Every CVE Search/ Get API key

CVE-2024-26923

af_unix: Fix garbage collector racing against connect()

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Fix garbage collector racing against connect()

Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM_RIGHTS, two consecutive passes of scan_children() may see a different set of children. Leading to an incorrectly elevated inflight count, and then a dangling pointer within the gc_inflight_list.

sockets are AF_UNIX/SOCK_STREAM S is an unconnected socket L is a listening in-flight socket bound to addr, not in fdtable V's fd will be passed via sendmsg(), gets inflight count bumped

connect(S, addr) sendmsg(S, [V]); close(V) __unix_gc()

NS = unix_create1() skb1 = sock_wmalloc(NS) L = unix_find_other(addr) unix_state_lock(L) unix_peer(S) = NS // V count=1 inflight=0

		NS = unix_peer(S)
		skb2 = sock_alloc()
		skb_queue_tail(NS, skb2[V])

		// V became in-flight
		// V count=2 inflight=1

		close(V)

		// V count=1 inflight=1
		// GC candidate condition met

					for u in gc_inflight_list:
					  if (total_refs == inflight_refs)
					    add u to gc_candidates

					// gc_candidates={L, V}

					for u in gc_candidates:
					  scan_children(u, dec_inflight)

					// embryo (skb1) was not
					// reachable from L yet, so V's
					// inflight remains unchanged

__skb_queue_tail(L, skb1) unix_state_unlock(L) for u in gc_candidates: if (u.inflight) scan_children(u, inc_inflight_move_tail)

					// V count=1 inflight=2 (!)

If there is a GC-candidate listening socket, lock/unlock its state. This makes GC wait until the end of any ongoing connect() to that socket. After flipping the lock, a possibly SCM-laden embryo is already enqueued. And if there is another embryo coming, it can not possibly carry SCM_RIGHTS. At this point, unix_inflight() can not happen because unix_gc_lock is already taken. Inflight graph remains unaffected.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.21%Up 0.2 points since Apr 25, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.8

af_unix: Fix garbage collector racing against connect()

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Fix garbage collector racing against connect()

Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM_RIGHTS, two consecutive passes of scan_children() may see a different set of children. Leading to an incorrectly elevated inflight count, and then a dangling pointer within the gc_inflight_list.

sockets are AF_UNIX/SOCK_STREAM S is an unconnected socket L is a listening in-flight socket bound to addr, not in fdtable V's fd will be passed via sendmsg(), gets inflight count bumped

connect(S, addr) sendmsg(S, [V]); close(V) __unix_gc()

NS = unix_create1() skb1 = sock_wmalloc(NS) L = unix_find_other(addr) unix_state_lock(L) unix_peer(S) = NS // V count=1 inflight=0

		NS = unix_peer(S)
		skb2 = sock_alloc()
		skb_queue_tail(NS, skb2[V])

		// V became in-flight
		// V count=2 inflight=1

		close(V)

		// V count=1 inflight=1
		// GC candidate condition met

					for u in gc_inflight_list:
					  if (total_refs == inflight_refs)
					    add u to gc_candidates

					// gc_candidates={L, V}

					for u in gc_candidates:
					  scan_children(u, dec_inflight)

					// embryo (skb1) was not
					// reachable from L yet, so V's
					// inflight remains unchanged

__skb_queue_tail(L, skb1) unix_state_unlock(L) for u in gc_candidates: if (u.inflight) scan_children(u, inc_inflight_move_tail)

					// V count=1 inflight=2 (!)

If there is a GC-candidate listening socket, lock/unlock its state. This makes GC wait until the end of any ongoing connect() to that socket. After flipping the lock, a possibly SCM-laden embryo is already enqueued. And if there is another embryo coming, it can not possibly carry SCM_RIGHTS. At this point, unix_inflight() can not happen because unix_gc_lock is already taken. Inflight graph remains unaffected.

Record
CVE-2024-26923
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
EUVDEUVD-2024-24185 7.8

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Fix garbage collector racing against connect()

Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM_RIGHTS, two consecutive passes of scan_children() may see a different set of children. Leading to an incorrectly elevated inflight count, and then a dangling pointer within the gc_inflight_list.

sockets are AF_UNIX/SOCK_STREAM S is an unconnected socket L is a listening in-flight socket bound to addr, not in fdtable V's fd will be passed via sendmsg(), gets inflight count bumped

connect(S, addr) sendmsg(S, [V]); close(V) __unix_gc()

NS = unix_create1() skb1 = sock_wmalloc(NS) L = unix_find_other(addr) unix_state_lock(L) unix_peer(S) = NS // V count=1 inflight=0

		NS = unix_peer(S)
		skb2 = sock_alloc()
		skb_queue_tail(NS, skb2[V])

		// V became in-flight
		// V count=2 inflight=1

		close(V)

		// V count=1 inflight=1
		// GC candidate condition met

					for u in gc_inflight_list:
					  if (total_refs == inflight_refs)
					    add u to gc_candidates

					// gc_candidates={L, V}

					for u in gc_candidates:
					  scan_children(u, dec_inflight)

					// embryo (skb1) was not
					// reachable from L yet, so V's
					// inflight remains unchanged

__skb_queue_tail(L, skb1) unix_state_unlock(L) for u in gc_candidates: if (u.inflight) scan_children(u, inc_inflight_move_tail)

					// V count=1 inflight=2 (!)

If there is a GC-candidate listening socket, lock/unlock its state. This makes GC wait until the end of any ongoing connect() to that socket. After flipping the lock, a possibly SCM-laden embryo is already enqueued. And if there is another embryo coming, it can not possibly carry SCM_RIGHTS. At this point, unix_inflight() can not happen because unix_gc_lock is already taken. Inflight graph remains unaffected.

Record
EUVD-2024-24185
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-8f6m-26fj-7fm5 4.7

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage...

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Fix garbage collector racing against connect()

Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM_RIGHTS, two consecutive passes of scan_children() may see a different set of children. Leading to an incorrectly elevated inflight count, and then a dangling pointer within the gc_inflight_list.

sockets are AF_UNIX/SOCK_STREAM S is an unconnected socket L is a listening in-flight socket bound to addr, not in fdtable V's fd will be passed via sendmsg(), gets inflight count bumped

connect(S, addr) sendmsg(S, [V]); close(V) __unix_gc()

NS = unix_create1() skb1 = sock_wmalloc(NS) L = unix_find_other(addr) unix_state_lock(L) unix_peer(S) = NS // V count=1 inflight=0

		NS = unix_peer(S)
		skb2 = sock_alloc()
		skb_queue_tail(NS, skb2[V])

		// V became in-flight
		// V count=2 inflight=1

		close(V)

		// V count=1 inflight=1
		// GC candidate condition met

					for u in gc_inflight_list:
					  if (total_refs == inflight_refs)
					    add u to gc_candidates

					// gc_candidates={L, V}

					for u in gc_candidates:
					  scan_children(u, dec_inflight)

					// embryo (skb1) was not
					// reachable from L yet, so V's
					// inflight remains unchanged

__skb_queue_tail(L, skb1) unix_state_unlock(L) for u in gc_candidates: if (u.inflight) scan_children(u, inc_inflight_move_tail)

					// V count=1 inflight=2 (!)

If there is a GC-candidate listening socket, lock/unlock its state. This makes GC wait until the end of any ongoing connect() to that socket. After flipping the lock, a possibly SCM-laden embryo is already enqueued. And if there is another embryo coming, it can not possibly carry SCM_RIGHTS. At this point, unix_inflight() can not happen because unix_gc_lock is already taken. Inflight graph remains unaffected.

Record
GHSA-8f6m-26fj-7fm5
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-362
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Fix garbage collector racing against connect()

Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM_RIGHTS, two consecutive passes of scan_children() may see a different set of children. Leading to an incorrectly elevated inflight count, and then a dangling pointer within the gc_inflight_list.

sockets are AF_UNIX/SOCK_STREAM S is an unconnected socket L is a listening in-flight socket bound to addr, not in fdtable V's fd will be passed via sendmsg(), gets inflight count bumped

connect(S, addr) sendmsg(S, [V]); close(V) __unix_gc()

NS = unix_create1() skb1 = sock_wmalloc(NS) L = unix_find_other(addr) unix_state_lock(L) unix_peer(S) = NS // V count=1 inflight=0

		NS = unix_peer(S)
		skb2 = sock_alloc()
		skb_queue_tail(NS, skb2[V])

		// V became in-flight
		// V count=2 inflight=1

		close(V)

		// V count=1 inflight=1
		// GC candidate condition met

					for u in gc_inflight_list:
					  if (total_refs == inflight_refs)
					    add u to gc_candidates

					// gc_candidates={L, V}

					for u in gc_candidates:
					  scan_children(u, dec_inflight)

					// embryo (skb1) was not
					// reachable from L yet, so V's
					// inflight remains unchanged

__skb_queue_tail(L, skb1) unix_state_unlock(L) for u in gc_candidates: if (u.inflight) scan_children(u, inc_inflight_move_tail)

					// V count=1 inflight=2 (!)

