlx5/mlxsw: (CVE-2024-35960, CVE-2024-36007, CVE-2024-35855)
kernel: net/mlx5e: (CVE-2024-35959, CVE-2023-52626, CVE-2024-35835)
kernel: mlxsw: (CVE-2024-35854, CVE-2024-35853, CVE-2024-35852)
kernel: net: (CVE-2024-35958, CVE-2021-47311, CVE-2021-47236, CVE-2021-47310)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

kernel-rt: update RT source tree to the latest AlmaLinux-8.10.z kernel (JIRA:AlmaLinux-40882)
[almalinux8.9][cxgb4]BUG: using smp_processor_id() in preemptible [00000000] code: ethtool/54735 (JIRA:AlmaLinux-8779)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:4352
Updated: 2026-11-02

OSVCLSA-2026-1783791447 No score

kernel: Fix of 307 CVEs

gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660}
ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008}
KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975}
Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027}
xhci: Fix null pointer dereference when host dies {CVE-2023-52898}
sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638}
blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671}
net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977}
gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975}
HID: betop: check shape of output reports {CVE-2023-53015}
mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932}
HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937}
drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002}
ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013}
RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026}
Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018}
scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760}
sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331}
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038}
cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194}
ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160}
nbd: don't allow reconnect after disconnect {CVE-2025-21731}
openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820}
net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321}
ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121}
i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041}
net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000}
bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994}
xsk: check IFF_UP earlier in Tx path {CVE-2023-53240}
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
virtgpu: don't reset on shutdown {CVE-2025-38064}
xen/netfront: fix crash when removing device {CVE-2022-48969}
mptcp: do not fallback when OoO is present {CVE-2024-50185}
can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925}
netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160}
xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053}
ext4: fix racy may inline data check in dio write {CVE-2023-52786}
drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738}
macsec: fix UAF bug for real_dev {CVE-2022-49390}
drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259}
mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241}
driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715}
udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712}
ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657}
mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611}
eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302}
udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544}
RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224}
dlm: fix possible lkb_resource…

Record: CLSA-2026-1783791447
Updated: 2026-11-02

OSV No score

x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()

In the Linux kernel, the following vulnerability has been resolved:

x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()

When trying to use copy_from_kernel_nofault() to read vsyscall page through a bpf program, the following oops was reported:

The oops is triggered when:

A bpf program uses bpf_probe_read_kernel() to read from the vsyscall page and invokes copy_from_kernel_nofault() which in turn calls __get_user_asm().
Because the vsyscall page address is not readable from kernel space, a page fault exception is triggered accordingly.
handle_page_fault() considers the vsyscall page address as a user space address instead of a kernel space address. This results in the fix-up setup by bpf not being applied and a page_fault_oops() is invoked due to SMAP.

Considering handle_page_fault() has already considered the vsyscall page address as a userspace address, fix the problem by disallowing vsyscall page read for copy_from_kernel_nofault().

Record: CVE-2024-26906
Updated: 2026-11-02

OSVSUSE-SU-2024:1642-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
CVE-2021-47113: Abort btrfs rename_exchange if we fail to insert the second ref (bsc#1221543).
CVE-2021-47131: Fixed a use-after-free after the TLS device goes down and up (bsc#1221545).
CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2022-48631: Fixed a bug in ext4, when parsing extents where eh_entries == 0 and eh_depth > 0 (bsc#1223475).
CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).
CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
CVE-2021-47041: Don't set sk_user_data without write_lock (bsc#1220755).
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2024-26744: Fixed null pointer dereference in srpt_service_guid parameter in rdma/srpt (bsc#1222449).

The following non-security bugs were fixed:

dm rq: do not queue request to blk-mq during DM suspend (bsc#1221113).
dm: rearrange core declarations for extended use from dm-zone.c (bsc#1221113).
net/tls: Remove the context from the list in tls_device_down (bsc#1221545).
tls: Fix context leak on tls_device_down (bsc#1221545).

