Every CVE Search/ Get API key

CVE-2024-26908

In the Linux kernel, the following vulnerability has been resolved: x86/xen: Add some null...

5.5 MediumRejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

What each source reports

GitHub Advisories Score usedGHSA-pmq2-6662-x875 5.5

In the Linux kernel, the following vulnerability has been resolved: x86/xen: Add some null...

In the Linux kernel, the following vulnerability has been resolved:

x86/xen: Add some null pointer checking to smp.c

kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Ensure the allocation was successful by checking the pointer validity.

Record
GHSA-pmq2-6662-x875
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record
CVE-2024-26908
Updated
2026-11-02
EUVDEUVD-2024-24170 No score

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record
EUVD-2024-24170
Updated
2026-11-03
NVD No score

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record
CVE-2024-26908
Updated
2026-11-02
OSVOESA-2024-1647 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()

memcpy() is called in a loop while 'operation->length' upper bound is not checked and 'data_idx' also increments.(CVE-2022-48632)

In the Linux kernel, the following vulnerability has been resolved:

mm/slub: fix to return errno if kmalloc() fails

In create_unique_id(), kmalloc(, GFP_KERNEL) can fail due to out-of-memory, if it fails, return errno correctly rather than triggering panic via BUG_ON();

kernel BUG at mm/slub.c:5893! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP

Call trace: sysfs_slab_add+0x258/0x260 mm/slub.c:5973 __kmem_cache_create+0x60/0x118 mm/slub.c:4899 create_cache mm/slab_common.c:229 [inline] kmem_cache_create_usercopy+0x19c/0x31c mm/slab_common.c:335 kmem_cache_create+0x1c/0x28 mm/slab_common.c:390 f2fs_kmem_cache_create fs/f2fs/f2fs.h:2766 [inline] f2fs_init_xattr_caches+0x78/0xb4 fs/f2fs/xattr.c:808 f2fs_fill_super+0x1050/0x1e0c fs/f2fs/super.c:4149 mount_bdev+0x1b8/0x210 fs/super.c:1400 f2fs_mount+0x44/0x58 fs/f2fs/super.c:4512 legacy_get_tree+0x30/0x74 fs/fs_context.c:610 vfs_get_tree+0x40/0x140 fs/super.c:1530 do_new_mount+0x1dc/0x4e4 fs/namespace.c:3040 path_mount+0x358/0x914 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x2f8/0x408 fs/namespace.c:3568(CVE-2022-48659)

In the Linux kernel, the following vulnerability has been resolved:

gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

When running gpio test on nxp-ls1028 platform with below command gpiomon --num-events=3 --rising-edge gpiochip1 25 There will be a warning trace as below: Call trace: free_irq+0x204/0x360 lineevent_free+0x64/0x70 gpio_ioctl+0x598/0x6a0 __arm64_sys_ioctl+0xb4/0x100 invoke_syscall+0x5c/0x130 ...... el0t_64_sync+0x1a0/0x1a4 The reason of this issue is that calling request_threaded_irq() function failed, and then lineevent_free() is invoked to release the resource. Since the lineevent_state::irq was already set, so the subsequent invocation of free_irq() would trigger the above warning call trace. To fix this issue, set the lineevent_state::irq after the IRQ register successfully.(CVE-2022-48660)

In the Linux kernel, the following vulnerability has been resolved:

binder: fix race between mmput() and do_exit()

Task A calls binder_update_page_range() to allocate and insert pages on a remote address space from Task B. For this, Task A pins the remote mm via mmget_not_zero() first. This can race with Task B do_exit() and the final mmput() refcount decrement will come from Task A.

Task A | Task B ------------------+------------------ mmget_not_zero() | | do_exit() | exit_mm() | mmput() mmput() | exit_mmap() | remove_vma() | fput() |

In this case, the work of ____fput() from Task B is queued up in Task A as TWA_RESUME. So in theory, Task A returns to userspace and the cleanup work gets executed. However, Task A instead sleep, waiting for a reply from Task B that never comes (it's dead).

This means the binder_deferred_release() is blocked until an unrelated binder event forces Task A to go back to userspace. All the associated death notifications will also be delayed until then.

In order to fix this use mmput_async() that will schedule the work in the corresponding mm->async_put_work WQ instead of Task A.(CVE-2023-52609)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng…

Record
OESA-2024-1647
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1648 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

mm/slub: fix to return errno if kmalloc() fails

In create_unique_id(), kmalloc(, GFP_KERNEL) can fail due to out-of-memory, if it fails, return errno correctly rather than triggering panic via BUG_ON();

kernel BUG at mm/slub.c:5893! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP

Call trace: sysfs_slab_add+0x258/0x260 mm/slub.c:5973 __kmem_cache_create+0x60/0x118 mm/slub.c:4899 create_cache mm/slab_common.c:229 [inline] kmem_cache_create_usercopy+0x19c/0x31c mm/slab_common.c:335 kmem_cache_create+0x1c/0x28 mm/slab_common.c:390 f2fs_kmem_cache_create fs/f2fs/f2fs.h:2766 [inline] f2fs_init_xattr_caches+0x78/0xb4 fs/f2fs/xattr.c:808 f2fs_fill_super+0x1050/0x1e0c fs/f2fs/super.c:4149 mount_bdev+0x1b8/0x210 fs/super.c:1400 f2fs_mount+0x44/0x58 fs/f2fs/super.c:4512 legacy_get_tree+0x30/0x74 fs/fs_context.c:610 vfs_get_tree+0x40/0x140 fs/super.c:1530 do_new_mount+0x1dc/0x4e4 fs/namespace.c:3040 path_mount+0x358/0x914 fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x2f8/0x408 fs/namespace.c:3568(CVE-2022-48659)