If there is a GC-candidate listening socket, lock/unlock its state. This makes GC wait until the end of any ongoing connect() to that socket. After flipping the lock, a possibly SCM-laden embryo is already enqueued. And if there is another embryo coming, it can not possibly carry SCM_RIGHTS. At this point, unix_inflight() can not happen because unix_gc_lock is already taken. Inflight graph remains unaffected.

Record
CVE-2024-26923
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-362
Updated
2026-11-04
OSVBELL-CVE-2024-26923 4.7
Record
BELL-CVE-2024-26923
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.8

af_unix: Fix garbage collector racing against connect()

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Fix garbage collector racing against connect()

Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM_RIGHTS, two consecutive passes of scan_children() may see a different set of children. Leading to an incorrectly elevated inflight count, and then a dangling pointer within the gc_inflight_list.

sockets are AF_UNIX/SOCK_STREAM S is an unconnected socket L is a listening in-flight socket bound to addr, not in fdtable V's fd will be passed via sendmsg(), gets inflight count bumped

connect(S, addr) sendmsg(S, [V]); close(V) __unix_gc()

NS = unix_create1() skb1 = sock_wmalloc(NS) L = unix_find_other(addr) unix_state_lock(L) unix_peer(S) = NS // V count=1 inflight=0

		NS = unix_peer(S)
		skb2 = sock_alloc()
		skb_queue_tail(NS, skb2[V])

		// V became in-flight
		// V count=2 inflight=1

		close(V)

		// V count=1 inflight=1
		// GC candidate condition met

					for u in gc_inflight_list:
					  if (total_refs == inflight_refs)
					    add u to gc_candidates

					// gc_candidates={L, V}

					for u in gc_candidates:
					  scan_children(u, dec_inflight)

					// embryo (skb1) was not
					// reachable from L yet, so V's
					// inflight remains unchanged

__skb_queue_tail(L, skb1) unix_state_unlock(L) for u in gc_candidates: if (u.inflight) scan_children(u, inc_inflight_move_tail)

					// V count=1 inflight=2 (!)

If there is a GC-candidate listening socket, lock/unlock its state. This makes GC wait until the end of any ongoing connect() to that socket. After flipping the lock, a possibly SCM-laden embryo is already enqueued. And if there is another embryo coming, it can not possibly carry SCM_RIGHTS. At this point, unix_inflight() can not happen because unix_gc_lock is already taken. Inflight graph remains unaffected.

Record
CVE-2024-26923
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-07
Show 44 moreShow less
OSVDEBIAN-CVE-2024-26923 4.7

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM_RIGHTS, two consecutive passes of scan_children() may see a different set of children. Leading to an incorrectly elevated inflight count, and then a dangling pointer within the gc_inflight_list. sockets are AF_UNIX/SOCK_STREAM S is an unconnected socket L is a listening in-flight socket bound to addr, not in fdtable V's fd will be passed via sendmsg(), gets inflight count bumped connect(S, addr) sendmsg(S, [V]); close(V) __unix_gc() ---------------- ------------------------- ----------- NS = unix_create1() skb1 = sock_wmalloc(NS) L = unix_find_other(addr) unix_state_lock(L) unix_peer(S) = NS // V count=1 inflight=0 NS = unix_peer(S) skb2 = sock_alloc() skb_queue_tail(NS, skb2[V]) // V became in-flight // V count=2 inflight=1 close(V) // V count=1 inflight=1 // GC candidate condition met for u in gc_inflight_list: if (total_refs == inflight_refs) add u to gc_candidates // gc_candidates={L, V} for u in gc_candidates: scan_children(u, dec_inflight) // embryo (skb1) was not // reachable from L yet, so V's // inflight remains unchanged __skb_queue_tail(L, skb1) unix_state_unlock(L) for u in gc_candidates: if (u.inflight) scan_children(u, inc_inflight_move_tail) // V count=1 inflight=2 (!) If there is a GC-candidate listening socket, lock/unlock its state. This makes GC wait until the end of any ongoing connect() to that socket. After flipping the lock, a possibly SCM-laden embryo is already enqueued. And if there is another embryo coming, it can not possibly carry SCM_RIGHTS. At this point, unix_inflight() can not happen because unix_gc_lock is already taken. Inflight graph remains unaffected.

Record
DEBIAN-CVE-2024-26923
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-04
OSVOESA-2024-1650 7.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.(CVE-2023-52615)

In the Linux kernel, the following vulnerability has been resolved:

bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers

These three bpf_map_{lookup,update,delete}_elem() helpers are also available for sleepable bpf program, so add the corresponding lock assertion for sleepable bpf program, otherwise the following warning will be reported when a sleepable bpf program manipulates bpf map under interpreter mode (aka bpf_jit_enable=0):

WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ...... CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ...... RIP: 0010:bpf_map_lookup_elem+0x54/0x60 ...... Call Trace: <TASK> ? __warn+0xa5/0x240 ? bpf_map_lookup_elem+0x54/0x60 ? report_bug+0x1ba/0x1f0 ? handle_bug+0x40/0x80 ? exc_invalid_op+0x18/0x50 ? asm_exc_invalid_op+0x1b/0x20 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ? rcu_lockdep_current_cpu_online+0x65/0xb0 ? rcu_is_watching+0x23/0x50 ? bpf_map_lookup_elem+0x54/0x60 ? __pfx_bpf_map_lookup_elem+0x10/0x10 ___bpf_prog_run+0x513/0x3b70 __bpf_prog_run32+0x9d/0xd0 ? __bpf_prog_enter_sleepable_recur+0xad/0x120 ? __bpf_prog_enter_sleepable_recur+0x3e/0x120 bpf_trampoline_6442580665+0x4d/0x1000 __x64_sys_getpgid+0x5/0x30 ? do_syscall_64+0x36/0xb0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 </TASK>(CVE-2023-52621)

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: Fix a suspicious RCU usage warning

I received the following warning while running cthon against an ontap server running pNFS:

[ 57.202521] ============================= [ 57.202522] WARNING: suspicious RCU usage [ 57.202523] 6.7.0-rc3-g2cc14f52aeb7 #41492 Not tainted [ 57.202525] ----------------------------- [ 57.202525] net/sunrpc/xprtmultipath.c:349 RCU-list traversed in non-reader section!! [ 57.202527] other info that might help us debug this:

[ 57.202528] rcu_scheduler_active = 2, debug_locks = 1 [ 57.202529] no locks held by test5/3567. [ 57.202530] stack backtrace: [ 57.202532] CPU: 0 PID: 3567 Comm: test5 Not tainted 6.7.0-rc3-g2cc14f52aeb7 #41492 5b09971b4965c0aceba19f3eea324a4a806e227e [ 57.202534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS unknown 2/2/2022 [ 57.202536] Call Trace: [ 57.202537] <TASK> [ 57.202540] dump_stack_lvl+0x77/0xb0 [ 57.202551] lockdep_rcu_suspicious+0x154/0x1a0 [ 57.202556] rpc_xprt_switch_has_addr+0x17c/0x190 [sunrpc ebe02571b9a8ceebf7d98e71675af20c19bdb1f6] [ 57.202596] rpc_clnt_setup_test_and_add_xprt+0x50/0x180 [sunrpc ebe02571b9a8ceebf7d98e71675af20c19bdb1f6] [ 57.202621] ? rpc_clnt_add_xprt+0x254/0x300 [sunrpc ebe02571b9a8ceebf7d98e71675af20c19bdb1f6] [ 57.202646] rpc_clnt_add_xprt+0x27a/0x300 [sunrpc ebe02571b9a8ceebf7d98e71675af20c19bdb1f6] [ 57.202671] ? __pfx_rpc_clnt_setup_test_and_add_xprt+0x10/0x10 [sunrpc ebe02571b9a8ceebf7d98e71675af20c19bdb1f6] [ 57.202696] nfs4_pnfs_ds_connect+0x345/0x760 [nfsv4 c716d88496ded0ea6d289bbea684fa996f9b57a9] [ 57.202728] ? __pfx_nfs4_test_session_trunk+0x10/0x10 [nfsv4 c716d88496ded0ea6d289bbea684fa996f9b57a9] [ 57.202754] nfs4_fl_prepare_ds+0x75/0xc0 [nfs_layout_nfsv41_files e3a4187f18ae8a27b630f9feae6831b584a9360a] [ 57.202760] filelayout_write_pagelist+0x4a/0x200 [nfs_layout_nfsv41_files…

Record
OESA-2024-1650
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1651 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup

Fix Oops in dasd_alias_get_start_dev() function caused by the pavgroup pointer being NULL.

The pavgroup pointer is checked on the entrance of the function but without the lcu->lock being held. Therefore there is a race window between dasd_alias_get_start_dev() and _lcu_update() which sets pavgroup to NULL with the lcu->lock held.