Record: SUSE-SU-2024:1642-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1645-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
CVE-2021-47113: Abort btrfs rename_exchange if we fail to insert the second ref (bsc#1221543).
CVE-2021-47131: Fixed a use-after-free after the TLS device goes down and up (bsc#1221545).
CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2022-48631: Fixed a bug in ext4, when parsing extents where eh_entries == 0 and eh_depth > 0 (bsc#1223475).
CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).
CVE-2021-47207: Fixed a null pointer dereference on pointer block in gus (bsc#1222790).
CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221299).
CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
CVE-2021-47041: Don't set sk_user_data without write_lock (bsc#1220755).
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2024-26744: Fixed null pointer dereference in srpt_service_guid parameter in rdma/srpt (bsc#1222449).

The following non-security bugs were fixed:

dm rq: do not queue request to blk-mq during DM suspend (bsc#1221113).
dm: rearrange core declarations for extended use from dm-zone.c (bsc#1221113).
net/tls: Remove the context from the list in tls_device_down (bsc#1221545).
tls: Fix context leak on tls_device_down (bsc#1221545).

Record: SUSE-SU-2024:1645-1
Updated: 2026-11-02

OSVSUSE-SU-2024:1650-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
CVE-2021-47113: Abort btrfs rename_exchange if we fail to insert the second ref (bsc#1221543).
CVE-2021-47131: Fixed a use-after-free after the TLS device goes down and up (bsc#1221545).
CVE-2024-26852: Fixed net/ipv6 to avoid possible UAF in ip6_route_mpath_notify() (bsc#1223057).
CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220513).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824).
CVE-2022-48631: Fixed a bug in ext4, when parsing extents where eh_entries == 0 and eh_depth > 0 (bsc#1223475).
CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223513).
CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y by ignoring them (bsc#1222624).
CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26689: Fixed a use-after-free in encode_cap_msg() (bsc#1222503).
CVE-2021-47041: Don't set sk_user_data without write_lock (bsc#1220755).
CVE-2021-47074: Fixed memory leak in nvme_loop_create_ctrl() (bsc#1220854).
CVE-2024-26744: Fixed null pointer dereference in srpt_service_guid parameter in rdma/srpt (bsc#1222449).

The following non-security bugs were fixed:

net/tls: Remove the context from the list in tls_device_down (bsc#1221545).
tls: Fix context leak on tls_device_down (bsc#1221545).

Record: SUSE-SU-2024:1650-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2023-6270: Fixed a use-after-free issue in…

Record: SUSE-SU-2024:2135-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2203-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26632: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635).
CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
CVE-2024-26704: Fixed a…

Record: SUSE-SU-2024:2203-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…

Record: SUSE-SU-2024:2973-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135).
CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).
CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).
CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).
CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).
CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
CVE-2024-50127: net: sched: fix…

Record: SUSE-SU-2024:4315-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4364-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
CVE-2022-48957: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (bsc#1231973).
CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
CVE-2022-48980: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (bsc#1232233).
CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070).
CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
CVE-2022-49017: tipc: re-fetch skb cb after tipc_msg_validate (bsc#1232004).
CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005).
CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837).
CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46716: dmaengine: altera-msgdma:…

Record: SUSE-SU-2024:4364-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4376-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
CVE-2024-47701: ext4: explicitly exit when ext4_find_inline_entry returns an error (bsc#1231920).
CVE-2024-47745: mm: split critical region in remap_file_pages() and invoke LSMs in between (bsc#1232135).
CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
CVE-2024-49968: ext4: fix error message when rejecting the default hash (bsc#1232264).
CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).
CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).
CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).
CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
CVE-2024-50127: net: sched: fix…

Record: SUSE-SU-2024:4376-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
CVE-2024-35890:…

Record: SUSE-SU-2025:20008-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…

Record: SUSE-SU-2025:20028-1
Updated: 2026-11-02

OSVUSN-6820-1 No score

linux, linux-gcp, linux-gcp-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-xilinx-zynqmp vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