In the Linux kernel, the following vulnerability has been resolved:

gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

When running gpio test on nxp-ls1028 platform with below command gpiomon --num-events=3 --rising-edge gpiochip1 25 There will be a warning trace as below: Call trace: free_irq+0x204/0x360 lineevent_free+0x64/0x70 gpio_ioctl+0x598/0x6a0 __arm64_sys_ioctl+0xb4/0x100 invoke_syscall+0x5c/0x130 ...... el0t_64_sync+0x1a0/0x1a4 The reason of this issue is that calling request_threaded_irq() function failed, and then lineevent_free() is invoked to release the resource. Since the lineevent_state::irq was already set, so the subsequent invocation of free_irq() would trigger the above warning call trace. To fix this issue, set the lineevent_state::irq after the IRQ register successfully.(CVE-2022-48660)

In the Linux kernel, the following vulnerability has been resolved:

binder: fix race between mmput() and do_exit()

Task A calls binder_update_page_range() to allocate and insert pages on a remote address space from Task B. For this, Task A pins the remote mm via mmget_not_zero() first. This can race with Task B do_exit() and the final mmput() refcount decrement will come from Task A.

Task A | Task B ------------------+------------------ mmget_not_zero() | | do_exit() | exit_mm() | mmput() mmput() | exit_mmap() | remove_vma() | fput() |

In this case, the work of ____fput() from Task B is queued up in Task A as TWA_RESUME. So in theory, Task A returns to userspace and the cleanup work gets executed. However, Task A instead sleep, waiting for a reply from Task B that never comes (it's dead).

This means the binder_deferred_release() is blocked until an unrelated binder event forces Task A to go back to userspace. All the associated death notifications will also be delayed until then.

In order to fix this use mmput_async() that will schedule the work in the corresponding mm->async_put_work WQ instead of Task A.(CVE-2023-52609)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.(CVE-2023-52615)

In the Linux kernel, the following vulnerability has been resolved:

crypto: lib/mpi - Fix unexpected…

Record
OESA-2024-1648
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 22 moreShow less
OSVOESA-2024-1649 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

binder: fix race between mmput() and do_exit()

Task A calls binder_update_page_range() to allocate and insert pages on a remote address space from Task B. For this, Task A pins the remote mm via mmget_not_zero() first. This can race with Task B do_exit() and the final mmput() refcount decrement will come from Task A.

Task A | Task B ------------------+------------------ mmget_not_zero() | | do_exit() | exit_mm() | mmput() mmput() | exit_mmap() | remove_vma() | fput() |

In this case, the work of ____fput() from Task B is queued up in Task A as TWA_RESUME. So in theory, Task A returns to userspace and the cleanup work gets executed. However, Task A instead sleep, waiting for a reply from Task B that never comes (it's dead).

This means the binder_deferred_release() is blocked until an unrelated binder event forces Task A to go back to userspace. All the associated death notifications will also be delayed until then.

In order to fix this use mmput_async() that will schedule the work in the corresponding mm->async_put_work WQ instead of Task A.(CVE-2023-52609)

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.(CVE-2023-52615)

In the Linux kernel, the following vulnerability has been resolved:

crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init

When the mpi_ec_ctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the structure was released. Initially, this issue was ignored because memory for mpi_ec_ctx is allocated with the __GFP_ZERO flag. For example, this error will be triggered when calculating the Za value for SM2 separately.(CVE-2023-52616)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers

These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program, otherwise the following warning will be reported when a sleepable bpf program manipulates bpf map under interpreter mode (aka bpf_jit_enable=0):

WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ...... CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:bpf_map_lookup_elem+0x54/0x60 ...... Call Trace: <TASK> ? __warn+0xa5/0x240 ? bpf_map_lookup_elem+0x54/0x60 ? report_bug+0x1ba/0x1f0 ? handle_bug+0x40/0x80 ? exc_invalid_op+0x18/0x50 ? asm_exc_invalid_op+0x1b/0x20 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ? rcu_lockdep_current_cpu_online+0x65/0xb0 ? rcu_is_watching+0x23/0x50 ? bpf_map_lookup_elem+0x54/0x60 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ___bpf_prog_run+0x513/0x3b70 __bpf_prog_run32+0x9d/0xd0 ? __bpf_prog_enter_sleepable_recur+0xad/0x120 ? __bpf_prog_enter_sleepable_recur+0x3e/0x120 bpf_trampoline_6442580665+0x4d/0x1000 __x64_sys_getpgid+0x5/0x30 ? do_syscall_64+0x36/0xb0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK>(CVE-2023-52621)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix a suspicious RCU usage warning

I received the following warning while running cthon against an ontap server running pNFS:

[ 57.202521] ============================= […

Record
OESA-2024-1649
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1650 7.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.(CVE-2023-52615)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers

These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program, otherwise the following warning will be reported when a sleepable bpf program manipulates bpf map under interpreter mode (aka bpf_jit_enable=0):

WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ...... CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:bpf_map_lookup_elem+0x54/0x60 ...... Call Trace: <TASK> ? __warn+0xa5/0x240 ? bpf_map_lookup_elem+0x54/0x60 ? report_bug+0x1ba/0x1f0 ? handle_bug+0x40/0x80 ? exc_invalid_op+0x18/0x50 ? asm_exc_invalid_op+0x1b/0x20 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ? rcu_lockdep_current_cpu_online+0x65/0xb0 ? rcu_is_watching+0x23/0x50 ? bpf_map_lookup_elem+0x54/0x60 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ___bpf_prog_run+0x513/0x3b70 __bpf_prog_run32+0x9d/0xd0 ? __bpf_prog_enter_sleepable_recur+0xad/0x120 ? __bpf_prog_enter_sleepable_recur+0x3e/0x120 bpf_trampoline_6442580665+0x4d/0x1000 __x64_sys_getpgid+0x5/0x30 ? do_syscall_64+0x36/0xb0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK>(CVE-2023-52621)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix a suspicious RCU usage warning

I received the following warning while running cthon against an ontap server running pNFS:

[ 57.202521] ============================= [ 57.202522] WARNING: suspicious RCU usage [ 57.202523] 6.7.0-rc3-g2cc14f52aeb7 #41492 Not tainted [ 57.202525] ----------------------------- [ 57.202525] net/sunrpc/xprtmultipath.c:349 RCU-list traversed in non-reader section!! [ 57.202527] other info that might help us debug this:

[ 57.202528] rcu_scheduler_active = 2, debug_locks = 1 [ 57.202529] no locks held by test5/3567. [ 57.202530] stack backtrace: [ 57.202532] CPU: 0 PID: 3567 Comm: test5 Not tainted 6.7.0-rc3-g2cc14f52aeb7 #41492 5b09971b4965c0aceba19f3eea324a4a806e227e [ 57.202534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS unknown 2/2/2022 [ 57.202536] Call Trace: [ 57.202537] <TASK> [ 57.202540] dump_stack_lvl+0x77/0xb0 [ 57.202551] lockdep_rcu_suspicious+0x154/0x1a0 [ 57.202556] rpc_xprt_switch_has_addr+0x17c/0x190 [sunrpc ebe02571b9a8ceebf7d98e71675af20c19bdb1f6] [ 57.202596] rpc_clnt_setup_test_and_add_xprt+0x50/0x180 [sunrpc ebe02571b9a8ceebf7d98e71675af20c19bdb1f6] [ 57.202621] ? rpc_clnt_add_xprt+0x254/0x300 [sunrpc ebe02571b9a8ceebf7d98e71675af20c19bdb1f6] [ 57.202646] rpc_clnt_add_xprt+0x27a/0x300 [sunrpc ebe02571b9a8ceebf7d98e71675af20c19bdb1f6] [ 57.202671] ? __pfx_rpc_clnt_setup_test_and_add_xprt+0x10/0x10 [sunrpc ebe02571b9a8ceebf7d98e71675af20c19bdb1f6] [ 57.202696] nfs4_pnfs_ds_connect+0x345/0x760 [nfsv4 c716d88496ded0ea6d289bbea684fa996f9b57a9] [ 57.202728] ? __pfx_nfs4_test_session_trunk+0x10/0x10 [nfsv4 c716d88496ded0ea6d289bbea684fa996f9b57a9] [ 57.202754] nfs4_fl_prepare_ds+0x75/0xc0 [nfs_layout_nfsv41_files e3a4187f18ae8a27b630f9feae6831b584a9360a] [ 57.202760] filelayout_write_pagelist+0x4a/0x200 [nfs_layout_nfsv41_files…

Record
OESA-2024-1650
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1651 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup

Fix Oops in dasd_alias_get_start_dev() function caused by the pavgroup pointer being NULL.

The pavgroup pointer is checked on the entrance of the function but without the lcu->lock being held. Therefore there is a race window between dasd_alias_get_start_dev() and _lcu_update() which sets pavgroup to NULL with the lcu->lock held.

Fix by checking the pavgroup pointer with lcu->lock held.(CVE-2022-48636)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix hang during unmount when stopping a space reclaim worker

Often when running generic/562 from fstests we can hang during unmount, resulting in a trace like this:

