Every CVE Search/ Get API key

CVE-2024-26991

KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes

Fix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger KASAN splat, as seen in the private_mem_conversions_test selftest.

When memory attributes are set on a GFN range, that range will have specific properties applied to the TDP. A huge page cannot be used when the attributes are inconsistent, so they are disabled for those the specific huge pages. For internal KVM reasons, huge pages are also not allowed to span adjacent memslots regardless of whether the backing memory could be mapped as huge.

What GFNs support which huge page sizes is tracked by an array of arrays 'lpage_info' on the memslot, of ‘kvm_lpage_info’ structs. Each index of lpage_info contains a vmalloc allocated array of these for a specific supported page size. The kvm_lpage_info denotes whether a specific huge page (GFN and page size) on the memslot is supported. These arrays include indices for unaligned head and tail huge pages.

Preventing huge pages from spanning adjacent memslot is covered by incrementing the count in head and tail kvm_lpage_info when the memslot is allocated, but disallowing huge pages for memory that has mixed attributes has to be done in a more complicated way. During the KVM_SET_MEMORY_ATTRIBUTES ioctl KVM updates lpage_info for each memslot in the range that has mismatched attributes. KVM does this a memslot at a time, and marks a special bit, KVM_LPAGE_MIXED_FLAG, in the kvm_lpage_info for any huge page. This bit is essentially a permanently elevated count. So huge pages will not be mapped for the GFN at that page size if the count is elevated in either case: a huge head or tail page unaligned to the memslot or if KVM_LPAGE_MIXED_FLAG is set because it has mixed attributes.

To determine whether a huge page has consistent attributes, the KVM_SET_MEMORY_ATTRIBUTES operation checks an xarray to make sure it consistently has the incoming attribute. Since level - 1 huge pages are aligned to level huge pages, it employs an optimization. As long as the level - 1 huge pages are checked first, it can just check these and assume that if each level - 1 huge page contained within the level sized huge page is not mixed, then the level size huge page is not mixed. This optimization happens in the helper hugepage_has_attrs().

Unfortunately, although the kvm_lpage_info array representing page size 'level' will contain an entry for an unaligned tail page of size level, the array for level - 1 will not contain an entry for each GFN at page size level. The level - 1 array will only contain an index for any unaligned region covered by level - 1 huge page size, which can be a smaller region. So this causes the optimization to overflow the level - 1 kvm_lpage_info and perform a vmalloc out of bounds read.

In some cases of head and tail pages where an overflow could happen, callers skip the operation completely as KVM_LPAGE_MIXED_FLAG is not required to prevent huge pages as discussed earlier. But for memslots that are smaller than the 1GB page size, it does call hugepage_has_attrs(). In this case the huge page is both the head and tail page. The issue can be observed simply by compiling the kernel with CONFIG_KASAN_VMALLOC and running the selftest “private_mem_conversions_test”, which produces the output like the following:

BUG: KASAN: vmalloc-out-of-bounds in hugepage_has_attrs+0x7e/0x110 Read of size 4 at addr ffffc900000a3008 by task private_mem_con/169 Call Trace: dump_stack_lvl print_report ? __virt_addr_valid ? hugepage_has_attrs ? hugepage_has_attrs kasan_report ? hugepage_has_attrs hugepage_has_attrs kvm_arch_post_set_memory_attributes kvm_vm_ioctl

It is a little ambiguous whether the unaligned head page (in the bug case also the tail page) should be expected to have KVM_LPAGE_MIXED_FLAG set. It is not functionally required, as the unal ---truncated---

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.23%Up 0.2 points since May 1, 2024
90%50%10%1%

What each source reports

CVE List Score used 5.5

KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes

Fix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger KASAN splat, as seen in the private_mem_conversions_test selftest.

When memory attributes are set on a GFN range, that range will have specific properties applied to the TDP. A huge page cannot be used when the attributes are inconsistent, so they are disabled for those the specific huge pages. For internal KVM reasons, huge pages are also not allowed to span adjacent memslots regardless of whether the backing memory could be mapped as huge.