It was discovered that the MediaTek SoC Gigabit Ethernet driver in the Linux kernel contained a race condition when stopping the device. A local attacker could possibly use this to cause a denial of service (device unavailability). (CVE-2024-27432)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26776, CVE-2024-26802, CVE-2024-26790, CVE-2024-27388, CVE-2024-27077, CVE-2024-26884, CVE-2024-26779, CVE-2024-26897, CVE-2024-27045, CVE-2024-26851, CVE-2024-27065, CVE-2024-26843, CVE-2024-26743, CVE-2024-27052, CVE-2024-26855, CVE-2024-27436, CVE-2024-27078, CVE-2024-26898, CVE-2024-27405, CVE-2024-26894, CVE-2024-26584, CVE-2024-26915, CVE-2024-26763, CVE-2024-27047, CVE-2024-26809, CVE-2024-26883, CVE-2024-26901, CVE-2024-27412, CVE-2024-26803, CVE-2024-26751, CVE-2024-35829, CVE-2024-27432, CVE-2023-52447, CVE-2024-26748, CVE-2024-27051, CVE-2023-52434, CVE-2024-26749, CVE-2024-27034, CVE-2024-27390, CVE-2024-26879, CVE-2024-26859, CVE-2024-26835, CVE-2024-26861, CVE-2024-27030, CVE-2024-27415, CVE-2023-52656, CVE-2024-26773, CVE-2024-27043, CVE-2024-26601, CVE-2024-27073, CVE-2024-26782, CVE-2024-27413, CVE-2024-26880, CVE-2024-26793, CVE-2024-26766, CVE-2024-26750, CVE-2024-26852, CVE-2024-26805, CVE-2024-35830, CVE-2024-26798, CVE-2023-52644, CVE-2024-26787, CVE-2024-26846,…

Record: USN-6820-1
Updated: 2026-11-02

OSVUSN-6820-2 No score

linux-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26776, CVE-2024-26802, CVE-2024-26790, CVE-2024-27388, CVE-2024-27077, CVE-2024-26884, CVE-2024-26779, CVE-2024-26897, CVE-2024-27045, CVE-2024-26851, CVE-2024-27065, CVE-2024-26843, CVE-2024-26743, CVE-2024-27052, CVE-2024-26855, CVE-2024-27436, CVE-2024-27078, CVE-2024-26898, CVE-2024-27405, CVE-2024-26894, CVE-2024-26584, CVE-2024-26915, CVE-2024-26763, CVE-2024-27047, CVE-2024-26809, CVE-2024-26883, CVE-2024-26901, CVE-2024-27412, CVE-2024-26803, CVE-2024-26751, CVE-2024-35829, CVE-2024-27432, CVE-2023-52447, CVE-2024-26748, CVE-2024-27051, CVE-2023-52434, CVE-2024-26749, CVE-2024-27034, CVE-2024-27390, CVE-2024-26879, CVE-2024-26859, CVE-2024-26835, CVE-2024-26861, CVE-2024-27030, CVE-2024-27415, CVE-2023-52656, CVE-2024-26773, CVE-2024-27043, CVE-2024-26601, CVE-2024-27073, CVE-2024-26782, CVE-2024-27413, CVE-2024-26880, CVE-2024-26793, CVE-2024-26766, CVE-2024-26750, CVE-2024-26852, CVE-2024-26805, CVE-2024-35830, CVE-2024-26798, CVE-2023-52644, CVE-2024-26787, CVE-2024-26846,…

Record: USN-6820-2
Updated: 2026-11-02

OSVUSN-6821-1 No score

linux-gke, linux-ibm, linux-intel-iotg, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26877, CVE-2024-35829, CVE-2024-26737, CVE-2024-27075, CVE-2024-27414, CVE-2024-27053, CVE-2024-26889, CVE-2024-26792, CVE-2024-26882, CVE-2024-26906, CVE-2024-26851, CVE-2024-27037, CVE-2024-26782, CVE-2024-27388, CVE-2024-26748, CVE-2024-27419, CVE-2024-27034, CVE-2023-52662, CVE-2024-27047, CVE-2024-26874, CVE-2024-26779, CVE-2024-26872, CVE-2024-26820, CVE-2024-35811, CVE-2024-26771, CVE-2024-26733, CVE-2024-26903, CVE-2024-26736, CVE-2024-26870, CVE-2024-26883, CVE-2024-27403, CVE-2024-26878, CVE-2024-26857, CVE-2023-52645, CVE-2024-26601, CVE-2024-26891, CVE-2024-27028, CVE-2024-27054, CVE-2024-26804, CVE-2024-27405, CVE-2024-35830, CVE-2024-26898, CVE-2024-26754, CVE-2024-26793, CVE-2024-26747, CVE-2024-26901, CVE-2023-52652, CVE-2023-52650, CVE-2024-26651, CVE-2024-26816, CVE-2024-35845, CVE-2024-26862, CVE-2024-26884, CVE-2024-26752, CVE-2024-26852, CVE-2023-52656, CVE-2024-26790, CVE-2024-26603, CVE-2024-27078, CVE-2024-26802, CVE-2024-27045, CVE-2024-27024, CVE-2024-27073, CVE-2024-26585, CVE-2024-26894, CVE-2024-26583, CVE-2024-27416, CVE-2024-27431, CVE-2024-35844, CVE-2024-26838, CVE-2024-27410, CVE-2024-26915, CVE-2024-26772, CVE-2024-26897, CVE-2024-26798, CVE-2024-27415, CVE-2024-26855, CVE-2024-26833, CVE-2024-26764, CVE-2024-26659,…