Sep 07 11:52:00 debian9 unknown: run fstests generic/562 at 2022-09-07 11:52:00 Sep 07 11:55:32 debian9 kernel: INFO: task umount:49438 blocked for more than 120 seconds. Sep 07 11:55:32 debian9 kernel: Not tainted 6.0.0-rc2-btrfs-next-122 #1 Sep 07 11:55:32 debian9 kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Sep 07 11:55:32 debian9 kernel: task:umount state:D stack: 0 pid:49438 ppid: 25683 flags:0x00004000 Sep 07 11:55:32 debian9 kernel: Call Trace: Sep 07 11:55:32 debian9 kernel: <TASK> Sep 07 11:55:32 debian9 kernel: __schedule+0x3c8/0xec0 Sep 07 11:55:32 debian9 kernel: ? rcu_read_lock_sched_held+0x12/0x70 Sep 07 11:55:32 debian9 kernel: schedule+0x5d/0xf0 Sep 07 11:55:32 debian9 kernel: schedule_timeout+0xf1/0x130 Sep 07 11:55:32 debian9 kernel: ? lock_release+0x224/0x4a0 Sep 07 11:55:32 debian9 kernel: ? lock_acquired+0x1a0/0x420 Sep 07 11:55:32 debian9 kernel: ? trace_hardirqs_on+0x2c/0xd0 Sep 07 11:55:32 debian9 kernel: __wait_for_common+0xac/0x200 Sep 07 11:55:32 debian9 kernel: ? usleep_range_state+0xb0/0xb0 Sep 07 11:55:32 debian9 kernel: __flush_work+0x26d/0x530 Sep 07 11:55:32 debian9 kernel: ? flush_workqueue_prep_pwqs+0x140/0x140 Sep 07 11:55:32 debian9 kernel: ? trace_clock_local+0xc/0x30 Sep 07 11:55:32 debian9 kernel: __cancel_work_timer+0x11f/0x1b0 Sep 07 11:55:32 debian9 kernel: ? close_ctree+0x12b/0x5b3 [btrfs] Sep 07 11:55:32 debian9 kernel: ? __trace_bputs+0x10b/0x170 Sep 07 11:55:32 debian9 kernel: close_ctree+0x152/0x5b3 [btrfs] Sep 07 11:55:32 debian9 kernel: ? evict_inodes+0x166/0x1c0 Sep 07 11:55:32 debian9 kernel: generic_shutdown_super+0x71/0x120 Sep 07 11:55:32 debian9 kernel: kill_anon_super+0x14/0x30 Sep 07 11:55:32 debian9 kernel: btrfs_kill_super+0x12/0x20 [btrfs] Sep 07 11:55:32 debian9 kernel: deactivate_locked_super+0x2e/0xa0 Sep 07 11:55:32 debian9 kernel: cleanup_mnt+0x100/0x160 Sep 07 11:55:32 debian9 kernel: task_work_run+0x59/0xa0 Sep 07 11:55:32 debian9 kernel: exit_to_user_mode_prepare+0x1a6/0x1b0 Sep 07 11:55:32 debian9 kernel: syscall_exit_to_user_mode+0x16/0x40 Sep 07 11:55:32 debian9 kernel: do_syscall_64+0x48/0x90 Sep 07 11:55:32 debian9 kernel: entry_SYSCALL_64_after_hwframe+0x63/0xcd Sep 07 11:55:32 debian9 kernel: RIP: 0033:0x7fcde59a57a7 Sep 07 11:55:32 debian9 kernel: RSP: 002b:00007ffe914217c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 Sep 07 11:55:32 debian9 kernel: RAX: 0000000000000000 RBX: 00007fcde5ae8264 RCX: 00007fcde59a57a7 Sep 07 11:55:32 debian9 kernel: RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055b57556cdd0 Sep 07 11:55:32 debian9 kernel: RBP: 000055b57556cba0 R08: 0000000000000000 R09: 00007ffe91420570 Sep 07 11:55:32 debian9 kernel: R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 Sep 07 11:55:32 debian9 kernel: R13: 000055b57556cdd0 R14: 000055b57556ccb8 R15: 0000000000000000 Sep 07 11:55:32 debian9 kernel: </TASK>

What happens is the following:

  1. The…
Record
OESA-2024-1651
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1652 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup

Fix Oops in dasd_alias_get_start_dev() function caused by the pavgroup pointer being NULL.

The pavgroup pointer is checked on the entrance of the function but without the lcu->lock being held. Therefore there is a race window between dasd_alias_get_start_dev() and _lcu_update() which sets pavgroup to NULL with the lcu->lock held.

Fix by checking the pavgroup pointer with lcu->lock held.(CVE-2022-48636)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix hang during unmount when stopping a space reclaim worker

Often when running generic/562 from fstests we can hang during unmount, resulting in a trace like this:

Sep 07 11:52:00 debian9 unknown: run fstests generic/562 at 2022-09-07 11:52:00 Sep 07 11:55:32 debian9 kernel: INFO: task umount:49438 blocked for more than 120 seconds. Sep 07 11:55:32 debian9 kernel: Not tainted 6.0.0-rc2-btrfs-next-122 #1 Sep 07 11:55:32 debian9 kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Sep 07 11:55:32 debian9 kernel: task:umount state:D stack: 0 pid:49438 ppid: 25683 flags:0x00004000 Sep 07 11:55:32 debian9 kernel: Call Trace: Sep 07 11:55:32 debian9 kernel: <TASK> Sep 07 11:55:32 debian9 kernel: __schedule+0x3c8/0xec0 Sep 07 11:55:32 debian9 kernel: ? rcu_read_lock_sched_held+0x12/0x70 Sep 07 11:55:32 debian9 kernel: schedule+0x5d/0xf0 Sep 07 11:55:32 debian9 kernel: schedule_timeout+0xf1/0x130 Sep 07 11:55:32 debian9 kernel: ? lock_release+0x224/0x4a0 Sep 07 11:55:32 debian9 kernel: ? lock_acquired+0x1a0/0x420 Sep 07 11:55:32 debian9 kernel: ? trace_hardirqs_on+0x2c/0xd0 Sep 07 11:55:32 debian9 kernel: __wait_for_common+0xac/0x200 Sep 07 11:55:32 debian9 kernel: ? usleep_range_state+0xb0/0xb0 Sep 07 11:55:32 debian9 kernel: __flush_work+0x26d/0x530 Sep 07 11:55:32 debian9 kernel: ? flush_workqueue_prep_pwqs+0x140/0x140 Sep 07 11:55:32 debian9 kernel: ? trace_clock_local+0xc/0x30 Sep 07 11:55:32 debian9 kernel: __cancel_work_timer+0x11f/0x1b0 Sep 07 11:55:32 debian9 kernel: ? close_ctree+0x12b/0x5b3 [btrfs] Sep 07 11:55:32 debian9 kernel: ? __trace_bputs+0x10b/0x170 Sep 07 11:55:32 debian9 kernel: close_ctree+0x152/0x5b3 [btrfs] Sep 07 11:55:32 debian9 kernel: ? evict_inodes+0x166/0x1c0 Sep 07 11:55:32 debian9 kernel: generic_shutdown_super+0x71/0x120 Sep 07 11:55:32 debian9 kernel: kill_anon_super+0x14/0x30 Sep 07 11:55:32 debian9 kernel: btrfs_kill_super+0x12/0x20 [btrfs] Sep 07 11:55:32 debian9 kernel: deactivate_locked_super+0x2e/0xa0 Sep 07 11:55:32 debian9 kernel: cleanup_mnt+0x100/0x160 Sep 07 11:55:32 debian9 kernel: task_work_run+0x59/0xa0 Sep 07 11:55:32 debian9 kernel: exit_to_user_mode_prepare+0x1a6/0x1b0 Sep 07 11:55:32 debian9 kernel: syscall_exit_to_user_mode+0x16/0x40 Sep 07 11:55:32 debian9 kernel: do_syscall_64+0x48/0x90 Sep 07 11:55:32 debian9 kernel: entry_SYSCALL_64_after_hwframe+0x63/0xcd Sep 07 11:55:32 debian9 kernel: RIP: 0033:0x7fcde59a57a7 Sep 07 11:55:32 debian9 kernel: RSP: 002b:00007ffe914217c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 Sep 07 11:55:32 debian9 kernel: RAX: 0000000000000000 RBX: 00007fcde5ae8264 RCX: 00007fcde59a57a7 Sep 07 11:55:32 debian9 kernel: RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055b57556cdd0 Sep 07 11:55:32 debian9 kernel: RBP: 000055b57556cba0 R08: 0000000000000000 R09: 00007ffe91420570 Sep 07 11:55:32 debian9 kernel: R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 Sep 07 11:55:32 debian9 kernel: R13: 000055b57556cdd0 R14: 000055b57556ccb8 R15: 0000000000000000 Sep 07 11:55:32 debian9 kernel: </TASK>