Fix by checking the pavgroup pointer with lcu->lock held.(CVE-2022-48636)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix hang during unmount when stopping a space reclaim worker

Often when running generic/562 from fstests we can hang during unmount, resulting in a trace like this:

Sep 07 11:52:00 debian9 unknown: run fstests generic/562 at 2022-09-07 11:52:00 Sep 07 11:55:32 debian9 kernel: INFO: task umount:49438 blocked for more than 120 seconds. Sep 07 11:55:32 debian9 kernel: Not tainted 6.0.0-rc2-btrfs-next-122 #1 Sep 07 11:55:32 debian9 kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Sep 07 11:55:32 debian9 kernel: task:umount state:D stack: 0 pid:49438 ppid: 25683 flags:0x00004000 Sep 07 11:55:32 debian9 kernel: Call Trace: Sep 07 11:55:32 debian9 kernel: <TASK> Sep 07 11:55:32 debian9 kernel: __schedule+0x3c8/0xec0 Sep 07 11:55:32 debian9 kernel: ? rcu_read_lock_sched_held+0x12/0x70 Sep 07 11:55:32 debian9 kernel: schedule+0x5d/0xf0 Sep 07 11:55:32 debian9 kernel: schedule_timeout+0xf1/0x130 Sep 07 11:55:32 debian9 kernel: ? lock_release+0x224/0x4a0 Sep 07 11:55:32 debian9 kernel: ? lock_acquired+0x1a0/0x420 Sep 07 11:55:32 debian9 kernel: ? trace_hardirqs_on+0x2c/0xd0 Sep 07 11:55:32 debian9 kernel: __wait_for_common+0xac/0x200 Sep 07 11:55:32 debian9 kernel: ? usleep_range_state+0xb0/0xb0 Sep 07 11:55:32 debian9 kernel: __flush_work+0x26d/0x530 Sep 07 11:55:32 debian9 kernel: ? flush_workqueue_prep_pwqs+0x140/0x140 Sep 07 11:55:32 debian9 kernel: ? trace_clock_local+0xc/0x30 Sep 07 11:55:32 debian9 kernel: __cancel_work_timer+0x11f/0x1b0 Sep 07 11:55:32 debian9 kernel: ? close_ctree+0x12b/0x5b3 [btrfs] Sep 07 11:55:32 debian9 kernel: ? __trace_bputs+0x10b/0x170 Sep 07 11:55:32 debian9 kernel: close_ctree+0x152/0x5b3 [btrfs] Sep 07 11:55:32 debian9 kernel: ? evict_inodes+0x166/0x1c0 Sep 07 11:55:32 debian9 kernel: generic_shutdown_super+0x71/0x120 Sep 07 11:55:32 debian9 kernel: kill_anon_super+0x14/0x30 Sep 07 11:55:32 debian9 kernel: btrfs_kill_super+0x12/0x20 [btrfs] Sep 07 11:55:32 debian9 kernel: deactivate_locked_super+0x2e/0xa0 Sep 07 11:55:32 debian9 kernel: cleanup_mnt+0x100/0x160 Sep 07 11:55:32 debian9 kernel: task_work_run+0x59/0xa0 Sep 07 11:55:32 debian9 kernel: exit_to_user_mode_prepare+0x1a6/0x1b0 Sep 07 11:55:32 debian9 kernel: syscall_exit_to_user_mode+0x16/0x40 Sep 07 11:55:32 debian9 kernel: do_syscall_64+0x48/0x90 Sep 07 11:55:32 debian9 kernel: entry_SYSCALL_64_after_hwframe+0x63/0xcd Sep 07 11:55:32 debian9 kernel: RIP: 0033:0x7fcde59a57a7 Sep 07 11:55:32 debian9 kernel: RSP: 002b:00007ffe914217c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 Sep 07 11:55:32 debian9 kernel: RAX: 0000000000000000 RBX: 00007fcde5ae8264 RCX: 00007fcde59a57a7 Sep 07 11:55:32 debian9 kernel: RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055b57556cdd0 Sep 07 11:55:32 debian9 kernel: RBP: 000055b57556cba0 R08: 0000000000000000 R09: 00007ffe91420570 Sep 07 11:55:32 debian9 kernel: R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 Sep 07 11:55:32 debian9 kernel: R13: 000055b57556cdd0 R14: 000055b57556ccb8 R15: 0000000000000000 Sep 07 11:55:32 debian9 kernel: </TASK>

What happens is the following:

  1. The…
Record
OESA-2024-1651
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1652 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup

Fix Oops in dasd_alias_get_start_dev() function caused by the pavgroup pointer being NULL.

The pavgroup pointer is checked on the entrance of the function but without the lcu->lock being held. Therefore there is a race window between dasd_alias_get_start_dev() and _lcu_update() which sets pavgroup to NULL with the lcu->lock held.

Fix by checking the pavgroup pointer with lcu->lock held.(CVE-2022-48636)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix hang during unmount when stopping a space reclaim worker

Often when running generic/562 from fstests we can hang during unmount, resulting in a trace like this:

Sep 07 11:52:00 debian9 unknown: run fstests generic/562 at 2022-09-07 11:52:00 Sep 07 11:55:32 debian9 kernel: INFO: task umount:49438 blocked for more than 120 seconds. Sep 07 11:55:32 debian9 kernel: Not tainted 6.0.0-rc2-btrfs-next-122 #1 Sep 07 11:55:32 debian9 kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Sep 07 11:55:32 debian9 kernel: task:umount state:D stack: 0 pid:49438 ppid: 25683 flags:0x00004000 Sep 07 11:55:32 debian9 kernel: Call Trace: Sep 07 11:55:32 debian9 kernel: <TASK> Sep 07 11:55:32 debian9 kernel: __schedule+0x3c8/0xec0 Sep 07 11:55:32 debian9 kernel: ? rcu_read_lock_sched_held+0x12/0x70 Sep 07 11:55:32 debian9 kernel: schedule+0x5d/0xf0 Sep 07 11:55:32 debian9 kernel: schedule_timeout+0xf1/0x130 Sep 07 11:55:32 debian9 kernel: ? lock_release+0x224/0x4a0 Sep 07 11:55:32 debian9 kernel: ? lock_acquired+0x1a0/0x420 Sep 07 11:55:32 debian9 kernel: ? trace_hardirqs_on+0x2c/0xd0 Sep 07 11:55:32 debian9 kernel: __wait_for_common+0xac/0x200 Sep 07 11:55:32 debian9 kernel: ? usleep_range_state+0xb0/0xb0 Sep 07 11:55:32 debian9 kernel: __flush_work+0x26d/0x530 Sep 07 11:55:32 debian9 kernel: ? flush_workqueue_prep_pwqs+0x140/0x140 Sep 07 11:55:32 debian9 kernel: ? trace_clock_local+0xc/0x30 Sep 07 11:55:32 debian9 kernel: __cancel_work_timer+0x11f/0x1b0 Sep 07 11:55:32 debian9 kernel: ? close_ctree+0x12b/0x5b3 [btrfs] Sep 07 11:55:32 debian9 kernel: ? __trace_bputs+0x10b/0x170 Sep 07 11:55:32 debian9 kernel: close_ctree+0x152/0x5b3 [btrfs] Sep 07 11:55:32 debian9 kernel: ? evict_inodes+0x166/0x1c0 Sep 07 11:55:32 debian9 kernel: generic_shutdown_super+0x71/0x120 Sep 07 11:55:32 debian9 kernel: kill_anon_super+0x14/0x30 Sep 07 11:55:32 debian9 kernel: btrfs_kill_super+0x12/0x20 [btrfs] Sep 07 11:55:32 debian9 kernel: deactivate_locked_super+0x2e/0xa0 Sep 07 11:55:32 debian9 kernel: cleanup_mnt+0x100/0x160 Sep 07 11:55:32 debian9 kernel: task_work_run+0x59/0xa0 Sep 07 11:55:32 debian9 kernel: exit_to_user_mode_prepare+0x1a6/0x1b0 Sep 07 11:55:32 debian9 kernel: syscall_exit_to_user_mode+0x16/0x40 Sep 07 11:55:32 debian9 kernel: do_syscall_64+0x48/0x90 Sep 07 11:55:32 debian9 kernel: entry_SYSCALL_64_after_hwframe+0x63/0xcd Sep 07 11:55:32 debian9 kernel: RIP: 0033:0x7fcde59a57a7 Sep 07 11:55:32 debian9 kernel: RSP: 002b:00007ffe914217c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 Sep 07 11:55:32 debian9 kernel: RAX: 0000000000000000 RBX: 00007fcde5ae8264 RCX: 00007fcde59a57a7 Sep 07 11:55:32 debian9 kernel: RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055b57556cdd0 Sep 07 11:55:32 debian9 kernel: RBP: 000055b57556cba0 R08: 0000000000000000 R09: 00007ffe91420570 Sep 07 11:55:32 debian9 kernel: R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 Sep 07 11:55:32 debian9 kernel: R13: 000055b57556cdd0 R14: 000055b57556ccb8 R15: 0000000000000000 Sep 07 11:55:32 debian9 kernel: </TASK>

What happens is the following:

  1. The…
Record
OESA-2024-1652
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1680 7.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume

In current code, when a PCI error state pci_channel_io_normal is detectd, it will report PCI_ERS_RESULT_CAN_RECOVER status to PCI driver, and PCI driver will continue the execution of PCI resume callback report_resume by pci_walk_bridge, and the callback will go into amdgpu_pci_resume finally, where write lock is releasd unconditionally without acquiring such lock first. In this case, a deadlock will happen when other threads start to acquire the read lock.