Record: USN-6821-1
Updated: 2026-11-02

OSVUSN-6821-2 No score

linux-gkeop, linux-gkeop-5.15, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26877, CVE-2024-35829, CVE-2024-26737, CVE-2024-27075, CVE-2024-27414, CVE-2024-27053, CVE-2024-26889, CVE-2024-26792, CVE-2024-26882, CVE-2024-26906, CVE-2024-26851, CVE-2024-27037, CVE-2024-26782, CVE-2024-27388, CVE-2024-26748, CVE-2024-27419, CVE-2024-27034, CVE-2023-52662, CVE-2024-27047, CVE-2024-26874, CVE-2024-26779, CVE-2024-26872, CVE-2024-26820, CVE-2024-35811, CVE-2024-26771, CVE-2024-26733, CVE-2024-26903, CVE-2024-26736, CVE-2024-26870, CVE-2024-26883, CVE-2024-27403, CVE-2024-26878, CVE-2024-26857, CVE-2023-52645, CVE-2024-26601, CVE-2024-26891, CVE-2024-27028, CVE-2024-27054, CVE-2024-26804, CVE-2024-27405, CVE-2024-35830, CVE-2024-26898, CVE-2024-26754, CVE-2024-26793, CVE-2024-26747, CVE-2024-26901, CVE-2023-52652, CVE-2023-52650, CVE-2024-26651, CVE-2024-26816, CVE-2024-35845, CVE-2024-26862, CVE-2024-26884, CVE-2024-26752, CVE-2024-26852, CVE-2023-52656, CVE-2024-26790, CVE-2024-26603, CVE-2024-27078, CVE-2024-26802, CVE-2024-27045, CVE-2024-27024, CVE-2024-27073, CVE-2024-26585, CVE-2024-26894, CVE-2024-26583, CVE-2024-27416, CVE-2024-27431, CVE-2024-35844, CVE-2024-26838, CVE-2024-27410, CVE-2024-26915, CVE-2024-26772, CVE-2024-26897, CVE-2024-26798, CVE-2024-27415, CVE-2024-26855, CVE-2024-26833, CVE-2024-26764, CVE-2024-26659,…

Record: USN-6821-2
Updated: 2026-11-02

OSVUSN-6821-3 No score

linux-aws, linux-aws-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26877, CVE-2024-35829, CVE-2024-26737, CVE-2024-27075, CVE-2024-27414, CVE-2024-27053, CVE-2024-26889, CVE-2024-26792, CVE-2024-26882, CVE-2024-26906, CVE-2024-26851, CVE-2024-27037, CVE-2024-26782, CVE-2024-27388, CVE-2024-26748, CVE-2024-27419, CVE-2024-27034, CVE-2023-52662, CVE-2024-27047, CVE-2024-26874, CVE-2024-26779, CVE-2024-26872, CVE-2024-26820, CVE-2024-35811, CVE-2024-26771, CVE-2024-26733, CVE-2024-26903, CVE-2024-26736, CVE-2024-26870, CVE-2024-26883, CVE-2024-27403, CVE-2024-26878, CVE-2024-26857, CVE-2023-52645, CVE-2024-26601, CVE-2024-26891, CVE-2024-27028, CVE-2024-27054, CVE-2024-26804, CVE-2024-27405, CVE-2024-35830, CVE-2024-26898, CVE-2024-26754, CVE-2024-26793, CVE-2024-26747, CVE-2024-26901, CVE-2023-52652, CVE-2023-52650, CVE-2024-26651, CVE-2024-26816, CVE-2024-35845, CVE-2024-26862, CVE-2024-26884, CVE-2024-26752, CVE-2024-26852, CVE-2023-52656, CVE-2024-26790, CVE-2024-26603, CVE-2024-27078, CVE-2024-26802, CVE-2024-27045, CVE-2024-27024, CVE-2024-27073, CVE-2024-26585, CVE-2024-26894, CVE-2024-26583, CVE-2024-27416, CVE-2024-27431, CVE-2024-35844, CVE-2024-26838, CVE-2024-27410, CVE-2024-26915, CVE-2024-26772, CVE-2024-26897, CVE-2024-26798, CVE-2024-27415, CVE-2024-26855, CVE-2024-26833, CVE-2024-26764, CVE-2024-26659,…