What happens is the following:

  1. The…
Record
OESA-2024-1652
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:4823 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:4823
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:4902 7.0

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:4902
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:5101 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:5101
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:5928 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:5928
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:6992 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:6992
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:6993 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:6993
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:7002 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:7002
CVSS 3.1
7.1 HighCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-26908 5.5

** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Record
UBUNTU-CVE-2024-26908
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
  • (CVE-2023-28746)
  • (CVE-2023-52847)
  • (CVE-2021-47548)
  • (CVE-2024-36921)
  • (CVE-2024-26921)
  • (CVE-2021-47579)
  • (CVE-2024-36927)
  • (CVE-2024-39276)
  • (CVE-2024-33621)
  • (CVE-2024-27010)
  • (CVE-2024-26960)
  • (CVE-2024-38596)
  • (CVE-2022-48743)
  • (CVE-2024-26733)
  • (CVE-2024-26586)
  • (CVE-2024-26698)
  • (CVE-2023-52619)

Bug Fix(es):

  • AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
  • [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
  • [almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
  • lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
  • [Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
  • Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
  • blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
  • (JIRA:AlmaLinux-31798)
  • (JIRA:AlmaLinux-10263)
  • (JIRA:AlmaLinux-40901)
  • (JIRA:AlmaLinux-43547)
  • (JIRA:AlmaLinux-34876)

Enhancement(s):

  • [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:AlmaLinux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
ALSA-2024:5101
Updated
2026-11-02
OSVALSA-2024:5928 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: nftables: nft_set_rbtree skip end interval element from gc (CVE-2024-26581)
  • kernel: netfilter: nft_limit: reject configurations that cause integer overflow (CVE-2024-26668)
  • kernel: vfio/pci: Lock external INTx masking ops (CVE-2024-26810)
  • kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CVE-2024-26855)
  • kernel: x86/xen: Add some null pointer checking to smp.c (CVE-2024-26908)
  • kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925)
  • kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020)
  • kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019)
  • kernel: netfilter: flowtable: validate pppoe header (CVE-2024-27016)
  • kernel: netfilter: bridge: confirm multicast packets before passing them up the stack (CVE-2024-27415)
  • kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info (CVE-2024-35839)
  • kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898)
  • kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion (CVE-2024-35897)
  • kernel: netfilter: validate user input for expected length (CVE-2024-35896)
  • kernel: netfilter: complete validation of user input (CVE-2024-35962)
  • kernel: ice: fix LAG and VF lock dependency in ice_reset_vf() (CVE-2024-36003)
  • kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race (CVE-2023-52771)
  • kernel: tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (CVE-2023-52880)
  • kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (CVE-2024-36025)
  • kernel: net/mlx5e: Fix netif state handling (CVE-2024-38608)
  • kernel: crypto: bcm - Fix pointer arithmetic (CVE-2024-38579)
  • kernel: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (CVE-2024-38544)
  • kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (CVE-2024-38540)
  • kernel: net: bridge: xmit: make sure we have at least eth header len bytes (CVE-2024-38538)
  • kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (CVE-2024-39476)
  • kernel: ipv6: fix possible race in __fib6_drop_pcpu_from() (CVE-2024-40905)
  • kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station (CVE-2024-40911)
  • kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CVE-2024-40912)
  • kernel: mm/huge_memory: don't unpoison huge_zero_folio (CVE-2024-40914)
  • kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CVE-2024-40929)
  • kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (CVE-2024-40939)
  • kernel: wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CVE-2024-40941)
  • kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (CVE-2024-40957)
  • kernel: scsi: qedi: Fix crash while reading debugfs attribute (CVE-2024-40978)
  • kernel: tipc: force a dst refcount before doing decryption (CVE-2024-40983)
  • kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090)
  • kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091)
  • kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (CVE-2024-41041)
  • kernel: NFSv4: Fix memory leak in nfs4_set_security_label (CVE-2024-41076)
  • kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CVE-2024-42110)
  • kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment (CVE-2024-42152)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:5928
Updated
2026-11-02
OSVCLSA-2024-1716269479 No score