To fix this, add a member in amdgpu_device strucutre to cache pci_channel_state, and only continue the execution in amdgpu_pci_resume when it's pci_channel_io_frozen.(CVE-2021-47421)

In the Linux kernel, the following vulnerability has been resolved:

ptp: Fix possible memory leak in ptp_clock_register()

I got memory leak as follows when doing fault injection test:

unreferenced object 0xffff88800906c618 (size 8): comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 (age 13.188s) hex dump (first 8 bytes): 70 74 70 30 00 00 00 00 ptp0.... backtrace: [<00000000312ed458>] __kmalloc_track_caller+0x19f/0x3a0 [<0000000079f6e2ff>] kvasprintf+0xb5/0x150 [<0000000026aae54f>] kvasprintf_const+0x60/0x190 [<00000000f323a5f7>] kobject_set_name_vargs+0x56/0x150 [<000000004e35abdd>] dev_set_name+0xc0/0x100 [<00000000f20cfe25>] ptp_clock_register+0x9f4/0xd30 [ptp] [<000000008bb9f0de>] idt82p33_probe.cold+0x8b6/0x1561 [ptp_idt82p33]

When posix_clock_register() returns an error, the name allocated in dev_set_name() will be leaked, the put_device() should be used to give up the device reference, then the name will be freed in kobject_cleanup() and other memory will be freed in ptp_clock_release().(CVE-2021-47455)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ebtables: fix memory leak when blob is malformed

The bug fix was incomplete, it "replaced" crash with a memory leak. The old code had an assignment to "ret" embedded into the conditional, restore this.(CVE-2022-48641)

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: single: fix potential NULL dereference

Added checking of pointer "function" in pcs_set_mux(). pinmux_generic_get_function() can return NULL and the pointer "function" was dereferenced without checking against NULL.

Found by Linux Verification Center (linuxtesting.org) with SVACE.(CVE-2022-48708)

In the Linux kernel, the following vulnerability has been resolved:

drm/tegra: dsi: Add missing check for of_find_device_by_node

Add check for the return value of of_find_device_by_node() and return the error if it fails in order to avoid NULL pointer dereference.(CVE-2023-52650)

In the Linux kernel, the following vulnerability has been resolved:

io_uring: drop any code related to SCM_RIGHTS

This is dead code after we dropped support for passing io_uring fds over SCM_RIGHTS, get rid of it.(CVE-2023-52656)

In the Linux kernel, the following vulnerability has been resolved:

net: atlantic: eliminate double free in error handling logic

Driver has a logic leak in ring data allocation/free, where aq_ring_free could be called multiple times on same ring, if system is under stress and got memory allocation error.

Ring pointer was used as an indicator of failure, but this is not correct since only ring data is allocated/deallocated. Ring itself is an array member.

Changing ring allocation functions to return error code directly. This simplifies error handling and eliminates aq_ring_free on higher layer.(CVE-2023-52664)

In the Linux kernel, the following vulnerability has been…

Record
OESA-2024-1680
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1681 7.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume

In current code, when a PCI error state pci_channel_io_normal is detectd, it will report PCI_ERS_RESULT_CAN_RECOVER status to PCI driver, and PCI driver will continue the execution of PCI resume callback report_resume by pci_walk_bridge, and the callback will go into amdgpu_pci_resume finally, where write lock is releasd unconditionally without acquiring such lock first. In this case, a deadlock will happen when other threads start to acquire the read lock.

To fix this, add a member in amdgpu_device strucutre to cache pci_channel_state, and only continue the execution in amdgpu_pci_resume when it's pci_channel_io_frozen.(CVE-2021-47421)

In the Linux kernel, the following vulnerability has been resolved:

ptp: Fix possible memory leak in ptp_clock_register()

I got memory leak as follows when doing fault injection test:

unreferenced object 0xffff88800906c618 (size 8): comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 (age 13.188s) hex dump (first 8 bytes): 70 74 70 30 00 00 00 00 ptp0.... backtrace: [<00000000312ed458>] __kmalloc_track_caller+0x19f/0x3a0 [<0000000079f6e2ff>] kvasprintf+0xb5/0x150 [<0000000026aae54f>] kvasprintf_const+0x60/0x190 [<00000000f323a5f7>] kobject_set_name_vargs+0x56/0x150 [<000000004e35abdd>] dev_set_name+0xc0/0x100 [<00000000f20cfe25>] ptp_clock_register+0x9f4/0xd30 [ptp] [<000000008bb9f0de>] idt82p33_probe.cold+0x8b6/0x1561 [ptp_idt82p33]

When posix_clock_register() returns an error, the name allocated in dev_set_name() will be leaked, the put_device() should be used to give up the device reference, then the name will be freed in kobject_cleanup() and other memory will be freed in ptp_clock_release().(CVE-2021-47455)

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: single: fix potential NULL dereference

Added checking of pointer "function" in pcs_set_mux(). pinmux_generic_get_function() can return NULL and the pointer "function" was dereferenced without checking against NULL.

Found by Linux Verification Center (linuxtesting.org) with SVACE.(CVE-2022-48708)

In the Linux kernel, the following vulnerability has been resolved:

drm/tegra: dsi: Add missing check for of_find_device_by_node

Add check for the return value of of_find_device_by_node() and return the error if it fails in order to avoid NULL pointer dereference.(CVE-2023-52650)

In the Linux kernel, the following vulnerability has been resolved:

io_uring: drop any code related to SCM_RIGHTS

This is dead code after we dropped support for passing io_uring fds over SCM_RIGHTS, get rid of it.(CVE-2023-52656)

In the Linux kernel, the following vulnerability has been resolved:

net: atlantic: eliminate double free in error handling logic

Driver has a logic leak in ring data allocation/free, where aq_ring_free could be called multiple times on same ring, if system is under stress and got memory allocation error.

Ring pointer was used as an indicator of failure, but this is not correct since only ring data is allocated/deallocated. Ring itself is an array member.

Changing ring allocation functions to return error code directly. This simplifies error handling and eliminates aq_ring_free on higher layer.(CVE-2023-52664)

In the Linux kernel, the following vulnerability has been resolved:

ACPI: LPIT: Avoid u32 multiplication overflow

In lpit_update_residency() there is a possibility of overflow in multiplication, if tsc_khz is large enough (> UINT_MAX/1000).

Change multiplication to mul_u32_u32().

Found by Linux Verification Center (linuxtesting.org) with SVACE.(CVE-2023-52683)

In the…

Record
OESA-2024-1681
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:4823 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:4823
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:4831 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2024:4831
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:6993 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:6993
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:7000 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:7000
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:7001 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2024:7001
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:7486 7.0

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:7486
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:8617 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:8617
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2024:7000 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26638 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26846 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52798 CVE-2023-52809 CVE-2023-52817 CVE-2023-52840 CVE-2023-52800 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36922 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36919 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38579 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41023 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41064 CVE-2024-41065 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42094 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42225 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43830 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:7000
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-26923 4.7

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM_RIGHTS, two consecutive passes of scan_children() may see a different set of children. Leading to an incorrectly elevated inflight count, and then a dangling pointer within the gc_inflight_list. sockets are AF_UNIX/SOCK_STREAM S is an unconnected socket L is a listening in-flight socket bound to addr, not in fdtable V's fd will be passed via sendmsg(), gets inflight count bumped connect(S, addr) sendmsg(S, [V]); close(V) __unix_gc() ---------------- ------------------------- ----------- NS = unix_create1() skb1 = sock_wmalloc(NS) L = unix_find_other(addr) unix_state_lock(L) unix_peer(S) = NS // V count=1 inflight=0 NS = unix_peer(S) skb2 = sock_alloc() skb_queue_tail(NS, skb2[V]) // V became in-flight // V count=2 inflight=1 close(V) // V count=1 inflight=1 // GC candidate condition met for u in gc_inflight_list: if (total_refs == inflight_refs) add u to gc_candidates // gc_candidates={L, V} for u in gc_candidates: scan_children(u, dec_inflight) // embryo (skb1) was not // reachable from L yet, so V's // inflight remains unchanged __skb_queue_tail(L, skb1) unix_state_unlock(L) for u in gc_candidates: if (u.inflight) scan_children(u, inc_inflight_move_tail) // V count=1 inflight=2 (!) If there is a GC-candidate listening socket, lock/unlock its state. This makes GC wait until the end of any ongoing connect() to that socket. After flipping the lock, a possibly SCM-laden embryo is already enqueued. And if there is another embryo coming, it can not possibly carry SCM_RIGHTS. At this point, unix_inflight() can not happen because unix_gc_lock is already taken. Inflight graph remains unaffected.