Record: USN-6821-3
Updated: 2026-11-02

OSVUSN-6821-4 No score

linux-azure, linux-azure-fde vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-35830, CVE-2024-27052, CVE-2023-52620, CVE-2024-26903, CVE-2024-27413, CVE-2024-26766, CVE-2024-27077, CVE-2024-27044, CVE-2024-27076, CVE-2024-26833, CVE-2024-26874, CVE-2024-26863, CVE-2023-52650, CVE-2024-26820, CVE-2024-26787, CVE-2023-52656, CVE-2024-26651, CVE-2024-27065, CVE-2024-27053, CVE-2024-26583, CVE-2024-26774, CVE-2024-26782, CVE-2023-52640, CVE-2024-26838, CVE-2024-27410, CVE-2024-26870, CVE-2024-27024, CVE-2024-26891, CVE-2024-26889, CVE-2024-26897, CVE-2024-26857, CVE-2023-52434, CVE-2023-52645, CVE-2024-26901, CVE-2024-26872, CVE-2024-27051, CVE-2024-27388, CVE-2024-26584, CVE-2024-26802, CVE-2024-26733, CVE-2024-27419, CVE-2023-52447, CVE-2024-27054, CVE-2024-26840, CVE-2024-27038, CVE-2024-27028, CVE-2024-26883, CVE-2024-27074, CVE-2024-26735, CVE-2024-26852, CVE-2024-27034, CVE-2024-26744, CVE-2024-26907, CVE-2024-26777, CVE-2024-26835, CVE-2024-35845, CVE-2024-35828, CVE-2024-27037, CVE-2024-26764, CVE-2024-26798, CVE-2024-27414, CVE-2024-26878, CVE-2024-27390, CVE-2024-26856, CVE-2024-26884, CVE-2024-26779, CVE-2024-26895, CVE-2024-27436, CVE-2023-52641, CVE-2024-27039, CVE-2024-26776, CVE-2024-26749, CVE-2024-27047, CVE-2024-26882, CVE-2023-52652, CVE-2023-52662, CVE-2024-26763, CVE-2024-27030, CVE-2024-26772, CVE-2024-26859, CVE-2024-26791, CVE-2024-26788, CVE-2024-27046, CVE-2024-26736, CVE-2024-26750, CVE-2024-26801, CVE-2024-35811, CVE-2024-26737, CVE-2024-27416, CVE-2024-26769, CVE-2024-26906, CVE-2024-26795, CVE-2024-27417, CVE-2024-27078, CVE-2024-26790,…

Record: USN-6821-4
Updated: 2026-11-02

OSVUSN-6828-1 No score

linux-intel-iotg-5.15 vulnerabilities

Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233)

It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151)

Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Branch History Injection vulnerability (CVE-2022-0001) were insufficient for Intel processors. A local attacker could potentially use this to expose sensitive information. (CVE-2024-2201)

Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service (system crash). (CVE-2024-23849)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
Core kernel;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Android drivers;
Power management core;
Bus devices;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
Device frequency scaling framework;
DMA engine subsystem;
ARM SCMI message protocol;
EFI core;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
PCI driver for MicroSemi Switchtec;
PHY drivers;
MediaTek PM domains;
Power supply drivers;
SCSI drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system client;
NILFS2 file system;
NTFS3 file system;
Pstore file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Memory management;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
Logical Link…