Fix of 42 CVEs

Record
CLSA-2024-1716269479
Updated
2026-11-02
OSVCLSA-2024-1716269925 No score

Fix of 42 CVEs

Record
CLSA-2024-1716269925
Updated
2026-11-02
OSVCLSA-2024-1716270232 No score

Fix of 48 CVEs

Record
CLSA-2024-1716270232
Updated
2026-11-02
OSVCLSA-2024-1716270655 No score

Fix of 48 CVEs

Record
CLSA-2024-1716270655
Updated
2026-11-02
OSVCLSA-2024-1716270851 No score

Fix of 48 CVEs

[ Ubuntu: 4.15.0-228.239 ]

Record
CLSA-2024-1716270851
Updated
2026-11-02
OSVCLSA-2024-1719231016 No score

kernel: Fix of 52 CVEs

  • net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882}
  • tls: fix use-after-free on failed backlog decryption {CVE-2024-26800}
  • tls: separate no-async decryption request handling from async {CVE-2024-26584}
  • tls: decrement decrypt_pending if no async completion will be called {CVE-2024-26584}
  • net: tls: fix use-after-free with partial reads and async decrypt {CVE-2024-26582}
  • net: tls: handle backlogging of crypto requests {CVE-2024-26584}
  • net: tls: factor out tls_*crypt_async_wait()
  • tap: tap_open(): correctly initialize socket uid {CVE-2023-1076}
  • tun: tun_chr_open(): correctly initialize socket uid {CVE-2023-1076}
  • net: add sock_init_data_uid() {CVE-2023-1076}
  • netfilter: nf_tables: bail out on mismatching dynset and set expressions {CVE-2023-6622}
  • drm/qxl: fix UAF on handle creation {CVE-2023-39198}
  • smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
  • USB: core: Fix deadlock in port "disable" sysfs attribute {CVE-2024-26933}
  • USB: core: Add hub_get() and hub_put() routines {CVE-2024-26933}
  • USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934}
  • scsi: qla2xxx: Fix double free of fcport {CVE-2024-26929}
  • netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020}
  • net: ip_tunnel: prevent perpetual headroom growth {CVE-2024-26804}
  • netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout {CVE-2024-26643}
  • netfilter: nf_tables: disallow anonymous set with timeout flag {CVE-2024-26642}
  • netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations {CVE-2024-26673}
  • ipv6: sr: fix possible use-after-free and null-ptr-deref {CVE-2024-26735}
  • fs: sysfs: Fix reference leak in sysfs_break_active_protection() {CVE-2024-26993}
  • cifs: fix underflow in parse_server_interfaces() {CVE-2024-26828}
  • mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path {CVE-2024-26595}
  • mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code {CVE-2024-26595}
  • mlxsw: spectrum_acl_tcam: Make fini symmetric to init {CVE-2024-26595}
  • mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() {CVE-2024-26595}
  • net: xfrm: Fix xfrm_address_filter OOB read {CVE-2023-39194}
  • exfat: check if filename entries exceeds max filename length {CVE-2023-4273}
  • xfrm: add NULL check in xfrm_update_ae_params {CVE-2023-3772}
  • firmware: arm_scmi: Harden accesses to the reset domains {CVE-2022-48655}
  • tcp: Reduce chance of collisions in inet6_hashfn(). {CVE-2023-1206}
  • ipv4: fix null-deref in ipv4_link_failure {CVE-2023-42754}
  • netfilter: nfnetlink_osf: avoid OOB read {CVE-2023-39189}
  • netfilter: xt_sctp: validate the flag_info count {CVE-2023-39193}
  • net: qcom/emac: Fix use after free bug in emac_remove due to race condition {CVE-2023-33203}
  • net/tls: tls_is_tx_ready() checked list_entry {CVE-2023-1075}
  • HID: asus: use spinlock to safely schedule workers {CVE-2023-1079}
  • HID: asus: use spinlock to protect concurrent accesses {CVE-2023-1079}
  • HID: intel_ish-hid: Add check for ishtp_dma_tx_map {CVE-2023-3358}
  • gfs2: Don't deref jdesc in evict {CVE-2023-3212}
  • fbcon: Check font dimension limits {CVE-2023-3161}
  • KVM: nVMX: add missing consistency checks for CR0 and CR4 {CVE-2023-30456}
  • hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition {CVE-2023-1855}
  • Bluetooth: HCI: Fix global-out-of-bounds {CVE-2023-28866}
  • HID: check empty report_list in hid_validate_values() {CVE-2023-1073}
  • net: mpls: fix stale pointer if allocation fails during device rename {CVE-2023-26545}
  • r8152: Rate limit overflow messages {CVE-2022-3594}
  • drm/vmwgfx: Fix shader stage validation {CVE-2022-36402}
  • Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895}
  • dm ioctl: fix nested locking in table_clear() to remove deadlock concern {CVE-2023-2269}
  • mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() {CVE-2023-52562} -…
Record
CLSA-2024-1719231016
Updated
2026-11-02
OSVRLSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)