Record
UBUNTU-CVE-2024-26923
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2024:7000 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26638 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26846 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52798 CVE-2023-52809 CVE-2023-52817 CVE-2023-52840 CVE-2023-52800 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36922 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36919 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38579 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41023 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41064 CVE-2024-41065 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42094 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42225 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43830 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:7000
Updated
2026-11-02
OSVALSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52817 CVE-2023-52840 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:7001
Updated
2026-11-02
OSVALSA-2024:8617 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201)
  • kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
  • kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
  • kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923)
  • kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961)
  • kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935)
  • kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383)
  • kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244)
  • kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472)
  • kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504)
  • kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904)
  • kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931)
  • kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960)
  • kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972)
  • kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977)
  • kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995)
  • kernel: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (CVE-2024-40998)
  • kernel: netpoll: Fix race condition in netpoll_owner_active (CVE-2024-41005)
  • kernel: xfs: don't walk off the end of a directory data block (CVE-2024-41013)
  • kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014)
  • kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)
  • kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:8617
Updated
2026-11-02
OSVASB-A-336268889 No score

In multiple locations, there is a possible way to conduct local privilege escalation due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Record
ASB-A-336268889
Updated
2026-11-05
OSVCLSA-2024-1721658474 No score

Fix of 66 CVEs

Record
CLSA-2024-1721658474
Updated
2026-11-02
OSVCLSA-2024-1721659158 No score

Fix of 66 CVEs

Record
CLSA-2024-1721659158
Updated
2026-11-02
OSVCLSA-2024-1721659604 No score

Fix of 96 CVEs

Record
CLSA-2024-1721659604
Updated
2026-11-02
OSVCLSA-2024-1721660263 No score

Update of linux-meta

  • Bump ABI 4.15.0-232
Record
CLSA-2024-1721660263
Updated
2026-11-02
OSVCLSA-2024-1722533082 No score

kernel: Fix of 47 CVEs

  • af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
  • netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}
  • libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534}
  • bpf: Fix partial dynptr stack slot reads/writes {CVE-2023-39191}
  • ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
  • ima: define ima_max_digest_data struct without a flexible array variable
  • ima: detect changes to the backing overlay file
  • tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}
  • tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux {CVE-2023-6546}
  • tty: n_gsm: fix restart handling via CLD command
  • r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586}
  • netfilter: tproxy: bail out if IP has been disabled on the device {CVE-2024-36270}
  • tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}
  • Bluetooth: Fix double free in hci_conn_cleanup {CVE-2023-28464}
  • fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super {CVE-2024-0841}
  • net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}
  • tipc: fix UAF in error path {CVE-2024-36886}
  • Bluetooth: af_bluetooth: Fix deadlock {CVE-2024-26886}
  • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • dma-mapping: benchmark: handle NUMA_NO_NODE correctly {CVE-2024-39277}
  • net/mlx5e: Prevent deadlock while disabling aRFS {CVE-2024-27014}
  • net/mlx5e: Introduce flow steering API {CVE-2024-27014}
  • x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
  • x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742}
  • x86: Introduce ia32_enabled() {CVE-2024-25742}
  • x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742}
  • x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742}
  • RDMA/srpt: Support specifying the srpt_service_guid parameter {CVE-2024-26744}
  • platform/x86: think-lmi: Fix reference leak {CVE-2023-52520}
  • USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command {CVE-2024-27059}
  • fat: fix uninitialized field in nostale filehandles {CVE-2024-26973}
  • usb: xhci: Add error handling in xhci_map_urb_for_dma {CVE-2024-26964}
  • wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete {CVE-2024-26897}
  • wifi: mac80211: fix race condition on enabling fast-xmit {CVE-2024-26779}
  • RDMA/qedr: Fix qedr_create_user_qp error flow {CVE-2024-26743}
  • wifi: iwlwifi: fix a memory corruption {CVE-2024-26610}
  • x86/fpu: Stop relying on userspace for info to fault in xsave buffer {CVE-2024-26603}
  • wifi: rt2x00: restart beacon queue when hardware reset {CVE-2023-52595}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg {CVE-2023-52528}
  • RDMA/siw: Fix connection failure handling {CVE-2023-52513}
  • usb: hub: Guard against accesses to uninitialized BOS descriptors {CVE-2023-52477}
  • tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc {CVE-2021-47185}
  • sctp: fail if no bound addresses can be used for a given scope {CVE-2023-1074}
  • memcg: enable accounting for file lock caches {CVE-2022-0480}
  • net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() {CVE-2023-6176}
  • RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872}
  • drm/amd/display: Atom Integrated System Info v2_2 for DCN35 {CVE-2024-36897}
  • net/mlx5e: fix a potential double-free in fs_any_create_groups {CVE-2023-52667}
  • ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() {CVE-2024-36902}
  • ipv6: prevent NULL dereference in ip6_output() {CVE-2024-36901}
  • vt: fix memory overlapping when deleting chars in the buffer {CVE-2022-48627}
  • hwmon: (coretemp) Fix out-of-bounds memory access {CVE-2024-26664}
  • i2c: Fix a potential use after free {CVE-2019-25162}
  • net/smc: fix…
Record
CLSA-2024-1722533082
Updated
2026-11-02
OSVCLSA-2024-1722977546 No score

kernel: Fix of 15 CVEs

  • ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
  • ima: define ima_max_digest_data struct without a flexible array variable
  • ima: detect changes to the backing overlay file
  • tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}
  • af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
  • net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}
  • net/mlx5: Fix a race on command flush flow {CVE-2022-48858}
  • sctp: fix kernel-infoleak for SCTP sockets {CVE-2022-48855}
  • libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534}
  • net: fix __dst_negative_advice() race {CVE-2024-36971}
  • ext4: fix kernel BUG in 'ext4_write_inline_data_end()' {CVE-2021-33631}
  • tipc: fix UAF in error path {CVE-2024-36886}
  • smb: client: fix parsing of SMB3.1.1 POSIX create context {CVE-2023-52434}
  • smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}
  • perf: Disallow mis-matched inherited group reads {CVE-2023-5717}
  • af_unix: Fix null-ptr-deref in unix_stream_sendpage(). {CVE-2023-4622}
  • sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077}
  • i2c: Fix a potential use after free {CVE-2019-25162}
Record
CLSA-2024-1722977546
Updated
2026-11-02
OSVCLSA-2024-1722977984 No score

kernel: Fix of 17 CVEs

  • ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
  • ima: define ima_max_digest_data struct without a flexible array variable
  • ima: detect changes to the backing overlay file
  • tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}
  • af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
  • net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}
  • net/mlx5: Fix a race on command flush flow {CVE-2022-48858}
  • sctp: fix kernel-infoleak for SCTP sockets {CVE-2022-48855}
  • bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. {CVE-2022-0500}
  • bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. {CVE-2022-0500}
  • bpf: Introduce MEM_RDONLY flag {CVE-2022-0500}
  • bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL {CVE-2022-0500}
  • bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL {CVE-2022-0500}
  • bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL {CVE-2022-0500}
  • bpf: Introduce composable reg, ret and arg types. {CVE-2022-0500}
  • bpf: Extract nullable reg type conversion into a helper function {CVE-2022-0500}
  • bpf: Rename bpf_reg_state variables {CVE-2022-0500}
  • libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534}
  • net: fix __dst_negative_advice() race {CVE-2024-36971}
  • ext4: fix kernel BUG in 'ext4_write_inline_data_end()' {CVE-2021-33631}
  • tipc: fix UAF in error path {CVE-2024-36886}
  • smb: client: fix parsing of SMB3.1.1 POSIX create context {CVE-2023-52434}
  • smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}
  • perf: Disallow mis-matched inherited group reads {CVE-2023-5717}
  • af_unix: Fix null-ptr-deref in unix_stream_sendpage(). {CVE-2023-4622}
  • sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077}
  • i2c: Fix a potential use after free {CVE-2019-25162}
Record
CLSA-2024-1722977984
Updated
2026-11-02
OSVCLSA-2024-1724693366 No score

kernel: Fix of 15 CVEs

  • net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855}
  • tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383}
  • drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
  • Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570}
  • Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570}
  • Revert: GFS2: fix skip unlock condition {CVE-2024-38570}
  • ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
  • netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}
  • ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
  • USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934}
  • net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882}
  • ip: validate header length on virtual device xmit
  • ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775}
  • drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469}
  • drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
  • netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020}
  • af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
  • md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307}
Record
CLSA-2024-1724693366
Updated
2026-11-02
OSVCLSA-2024-1724774331 No score

kernel: Fix of 12 CVEs

  • drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
  • af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
  • ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
  • aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2023-6270}
  • smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
  • hdlc_ppp: add range checks in ppp_cp_parse_cr() {CVE-2020-25643}
  • perf/core: Fix race in the perf_mmap_close() function {CVE-2020-14351}
  • media: xirlink_cit: add missing descriptor sanity checks {CVE-2020-11668}
  • vt: selection, close sel_buffer race {CVE-2020-8648}
  • net: sched: sch_qfq: Fix UAF in qfq_dequeue() {CVE-2023-4921}
  • media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
Record
CLSA-2024-1724774331
Updated
2026-11-02
OSVCLSA-2024-1725187614 No score