Record: USN-6828-1
Updated: 2026-11-02

OSVUSN-6871-1 No score

linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26901, CVE-2024-35844, CVE-2024-27024, CVE-2024-26835, CVE-2024-26879, CVE-2024-26846, CVE-2024-35829, CVE-2024-26804, CVE-2024-26802, CVE-2024-27039, CVE-2024-27075, CVE-2024-27076, CVE-2024-26863, CVE-2024-27046, CVE-2024-26776, CVE-2024-26875, CVE-2024-26885, CVE-2024-26583, CVE-2024-26777, CVE-2024-26803, CVE-2024-27047, CVE-2024-26748, CVE-2024-27044, CVE-2024-27416, CVE-2024-26906, CVE-2024-27405, CVE-2024-26749, CVE-2024-27436, CVE-2024-26895, CVE-2023-52662, CVE-2024-26772, CVE-2023-52645, CVE-2024-26787, CVE-2024-26788, CVE-2023-52497, CVE-2024-26795, CVE-2024-26763, CVE-2024-27414, CVE-2024-26870, CVE-2024-27412, CVE-2024-27078, CVE-2024-27388, CVE-2024-26894, CVE-2023-52641, CVE-2024-27053, CVE-2024-26584, CVE-2024-26752, CVE-2024-35845, CVE-2024-26884, CVE-2024-26782, CVE-2024-26859, CVE-2024-26809, CVE-2024-27038, CVE-2024-26897, CVE-2024-26750, CVE-2023-52644, CVE-2024-26848, CVE-2024-26833, CVE-2024-26801, CVE-2024-26872, CVE-2023-52620, CVE-2023-52652, CVE-2024-26839, CVE-2024-26851, CVE-2024-26805, CVE-2024-26659, CVE-2024-26791, CVE-2023-52640, CVE-2024-26883, CVE-2024-26737, CVE-2024-27028, CVE-2024-26603, CVE-2024-27073, CVE-2024-26792, CVE-2024-35830, CVE-2024-26585, CVE-2024-27045, CVE-2024-26880,…

Record: USN-6871-1
Updated: 2026-11-02

OSVUSN-6892-1 No score

linux-ibm-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
x86 architecture;
ACPI drivers;
Block layer subsystem;
Clock framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
USB subsystem;
Framebuffer layer;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
Network file system client;
NTFS3 file system;
Diskquota system;
SMB network file system;
BPF subsystem;
Netfilter;
TLS protocol;
io_uring subsystem;
Bluetooth subsystem;
Memory management;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
L2TP protocol;
MAC80211 subsystem;
Multipath TCP;
Netlink;
NET/ROM layer;
Packet sockets;
RDS protocol;
Sun RPC protocol;
Unix domain sockets;
Wireless networking;
USB sound devices; (CVE-2024-26643, CVE-2024-26735, CVE-2024-27024, CVE-2024-26838, CVE-2024-27045, CVE-2024-26747, CVE-2024-26774, CVE-2024-26889, CVE-2024-26766, CVE-2024-26878, CVE-2024-35845, CVE-2024-27034, CVE-2024-26857, CVE-2024-26863, CVE-2024-27030, CVE-2024-27043, CVE-2023-52662, CVE-2024-26787, CVE-2024-26782, CVE-2023-52434, CVE-2024-26802, CVE-2024-26776, CVE-2024-26584, CVE-2024-26875, CVE-2023-52650, CVE-2024-26879, CVE-2024-26820, CVE-2024-27410, CVE-2024-26859, CVE-2024-26744, CVE-2024-26743, CVE-2024-27075, CVE-2024-35830, CVE-2024-26779, CVE-2024-26843, CVE-2024-26778, CVE-2024-27046, CVE-2024-27412, CVE-2024-26839, CVE-2024-26773, CVE-2024-26748, CVE-2023-52620, CVE-2024-26805, CVE-2024-26915, CVE-2024-26848, CVE-2024-26688, CVE-2024-26840, CVE-2024-26856, CVE-2024-27414, CVE-2023-52645, CVE-2024-26880, CVE-2023-52656, CVE-2024-27053, CVE-2024-26752, CVE-2024-27047, CVE-2024-27416, CVE-2024-26882, CVE-2024-26803, CVE-2024-27073, CVE-2024-26884, CVE-2024-26769, CVE-2024-26737, CVE-2024-27054, CVE-2024-27044, CVE-2024-26777, CVE-2024-26749, CVE-2024-27436, CVE-2024-26788, CVE-2024-26751, CVE-2024-35828, CVE-2024-26891, CVE-2024-26771, CVE-2024-26877, CVE-2024-26733, CVE-2024-26793, CVE-2024-26659, CVE-2024-27419, CVE-2024-26870,…