  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)

  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)

  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)

  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)

  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)

  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)

  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)

  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)

  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)

  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)

  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)

  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)

  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)

  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)

  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)

  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)

  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)

  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)

  • (CVE-2023-28746)

  • (CVE-2023-52847)

  • (CVE-2021-47548)

  • (CVE-2024-36921)

  • (CVE-2024-26921)

  • (CVE-2021-47579)

  • (CVE-2024-36927)

  • (CVE-2024-39276)

  • (CVE-2024-33621)

  • (CVE-2024-27010)

  • (CVE-2024-26960)

  • (CVE-2024-38596)

  • (CVE-2022-48743)

  • (CVE-2024-26733)

  • (CVE-2024-26586)

  • (CVE-2024-26698)

  • (CVE-2023-52619)

Bug Fix(es):

  • Rocky Linux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux-17678)

  • [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux-23841)

  • [rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux-32941)

  • lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux-33437)

  • [Hyper-V][Rocky Linux-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux-39074)

  • Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux-40167)

  • blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux-40939)

  • (JIRA:Rocky Linux-31798)

  • (JIRA:Rocky Linux-10263)

  • (JIRA:Rocky Linux-40901)

  • (JIRA:Rocky Linux-43547)

  • (JIRA:Rocky Linux-34876)

Enhancement(s):

  • [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
RLSA-2024:5101
Updated
2026-11-02
OSVRXSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)

  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)

  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)

  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)

  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)

  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)

  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)

  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)

  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)

  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)

  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)

  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)

  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)

  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)

  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)

  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)

  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)

  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)

  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)

  • (CVE-2023-28746)

  • (CVE-2023-52847)

  • (CVE-2021-47548)

  • (CVE-2024-36921)

  • (CVE-2024-26921)

  • (CVE-2021-47579)

  • (CVE-2024-36927)

  • (CVE-2024-39276)

  • (CVE-2024-33621)

  • (CVE-2024-27010)

  • (CVE-2024-26960)

  • (CVE-2024-38596)

  • (CVE-2022-48743)

  • (CVE-2024-26733)

  • (CVE-2024-26586)

  • (CVE-2024-26698)

  • (CVE-2023-52619)

Bug Fix(es):

  • Rocky Linux SIG Cloud8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux SIG Cloud-17678)

  • [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux SIG Cloud-23841)

  • [rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux SIG Cloud-32941)

  • lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux SIG Cloud-33437)

  • [Hyper-V][Rocky Linux SIG Cloud-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux SIG Cloud-39074)

  • Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux SIG Cloud-40167)

  • blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-40939)

  • (JIRA:Rocky Linux SIG Cloud-31798)

  • (JIRA:Rocky Linux SIG Cloud-10263)

  • (JIRA:Rocky Linux SIG Cloud-40901)

  • (JIRA:Rocky Linux SIG Cloud-43547)

  • (JIRA:Rocky Linux SIG Cloud-34876)

Enhancement(s):