kernel: Fix of 12 CVEs

  • drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
  • af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
  • ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
  • aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2023-6270}
  • smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
  • hdlc_ppp: add range checks in ppp_cp_parse_cr() {CVE-2020-25643}
  • perf/core: Fix race in the perf_mmap_close() function {CVE-2020-14351}
  • media: xirlink_cit: add missing descriptor sanity checks {CVE-2020-11668}
  • vt: selection, close sel_buffer race {CVE-2020-8648}
  • net: sched: sch_qfq: Fix UAF in qfq_dequeue() {CVE-2023-4921}
  • media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
Record
CLSA-2024-1725187614
Updated
2026-11-02
OSVCLSA-2024-1725871927 No score

kernel: Fix of 31 CVEs

  • gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
  • gfs2: Remove ill-placed consistency check {CVE-2024-38570}
  • gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
  • gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
  • wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
  • bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
  • drm/amdgpu/mes: fix use-after-free issue {CVE-2024-38581}
  • drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
  • net: bridge: mst: fix suspicious rcu usage in br_mst_set_state {CVE-2024-36979}
  • net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state {CVE-2024-36979}
  • net: bridge: mst: fix vlan use-after-free {CVE-2024-36979}
  • netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}
  • ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
  • ima: define ima_max_digest_data struct without a flexible array variable
  • ima: detect changes to the backing overlay file
  • drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
  • dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956}
  • drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
  • net/sched: flower: Fix chain template offload {CVE-2024-26669}
  • userfaultfd: fix a race between writeprotect and exit_mmap() {CVE-2021-47461}
  • scsi: mpi3mr: Sanitise num_phys {CVE-2024-42159}
  • ata: libata-core: Fix double free on error {CVE-2024-41087}
  • net/mlx5: Discard command completions in internal error {CVE-2024-38555}
  • net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
  • net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
  • drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
  • tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}
  • tipc: fix UAF in error path {CVE-2024-36886}
  • net: fix out-of-bounds access in ops_init {CVE-2024-36883}
  • tap: add missing verification for short frame {CVE-2024-41090}
  • tun: add missing verification for short frame {CVE-2024-41091}
  • netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
  • netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925}
  • netfilter: nf_tables: release batch on table validation from abort path {CVE-2024-26925}
  • netfilter: nf_tables: discard table flag update with pending basechain deletion {CVE-2024-26925}
  • netfilter: nf_tables: reject table flag and netdev basechain updates {CVE-2024-26925}
  • af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
  • net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}
  • sched/psi: Fix use-after-free in ep_remove_wait_queue() {CVE-2023-52707}
  • wait: add wake_up_pollfree() {CVE-2023-52707}
  • tcp_metrics: validate source addr length {CVE-2024-42154}
Record
CLSA-2024-1725871927
Updated
2026-11-02
OSVLSN-0107-1 No score

Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: inet: inet_defrag: prevent sk release while still in use ip_local_out() and other functions can pass skb->sk as function argument. If the skb is a fragment and reassembly happens before such function call returns, the sk must not be released. This affects skb fragments reassembled via netfilter or similar modules, e.g. openvswitch or ct_act.c, when run as part of tx pipeline. Eric Dumazet made an initial analysis of this bug. Quoting Eric: Calling ip_defrag() in output path is also implying skb_orphan(), which is buggy because output path relies on sk not disappearing. A relevant old patch about the issue was : 8282f27449bf ('inet: frag: Always orphan skbs inside ip_defrag()') [.. net/ipv4/ip_output.c depends on skb->sk being set, and probably to an inet socket, not an arbitrary one. If we orphan the packet in ipvlan, then downstream things like FQ packet scheduler will not work properly. We need to change ip_defrag() to only use skb_orphan() when really needed, ie whenever frag_list is going to be used. Eric suggested to stash sk in fragment queue and made an initial patch. However there is a problem with this: If skb is refragmented again right after, ip_do_fragment() will copy head->sk to the new fragments, and sets up destructor to sock_wfree. IOW, we have no choice but to fix up sk_wmem accouting to reflect the fully reassembled skb, else wmem will underflow. This change moves the orphan down into the core, to last possible moment. As ip_defrag_offset is aliased with sk_buff->sk member, we must move the offset into the FRAG_CB, else skb->sk gets clobbered. This allows to delay the orphaning long enough to learn if the skb has to be queued or if the skb is completing the reasm queue. In the former case, things work as before, skb is orphaned. This is safe because skb gets queued/stolen and won't continue past reasm engine. In the latter case, we will steal the skb->sk reference, reattach it to the head skb, and fix up wmem accouting when inet_frag inflates truesize.)(CVE-2024-26921)

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take into account the risk of embryo getting enqueued during the garbage collection. If such embryo has a peer that carries SCM_RIGHTS, two consecutive passes of scan_children() may see a different set of children. Leading to an incorrectly elevated inflight count, and then a dangling pointer within the gc_inflight_list. sockets are AF_UNIX/SOCK_STREAM S is an unconnected socket L is a listening in-flight socket bound to addr, not in fdtable V's fd will be passed via sendmsg(), gets inflight count bumped connect(S, addr) sendmsg(S, [V]); close(V) __unix_gc() ---------------- ------------------------- ----------- NS = unix_create1() skb1 = sock_wmalloc(NS) L = unix_find_other(addr) unix_state_lock(L) unix_peer(S) = NS // V count=1 inflight=0 NS = unix_peer(S) skb2 = sock_alloc() skb_queue_tail(NS, skb2[V]) // V became in-flight // V count=2 inflight=1 close(V) // V count=1 inflight=1 // GC candidate condition met for u in gc_inflight_list: if (total_refs == inflight_refs) add u to gc_candidates // gc_candidates={L, V} for u in gc_candidates: scan_children(u, dec_inflight) // embryo (skb1) was not // reachable from L yet, so V's // inflight remains unchanged __skb_queue_tail(L, skb1) unix_state_unlock(L) for u in gc_candidates: if (u.inflight) scan_children(u, inc_inflight_move_tail) // V count=1 inflight=2 (!) If there is a GC-candidate listening socket, lock/unlock its state. This makes GC wait until the end of any ongoing connect() to that socket. After flipping the lock, a possibly SCM-laden embryo is already enqueued. And if there is another embryo coming, it can not possibly carry SCM_RIGHTS. At this point, unix_inflight() can not happen because unix_gc_lock is already taken. Inflight graph remains…

Record
LSN-0107-1
Updated
2026-11-02
OSVRLSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52817 CVE-2023-52840 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:7001
Updated
2026-11-02
OSVRLSA-2024:8617 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • hw: cpu: intel: Native Branch History Injection (BHI) (CVE-2024-2201)

  • kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)

  • kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)

  • kernel: af_unix: Fix garbage collector racing against connect() (CVE-2024-26923)

  • kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del (CVE-2024-26961)

  • kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935)

  • kernel: tty: Fix out-of-bound vmalloc access in imageblit (CVE-2021-47383)

  • kernel: net/sched: taprio: extend minimum interval restriction to entire cycle too (CVE-2024-36244)

  • kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup (CVE-2024-39472)

  • kernel: netfilter: nft_inner: validate mandatory meta and payload (CVE-2024-39504)

  • kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CVE-2024-40904)

  • kernel: mptcp: ensure snd_una is properly initialized on connect (CVE-2024-40931)

  • kernel: ipv6: prevent possible NULL dereference in rt6_probe() (CVE-2024-40960)

  • kernel: ext4: do not create EA inode under buffer lock (CVE-2024-40972)

  • kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CVE-2024-40977)

  • kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (CVE-2024-40995)

  • kernel: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (CVE-2024-40998)

  • kernel: netpoll: Fix race condition in netpoll_owner_active (CVE-2024-41005)

  • kernel: xfs: don't walk off the end of a directory data block (CVE-2024-41013)

  • kernel: xfs: add bounds checking to xlog_recover_process_data (CVE-2024-41014)

  • kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)

  • kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:8617
Updated
2026-11-02
OSVSUSE-SU-2024:2135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
  • CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
  • CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
  • CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
  • CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
  • CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
  • CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
  • CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
  • CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
  • CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
  • CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
  • CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
  • CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
  • CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
  • CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
  • CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
  • CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
  • CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
  • CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
  • CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
  • CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
  • CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
  • CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2023-6270: Fixed a use-after-free issue in…
Record
SUSE-SU-2024:2135-1
Updated
2026-11-02
OSVSUSE-SU-2024:2203-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
  • CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
  • CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
  • CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
  • CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
  • CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
  • CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
  • CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
  • CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-26632: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635).
  • CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
  • CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
  • CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
  • CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
  • CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
  • CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
  • CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26704: Fixed a…
Record
SUSE-SU-2024:2203-1
Updated
2026-11-02
OSVSUSE-SU-2024:2326-1 No score

Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_11 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2326-1
Updated
2026-11-02
OSVSUSE-SU-2024:2335-1 No score

Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
Record
SUSE-SU-2024:2335-1
Updated
2026-11-02
OSVSUSE-SU-2024:2337-1 No score

Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828).
  • CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296).
Record
SUSE-SU-2024:2337-1
Updated
2026-11-02
OSVSUSE-SU-2024:2338-1 No score

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_11 fixes several issues.