Record: USN-6892-1
Updated: 2026-11-02

OSVUSN-6919-1 No score

linux-raspi vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client; -…

Record: USN-6919-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-rt` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-kvm` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`linux-lts` Alpaquita:23	6.1.82-r0 up to 6.1.89-r0	6.1.89-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.11.els8	7.0.0-284.1101.el9_2.tuxcare.11.els8
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els8	2:1.0.0-2.el9_2.tuxcare.11.els8
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els8	2:1.0.0-2.el9_2.tuxcare.11.els8
`libbpf-static` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els8	2:1.0.0-2.el9_2.tuxcare.11.els8
`perf` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`python3-perf` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`rtla` TuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els8	5.14.0-284.1101.el9_2.tuxcare.11.els8
`Kernel` Linux	5.5.0 up to 5.10.214, 5.11.0 up to 5.15.153, 5.16.0 up to 6.1.83, 6.2.0 up to 6.6.23, 6.7.0 up to 6.7.11	5.10.2145.15.1536.1.836.6.236.7.11
`linux` Debian:12	before 6.1.85-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 14 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1	6.1.85-1
`linux` Debian:13	before 6.7.12-1	6.7.12-1
`linux` Debian:14	before 6.7.12-1	6.7.12-1
`linux-5.10` Debian:10 From an advisory covering 344 CVEs	before 5.10.216-1~deb10u1, plus listed versions 5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1 Show 8 moreShow less 5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1	5.10.216-1~deb10u1
`linux` Debian:11 From an advisory covering 246 CVEs	before 5.10.216-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 34 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.216-1
`bpftool` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-modules` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-modules` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel` Rocky Linux:8 From an advisory covering 61 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-livepatch-SLE15-SP3_Update_44` SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 48 CVEs	before 1-150300.7.3.1	1-150300.7.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP3 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1.150300.18.94.1	5.3.18-150300.59.161.1.150300.18.94.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.2	5.3.18-150300.59.161.2
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-preempt` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1.150300.18.94.1	5.3.18-150300.59.161.1.150300.18.94.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.2	5.3.18-150300.59.161.2
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-preempt` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1.150300.18.94.1	5.3.18-150300.59.161.1.150300.18.94.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.2	5.3.18-150300.59.161.2
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-preempt` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-default` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1.150300.18.94.1	5.3.18-150300.59.161.1.150300.18.94.1
`kernel-default` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1.150300.18.94.1	5.3.18-150300.59.161.1.150300.18.94.1
`kernel-64kb` SUSE:Enterprise Storage 7.1 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-default` SUSE:Enterprise Storage 7.1 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-default-base` SUSE:Enterprise Storage 7.1 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1.150300.18.94.1	5.3.18-150300.59.161.1.150300.18.94.1
`kernel-docs` SUSE:Enterprise Storage 7.1 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.2	5.3.18-150300.59.161.2
`kernel-obs-build` SUSE:Enterprise Storage 7.1 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-preempt` SUSE:Enterprise Storage 7.1 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-source` SUSE:Enterprise Storage 7.1 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-syms` SUSE:Enterprise Storage 7.1 From an advisory covering 48 CVEs	before 5.3.18-150300.59.161.1	5.3.18-150300.59.161.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 41 CVEs	before 5.3.18-150300.169.1	5.3.18-150300.169.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 41 CVEs	before 5.3.18-150300.169.1	5.3.18-150300.169.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 41 CVEs	before 5.3.18-150300.169.1	5.3.18-150300.169.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 41 CVEs	before 5.3.18-150300.169.1	5.3.18-150300.169.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP2 From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1	5.3.18-150200.24.191.1
`kernel-livepatch-SLE15-SP2_Update_48` SUSE:Linux Enterprise Live Patching 15 SP2 From an advisory covering 37 CVEs	before 1-150200.5.3.1	1-150200.5.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP2 From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1	5.3.18-150200.24.191.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1	5.3.18-150200.24.191.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1.150200.9.97.1	5.3.18-150200.24.191.1.150200.9.97.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1	5.3.18-150200.24.191.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1	5.3.18-150200.24.191.1