  • [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux SIG Cloud-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
RXSA-2024:5101
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
perf
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
bpftool
AlmaLinux:9
From an advisory covering 41 CVEs
 before 7.3.0-427.33.1.el9_4
7.3.0-427.33.1.el9_4
kernel
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-debug
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-devel
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-modules
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-cross-headers
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-debug
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-debug-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-debug-devel
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-debug-modules
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-devel
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-devel-matched
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-doc
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-headers
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-modules
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-modules-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-modules-extra
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt-debug
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt-devel
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt-modules
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt-modules-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-rt-modules-extra
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-tools
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-tools-libs
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-tools-libs-devel
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-uki-virt
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-zfcpdump
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-zfcpdump-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-zfcpdump-devel
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-zfcpdump-devel-matched
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-zfcpdump-modules
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-zfcpdump-modules-core
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
kernel-zfcpdump-modules-extra
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
libperf
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
perf
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
python3-perf
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
rtla
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
rv
AlmaLinux:9
From an advisory covering 41 CVEs
 before 5.14.0-427.33.1.el9_4
5.14.0-427.33.1.el9_4
linux-buildinfo-4.4.0-256-tuxcare.els27-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-buildinfo-4.4.0-256-tuxcare.els27-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-cloud-tools-4.4.0-256-tuxcare.els27
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-cloud-tools-4.4.0-256-tuxcare.els27-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-cloud-tools-4.4.0-256-tuxcare.els27-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-cloud-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-cloud-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-crashdump
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-doc
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-headers-4.4.0-256-tuxcare.els27
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-headers-4.4.0-256-tuxcare.els27-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-headers-4.4.0-256-tuxcare.els27-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-headers-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-headers-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-image-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-image-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-image-unsigned-4.4.0-256-tuxcare.els27-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-image-unsigned-4.4.0-256-tuxcare.els27-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-libc-dev
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-modules-4.4.0-256-tuxcare.els27-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-modules-4.4.0-256-tuxcare.els27-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-modules-extra-4.4.0-256-tuxcare.els27-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-source
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-source-4.4.0
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-tools-4.4.0-256-tuxcare.els27
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-tools-4.4.0-256-tuxcare.els27-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-tools-4.4.0-256-tuxcare.els27-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-tools-host
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0-256.290
4.4.0-256.290
linux-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 42 CVEs
 before 4.4.0.256.290
4.4.0.256.290
linux-buildinfo-4.15.0-228-tuxcare.els16-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-buildinfo-4.15.0-228-tuxcare.els16-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-cloud-tools-4.15.0-228-tuxcare.els16
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-cloud-tools-4.15.0-228-tuxcare.els16-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-cloud-tools-4.15.0-228-tuxcare.els16-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-cloud-tools-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-crashdump
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-headers-4.15.0-228-tuxcare.els16
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-headers-4.15.0-228-tuxcare.els16-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-headers-4.15.0-228-tuxcare.els16-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-headers-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-headers-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-image-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-image-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-image-unsigned-4.15.0-228-tuxcare.els16-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-image-unsigned-4.15.0-228-tuxcare.els16-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-modules-4.15.0-228-tuxcare.els16-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-modules-4.15.0-228-tuxcare.els16-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-modules-extra-4.15.0-228-tuxcare.els16-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-source
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-tools-4.15.0-228-tuxcare.els16
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-tools-4.15.0-228-tuxcare.els16-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-tools-4.15.0-228-tuxcare.els16-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-tools-generic
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-tools-host
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239
4.15.0-228.239
linux-tools-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 48 CVEs
 before 4.15.0.228.239
4.15.0.228.239
linux-buildinfo-4.15.0-228-tuxcare.els26-generic
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-buildinfo-4.15.0-228-tuxcare.els26-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-cloud-tools-4.15.0-228-tuxcare.els26-generic
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-cloud-tools-4.15.0-228-tuxcare.els26-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-headers-4.15.0-228-tuxcare.els26
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-headers-4.15.0-228-tuxcare.els26-generic
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-headers-4.15.0-228-tuxcare.els26-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-hwe-cloud-tools-4.15.0-228-tuxcare.els26
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-hwe-tools-4.15.0-228-tuxcare.els26
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-image-unsigned-4.15.0-228-tuxcare.els26-generic
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-image-unsigned-4.15.0-228-tuxcare.els26-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-modules-4.15.0-228-tuxcare.els26-generic
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-modules-4.15.0-228-tuxcare.els26-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-modules-extra-4.15.0-228-tuxcare.els26-generic
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-source-4.15.0
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-tools-4.15.0-228-tuxcare.els26-generic
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
linux-tools-4.15.0-228-tuxcare.els26-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 48 CVEs
 before 4.15.0-228.239~16.04.1
4.15.0-228.239~16.04.1
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 7.0.0-284.30.1.el9_2.tuxcare.els4
7.0.0-284.30.1.el9_2.tuxcare.els4
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 52 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els4
5.14.0-284.30.1.el9_2.tuxcare.els4
kernel
openEuler:22.03-LTS
From an advisory covering 76 CVEs
 before 5.10.0-60.138.0.165.oe2203
5.10.0-60.138.0.165.oe2203
kernel
openEuler:22.03-LTS-SP1
From an advisory covering 71 CVEs
 before 5.10.0-136.76.0.156.oe2203sp1
5.10.0-136.76.0.156.oe2203sp1
kernel
openEuler:22.03-LTS-SP2
From an advisory covering 64 CVEs
 before 5.10.0-153.55.0.133.oe2203sp2
5.10.0-153.55.0.133.oe2203sp2
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 35 CVEs
 before 5.10.0-200.0.0.113.oe2203sp3
5.10.0-200.0.0.113.oe2203sp3
kernel
openEuler:20.03-LTS-SP1
From an advisory covering 17 CVEs
 before 4.19.90-2405.4.0.0250.oe1
4.19.90-2405.4.0.0250.oe1
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 15 CVEs
 before 4.19.90-2405.4.0.0277.oe2003sp4
4.19.90-2405.4.0.0277.oe2003sp4
bpftool-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:7.0.0-284.75.1.el9_2
0:7.0.0-284.75.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-tools-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
perf
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
perf-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
python3-perf-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
rtla
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
bpftool
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:7.0.0-284.75.1.el9_2
0:7.0.0-284.75.1.el9_2
bpftool-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:7.0.0-284.75.1.el9_2
0:7.0.0-284.75.1.el9_2
kernel
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-abi-stablelists
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-uki-virt
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-tools
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-tools-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-tools-libs
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-uki-virt
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
perf-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
python3-perf
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
python3-perf-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
bpftool-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:7.0.0-284.75.1.el9_2
0:7.0.0-284.75.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-tools-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-tools-libs-devel
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
perf-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
python3-perf-debuginfo
Red Hat:rhel_eus:9.2::crb
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-doc
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
bpftool
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
bpftool-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-abi-stablelists
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-core
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-debug
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-debug-core
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-debug-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-debug-devel
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-debug-modules
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-debug-modules-extra
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-debuginfo-common-x86_64
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-devel
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-doc
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-modules
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel-modules-extra
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 13 CVEs
 before 0:4.18.0-372.113.1.el8_6
0:4.18.0-372.113.1.el8_6
kernel
Rocky Linux:8
From an advisory covering 160 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel
Rocky Linux:8
From an advisory covering 160 CVEs
 before 0:4.18.0-553.16.1.el8_10.cloud.0.1
0:4.18.0-553.16.1.el8_10.cloud.0.1

History

History
RecordedChangedSources
affected, facts
affected
aliases, products, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26908 has been rejected by its source and should not be treated as a live vulnerability, published April 17, 2024.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 404 package rows, 1,368 references and the rest of 12 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open