The following security issues were fixed:

  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2338-1
Updated
2026-11-02
OSVSUSE-SU-2024:2341-1 No score

Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-150200_24_172 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2341-1
Updated
2026-11-02
OSVSUSE-SU-2024:2342-1 No score

Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_141 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
Record
SUSE-SU-2024:2342-1
Updated
2026-11-02
OSVSUSE-SU-2024:2343-1 No score

Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-150200_24_183 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
  • CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218487).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
Record
SUSE-SU-2024:2343-1
Updated
2026-11-02
OSVSUSE-SU-2024:2344-1 No score

Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-150200_24_188 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
Record
SUSE-SU-2024:2344-1
Updated
2026-11-02
OSVSUSE-SU-2024:2351-1 No score

Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-150200_24_191 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
Record
SUSE-SU-2024:2351-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
perf
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 145 CVEs
 before 4.18.0-553.22.1.el8_10
4.18.0-553.22.1.el8_10
kernel-rt
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-kvm
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-kvm
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 129 CVEs
 before 4.18.0-553.22.1.rt7.363.el8_10
4.18.0-553.22.1.rt7.363.el8_10
bpftool
AlmaLinux:9
From an advisory covering 22 CVEs
 before 7.3.0-427.42.1.el9_4
7.3.0-427.42.1.el9_4
kernel
AlmaLinux:9
From an advisory covering 22 CVEs
 before 5.14.0-427.42.1.el9_4
5.14.0-427.42.1.el9_4
kernel-64k
AlmaLinux:9
From an advisory covering 22 CVEs
 before 5.14.0-427.42.1.el9_4
5.14.0-427.42.1.el9_4
kernel-64k-core
AlmaLinux:9
From an advisory covering 22 CVEs
 before 5.14.0-427.42.1.el9_4
5.14.0-427.42.1.el9_4
kernel-64k-debug
AlmaLinux:9
From an advisory covering 22 CVEs
 before 5.14.0-427.42.1.el9_4
5.14.0-427.42.1.el9_4
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 22 CVEs
 before 5.14.0-427.42.1.el9_4
5.14.0-427.42.1.el9_4
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 22 CVEs
 before 5.14.0-427.42.1.el9_4
5.14.0-427.42.1.el9_4
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 22 CVEs
 before 5.14.0-427.42.1.el9_4
5.14.0-427.42.1.el9_4
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 22 CVEs
 before 5.14.0-427.42.1.el9_4
5.14.0-427.42.1.el9_4
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 22 CVEs
 before 5.14.0-427.42.1.el9_4
5.14.0-427.42.1.el9_4
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 22 CVEs
 before 5.14.0-427.42.1.el9_4
5.14.0-427.42.1.el9_4
:linux_kernel:
Android
 :0 up to :2024-07-05, plus listed versions
Kernel
:2024-07-05
linux-lts
Alpaquita:23
 6.1.82-r0 up to 6.1.89-r0
6.1.89-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
linux-buildinfo-4.4.0-260-tuxcare.els31-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-buildinfo-4.4.0-260-tuxcare.els31-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-cloud-tools-4.4.0-260-tuxcare.els31
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-cloud-tools-4.4.0-260-tuxcare.els31-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-cloud-tools-4.4.0-260-tuxcare.els31-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-cloud-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-cloud-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-crashdump
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-doc
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-headers-4.4.0-260-tuxcare.els31
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-headers-4.4.0-260-tuxcare.els31-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-headers-4.4.0-260-tuxcare.els31-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-headers-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-headers-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-image-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-image-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-image-unsigned-4.4.0-260-tuxcare.els31-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-image-unsigned-4.4.0-260-tuxcare.els31-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-libc-dev
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-modules-4.4.0-260-tuxcare.els31-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-modules-4.4.0-260-tuxcare.els31-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-modules-extra-4.4.0-260-tuxcare.els31-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-source
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-source-4.4.0
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-tools-4.4.0-260-tuxcare.els31
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-tools-4.4.0-260-tuxcare.els31-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-tools-4.4.0-260-tuxcare.els31-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-tools-host
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0-260.294
4.4.0-260.294
linux-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 66 CVEs
 before 4.4.0.260.294
4.4.0.260.294
linux-buildinfo-4.15.0-232-tuxcare.els20-generic
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-buildinfo-4.15.0-232-tuxcare.els20-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-cloud-tools-4.15.0-232-tuxcare.els20
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-cloud-tools-4.15.0-232-tuxcare.els20-generic
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-cloud-tools-4.15.0-232-tuxcare.els20-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-headers-4.15.0-232-tuxcare.els20
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-headers-4.15.0-232-tuxcare.els20-generic
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-headers-4.15.0-232-tuxcare.els20-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-image-unsigned-4.15.0-232-tuxcare.els20-generic
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-image-unsigned-4.15.0-232-tuxcare.els20-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
linux-modules-4.15.0-232-tuxcare.els20-generic
TuxCare:Ubuntu:18.04
From an advisory covering 96 CVEs
 before 4.15.0-232.243
4.15.0-232.243
Kernel
Linux
 2.6.23 up to 4.19.314, 4.20.0 up to 5.4.275, 5.5.0 up to 5.10.216, 5.11.0 up to 5.15.156, 5.16.0 up to 6.1.87, 6.2.0 up to 6.6.28, 6.7.0 up to 6.8.7
4.19.3145.4.2755.10.2165.15.1566.1.876.6.286.8.7
linux
Debian:12
 before 6.1.90-1, plus listed versions
6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1
Show 16 moreShow less
6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-1~bpo11+1
6.1.90-1
linux
Debian:13
 before 6.8.9-1
6.8.9-1
linux
Debian:14
 before 6.8.9-1
6.8.9-1
linux
Debian:10
From an advisory covering 258 CVEs
 before 4.19.316-1, plus listed versions
4.19.118-14.19.118-24.19.118-2+deb10u14.19.118-2+deb10u1~bpo9+14.19.118-2~bpo9+1
Show 41 moreShow less
4.19.131-14.19.131-24.19.132-14.19.146-14.19.152-14.19.160-14.19.160-24.19.171-14.19.171-24.19.177-14.19.181-14.19.194-14.19.194-24.19.194-34.19.208-14.19.232-14.19.235-14.19.249-14.19.249-24.19.260-14.19.269-14.19.282-14.19.289-14.19.289-24.19.304-14.19.37-54.19.37-5+deb10u14.19.37-5+deb10u24.19.37-5+deb10u2~bpo9+14.19.37-64.19.67-14.19.67-24.19.67-2+deb10u14.19.67-2+deb10u1~bpo9+14.19.67-2+deb10u24.19.67-2+deb10u2~bpo9+14.19.67-2~bpo9+14.19.87-14.19.98-14.19.98-1+deb10u14.19.98-1~bpo9+1
4.19.316-1
linux-5.10
Debian:10
From an advisory covering 344 CVEs
 before 5.10.216-1~deb10u1, plus listed versions
5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1
Show 8 moreShow less
5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1
5.10.216-1~deb10u1
linux
Debian:12
From an advisory covering 37 CVEs
 before 6.1.90-1, plus listed versions
6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1
Show 16 moreShow less
6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-1~bpo11+1
6.1.90-1
linux
Debian:11
From an advisory covering 246 CVEs
 before 5.10.216-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 34 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.216-1
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
From an advisory covering 5 CVEs
 before 4.4.0-267.301~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
4.4.0-267.301~14.04.1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1176.189~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1176.189~16.04.1
linux-aws
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.4.0-1180.195, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1180.195
linux-azure
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1184.199~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1184.199~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1169.186~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1169.186~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-232.244~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-232.244~16.04.1
linux
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 4.4.0-267.301, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-267.301
linux-aws
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1176.189, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1176.189
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1184.199, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1184.199
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1169.186, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1169.186
linux
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-232.244, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-232.244
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-198.218~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-198.218~18.04.1
linux-oracle
Ubuntu:Pro:18.04:LTS
From an advisory covering 5 CVEs
 before 4.15.0-1138.149, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1138.149
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1071.77~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 41 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.1
5.15.0-1071.77~20.04.1
linux-aws
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1134.144, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1134.144
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1074.83~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 43 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.1
5.15.0-1074.83~20.04.1
linux-azure
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1139.146, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
5.4.0-1139.146
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1070.78~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 40 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.1
5.15.0-1070.78~20.04.1
linux-gcp
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1138.147, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
5.4.0-1138.147
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-124.134~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 41 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.1
5.15.0-124.134~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-124.134~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 41 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.1
5.15.0-124.134~20.04.1
linux
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-198.218, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-198.218
linux-gke-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gke
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gkeop
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1101.105, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