`kernel-preempt` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1	5.3.18-150200.24.191.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1	5.3.18-150200.24.191.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1	5.3.18-150200.24.191.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1	5.3.18-150200.24.191.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1.150200.9.97.1	5.3.18-150200.24.191.1.150200.9.97.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1	5.3.18-150200.24.191.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 37 CVEs	before 5.3.18-150200.24.191.1	5.3.18-150200.24.191.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.4	6.4.0-150600.8.5.4
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 428 CVEs	before 6.4.0-150600.8.5.1	6.4.0-150600.8.5.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3.150600.12.2.7	6.4.0-150600.23.7.3.150600.12.2.7
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.4	6.4.0-150600.23.7.4
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.2	6.4.0-150600.23.7.2
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.1	6.4.0-150600.23.7.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 408 CVEs	before 6.4.0-150600.23.7.3	6.4.0-150600.23.7.3
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt` openSUSE:Leap Micro 5.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.33.75.1	5.14.21-150500.33.75.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.33.75.1	5.14.21-150500.33.75.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.33.75.1	5.14.21-150500.33.75.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1063.69~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 33 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.1	5.15.0-1063.69~20.04.1
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1065.74~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 36 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.1	5.15.0-1065.74~20.04.1
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1062.70~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 34 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.1	5.15.0-1062.70~20.04.1
`linux-gkeop-5.15` Ubuntu:20.04:LTS	before 5.15.0-1046.53~20.04.1, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 30 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.1	5.15.0-1046.53~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-113.123~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 34 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.1	5.15.0-113.123~20.04.1
`linux-ibm-5.15` Ubuntu:20.04:LTS	before 5.15.0-1057.60~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 15 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.1	5.15.0-1057.60~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1058.64~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 24 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.1	5.15.0-1058.64~20.04.1
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-110.120~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 33 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.1	5.15.0-110.120~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:20.04:LTS	before 5.15.0-1027.27~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 7 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.1	5.15.0-1027.27~20.04.1
`linux-oracle-5.15` Ubuntu:20.04:LTS	before 5.15.0-1061.67~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 32 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.1	5.15.0-1061.67~20.04.1
`linux-riscv-5.15` Ubuntu:20.04:LTS	before 5.15.0-1059.63~20.04.1, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 31 moreShow less 5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.1	5.15.0-1059.63~20.04.1
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:20.04:LTS	All versions, plus listed versions 5.4.0-1022.22+fips15.4.0-1073.76+fips15.4.0-1074.77+fips15.4.0-1076.79+fips15.4.0-1078.81+fips1 Show 45 moreShow less 5.4.0-1080.83+fips15.4.0-1083.87+fips15.4.0-1085.90+fips15.4.0-1086.91+fips15.4.0-1089.94+fips15.4.0-1090.95+fips15.4.0-1091.96+fips15.4.0-1094.100+fips15.4.0-1095.101+fips15.4.0-1098.104+fips15.4.0-1100.106+fips15.4.0-1101.107+fips15.4.0-1103.109+fips15.4.0-1104.110+fips15.4.0-1105.111+fips15.4.0-1106.112+fips15.4.0-1107.113+fips15.4.0-1108.114+fips15.4.0-1109.115+fips15.4.0-1110.116+fips15.4.0-1111.117+fips15.4.0-1112.118+fips15.4.0-1113.119+fips15.4.0-1114.120+fips15.4.0-1115.122+fips15.4.0-1116.123+fips15.4.0-1117.124+fips15.4.0-1118.125+fips15.4.0-1119.126+fips15.4.0-1121.128+fips15.4.0-1122.129+fips15.4.0-1123.130+fips15.4.0-1124.131+fips15.4.0-1126.133+fips15.4.0-1127.134+fips15.4.0-1128.135+fips15.4.0-1129.136+fips15.4.0-1130.137+fips15.4.0-1131.138+fips15.4.0-1132.139+fips15.4.0-1133.140+fips15.4.0-1134.141+fips15.4.0-1135.142+fips15.4.0-1136.143+fips15.4.0-1137.144+fips1	None known
`linux` Ubuntu:22.04:LTS	before 5.15.0-112.122, plus listed versions 5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23 Show 45 moreShow less 5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115	5.15.0-112.122

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26906 is a medium vulnerability (CVSS 5.5) in Debian Linux, published April 17, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in linux-lts 6.1.89-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 562 package rows, 159 versions, 6,747 references and the rest of 19 source descriptions. The JSON record has them.