5.4.0-1101.105
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1064.67~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 22 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.1
5.15.0-1064.67~20.04.1
linux-ibm
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1081.86, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
5.4.0-1081.86
linux-oracle-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1069.75~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 39 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.1
5.15.0-1069.75~20.04.1
linux-oracle
Ubuntu:Pro:20.04:LTS
From an advisory covering 5 CVEs
 before 5.4.0-1133.142, plus listed versions
5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1061.655.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1066.715.4.0-1067.725.4.0-1069.755.4.0-1070.765.4.0-1071.775.4.0-1073.795.4.0-1076.83
5.4.0-1133.142
linux-aws
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1071.77, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1071.77
linux-azure
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1074.83, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 45 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75
5.15.0-1074.83
linux-gcp
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1070.78, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 45 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.715.15.0-1064.725.15.0-1065.73
5.15.0-1070.78
linux
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-124.134, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-124.134
linux-gke
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1068.74, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1068.74
linux-ibm
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1064.67, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8
Show 45 moreShow less
5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.605.15.0-1058.615.15.0-1059.625.15.0-1060.635.15.0-1061.645.15.0-1062.65
5.15.0-1064.67
linux-oracle
Ubuntu:Pro:22.04:LTS
From an advisory covering 5 CVEs
 before 5.15.0-1069.75, plus listed versions
5.13.0-1008.105.15.0-1001.35.15.0-1002.45.15.0-1003.55.15.0-1006.8
Show 45 moreShow less
5.15.0-1007.95.15.0-1009.125.15.0-1011.155.15.0-1013.175.15.0-1016.205.15.0-1017.225.15.0-1018.235.15.0-1019.245.15.0-1021.275.15.0-1022.285.15.0-1025.315.15.0-1026.325.15.0-1027.335.15.0-1029.355.15.0-1030.365.15.0-1032.385.15.0-1033.395.15.0-1034.405.15.0-1035.415.15.0-1036.425.15.0-1037.435.15.0-1038.445.15.0-1039.455.15.0-1040.465.15.0-1041.475.15.0-1042.485.15.0-1044.505.15.0-1045.515.15.0-1046.525.15.0-1047.535.15.0-1048.545.15.0-1049.555.15.0-1050.565.15.0-1051.575.15.0-1052.585.15.0-1053.595.15.0-1054.605.15.0-1055.615.15.0-1058.645.15.0-1059.655.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1069.75
linux-aws
Ubuntu:Pro:24.04:LTS
From an advisory covering 5 CVEs
 before 6.8.0-1015.16, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 6 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.15
6.8.0-1015.16
linux-azure
Ubuntu:Pro:24.04:LTS
From an advisory covering 5 CVEs
 before 6.8.0-1014.16, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 6 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.15
6.8.0-1014.16
linux-gcp
Ubuntu:Pro:24.04:LTS
From an advisory covering 5 CVEs
 before 6.8.0-1014.16, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 7 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.14
6.8.0-1014.16
linux
Ubuntu:Pro:24.04:LTS
From an advisory covering 5 CVEs
 before 6.8.0-44.44, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 8 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.41
6.8.0-44.44
linux-ibm
Ubuntu:Pro:24.04:LTS
From an advisory covering 5 CVEs
 before 6.8.0-1012.12, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 6 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.11
6.8.0-1012.12
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 35 CVEs
 before 5.10.0-200.0.0.113.oe2203sp3
5.10.0-200.0.0.113.oe2203sp3
kernel
openEuler:20.03-LTS-SP1
From an advisory covering 17 CVEs
 before 4.19.90-2405.4.0.0250.oe1
4.19.90-2405.4.0.0250.oe1
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 15 CVEs
 before 4.19.90-2405.4.0.0277.oe2003sp4
4.19.90-2405.4.0.0277.oe2003sp4
kernel
openEuler:22.03-LTS-SP1
From an advisory covering 63 CVEs
 before 5.10.0-136.77.0.157.oe2203sp1
5.10.0-136.77.0.157.oe2203sp1
kernel
openEuler:22.03-LTS-SP2
From an advisory covering 55 CVEs
 before 5.10.0-153.56.0.134.oe2203sp2
5.10.0-153.56.0.134.oe2203sp2
bpftool-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:7.0.0-284.75.1.el9_2
0:7.0.0-284.75.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-tools-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-devel
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-zfcpdump-devel-matched
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
perf
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
perf-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
python3-perf-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
rtla
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
bpftool
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:7.0.0-284.75.1.el9_2
0:7.0.0-284.75.1.el9_2
bpftool-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:7.0.0-284.75.1.el9_2
0:7.0.0-284.75.1.el9_2
kernel
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debug-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-64k-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-abi-stablelists
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-modules
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-modules-core
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel-debug-modules-extra
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 48 CVEs
 before 0:5.14.0-284.75.1.el9_2
0:5.14.0-284.75.1.el9_2
kernel
Rocky Linux:8
From an advisory covering 147 CVEs
 before 0:4.18.0-553.22.1.el8_10
0:4.18.0-553.22.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 129 CVEs
 before 0:4.18.0-553.22.1.rt7.363.el8_10
0:4.18.0-553.22.1.rt7.363.el8_10
kernel
Rocky Linux:9
From an advisory covering 22 CVEs
 before 0:5.14.0-427.42.1.el9_4
0:5.14.0-427.42.1.el9_4
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3.150600.12.2.7
6.4.0-150600.23.7.3.150600.12.2.7
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.4
6.4.0-150600.23.7.4
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-livepatch-SLE15-SP6_Update_1
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 408 CVEs
 before 1-150600.13.3.7
1-150600.13.3.7
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3.150600.12.2.7
6.4.0-150600.23.7.3.150600.12.2.7
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.4
6.4.0-150600.23.7.4
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-livepatch-SLE15-SP5-RT_Update_3
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 4 CVEs
 before 12-150500.2.1
12-150500.2.1
kernel-livepatch-SLE15-SP5-RT_Update_13
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 5 CVEs
 before 4-150500.11.6.1
4-150500.11.6.1
kernel-livepatch-SLE15-SP5-RT_Update_10
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 13 CVEs
 before 6-150500.11.8.1
6-150500.11.8.1
kernel-livepatch-SLE15-SP5-RT_Update_0
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 3 CVEs
 before 15-150500.9.2
15-150500.9.2
kernel-livepatch-SLE15-SP2_Update_43
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 4 CVEs
 before 9-150200.2.1
9-150200.2.1
kernel-livepatch-SLE15-SP2_Update_37
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 4 CVEs
 before 14-150200.2.1
14-150200.2.1
kernel-livepatch-SLE15-SP3_Update_38
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 4 CVEs
 before 10-150300.2.1
10-150300.2.1
kernel-livepatch-SLE15-SP2_Update_46
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 10 CVEs
 before 5-150200.5.6.1
5-150200.5.6.1
kernel-livepatch-SLE15-SP2_Update_47
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 8 CVEs
 before 4-150200.5.6.1
4-150200.5.6.1
kernel-livepatch-SLE15-SP2_Update_48
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 4 CVEs
 before 3-150200.5.6.1
3-150200.5.6.1
kernel-livepatch-SLE15-SP3_Update_43
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 9 CVEs
 before 4-150300.7.6.1
4-150300.7.6.1
kernel-livepatch-SLE15-SP5-RT_Update_6
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 4 CVEs
 before 10-150500.2.1
10-150500.2.1
kernel-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 148 CVEs
 before 4.12.14-16.191.1
4.12.14-16.191.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-livepatch-SLE15-SP3_Update_46
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 72 CVEs
 before 1-150300.7.3.1
1-150300.7.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1.150300.18.98.1
5.3.18-150300.59.167.1.150300.18.98.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-default
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 72 CVEs
 before 5.3.18-150300.59.167.1
5.3.18-150300.59.167.1
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.33.60.1
5.14.21-150500.33.60.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.33.60.1
5.14.21-150500.33.60.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.33.60.1
5.14.21-150500.33.60.1
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-default
openSUSE:Leap Micro 5.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-default-base
openSUSE:Leap Micro 5.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1.150500.6.33.8
5.14.21-150500.55.73.1.150500.6.33.8
dtb-aarch64
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-64kb
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-debug
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-default
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-default-base
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1.150500.6.33.8
5.14.21-150500.55.73.1.150500.6.33.8
kernel-docs
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.2
5.14.21-150500.55.73.2
kernel-kvmsmall
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-obs-build
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-obs-qa
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-source
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-syms
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-zfcpdump
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
linux-aws
Ubuntu:Pro:14.04:LTS
 before 4.4.0-1134.140, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
4.4.0-1134.140
linux-azure
Ubuntu:Pro:14.04:LTS
 before 4.15.0-1179.194~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
4.15.0-1179.194~14.04.1
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 before 4.4.0-257.291~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
4.4.0-257.291~14.04.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux
Ubuntu:Pro:16.04:LTS
 before 4.4.0-257.291, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-257.291
linux-aws
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1172.187, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1172.187
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1170.183~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1170.183~16.04.1

History

History
RecordedChangedSources
affectedOSV
affectedNVD, OSV
factsCVE List, EUVD
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26923 is a high vulnerability (CVSS 7.8) in Debian Linux, published April 24, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 10th percentile. Fixed in :linux_kernel: :2024-07-05.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,207 package rows, 1,752 versions, 5,015 references and the rest of 12 source descriptions. The JSON record has them. Also not on the record: 175 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 223 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open