What GFNs support which huge page sizes is tracked by an array of arrays 'lpage_info' on the memslot, of ‘kvm_lpage_info’ structs. Each index of lpage_info contains a vmalloc allocated array of these for a specific supported page size. The kvm_lpage_info denotes whether a specific huge page (GFN and page size) on the memslot is supported. These arrays include indices for unaligned head and tail huge pages.

Preventing huge pages from spanning adjacent memslot is covered by incrementing the count in head and tail kvm_lpage_info when the memslot is allocated, but disallowing huge pages for memory that has mixed attributes has to be done in a more complicated way. During the KVM_SET_MEMORY_ATTRIBUTES ioctl KVM updates lpage_info for each memslot in the range that has mismatched attributes. KVM does this a memslot at a time, and marks a special bit, KVM_LPAGE_MIXED_FLAG, in the kvm_lpage_info for any huge page. This bit is essentially a permanently elevated count. So huge pages will not be mapped for the GFN at that page size if the count is elevated in either case: a huge head or tail page unaligned to the memslot or if KVM_LPAGE_MIXED_FLAG is set because it has mixed attributes.

To determine whether a huge page has consistent attributes, the KVM_SET_MEMORY_ATTRIBUTES operation checks an xarray to make sure it consistently has the incoming attribute. Since level - 1 huge pages are aligned to level huge pages, it employs an optimization. As long as the level - 1 huge pages are checked first, it can just check these and assume that if each level - 1 huge page contained within the level sized huge page is not mixed, then the level size huge page is not mixed. This optimization happens in the helper hugepage_has_attrs().

Unfortunately, although the kvm_lpage_info array representing page size 'level' will contain an entry for an unaligned tail page of size level, the array for level - 1 will not contain an entry for each GFN at page size level. The level - 1 array will only contain an index for any unaligned region covered by level - 1 huge page size, which can be a smaller region. So this causes the optimization to overflow the level - 1 kvm_lpage_info and perform a vmalloc out of bounds read.

In some cases of head and tail pages where an overflow could happen, callers skip the operation completely as KVM_LPAGE_MIXED_FLAG is not required to prevent huge pages as discussed earlier. But for memslots that are smaller than the 1GB page size, it does call hugepage_has_attrs(). In this case the huge page is both the head and tail page. The issue can be observed simply by compiling the kernel with CONFIG_KASAN_VMALLOC and running the selftest “private_mem_conversions_test”, which produces the output like the following:

BUG: KASAN: vmalloc-out-of-bounds in hugepage_has_attrs+0x7e/0x110 Read of size 4 at addr ffffc900000a3008 by task private_mem_con/169 Call Trace: dump_stack_lvl print_report ? __virt_addr_valid ? hugepage_has_attrs ? hugepage_has_attrs kasan_report ? hugepage_has_attrs hugepage_has_attrs kvm_arch_post_set_memory_attributes kvm_vm_ioctl

It is a little ambiguous whether the unaligned head page (in the bug case also the tail page) should be expected to have KVM_LPAGE_MIXED_FLAG set. It is not functionally required, as the unal ---truncated---

Record
CVE-2024-26991
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2024-24253 5.5

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes

Fix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger KASAN splat, as seen in the private_mem_conversions_test selftest.

When memory attributes are set on a GFN range, that range will have specific properties applied to the TDP. A huge page cannot be used when the attributes are inconsistent, so they are disabled for those the specific huge pages. For internal KVM reasons, huge pages are also not allowed to span adjacent memslots regardless of whether the backing memory could be mapped as huge.

What GFNs support which huge page sizes is tracked by an array of arrays 'lpage_info' on the memslot, of ‘kvm_lpage_info’ structs. Each index of lpage_info contains a vmalloc allocated array of these for a specific supported page size. The kvm_lpage_info denotes whether a specific huge page (GFN and page size) on the memslot is supported. These arrays include indices for unaligned head and tail huge pages.

Preventing huge pages from spanning adjacent memslot is covered by incrementing the count in head and tail kvm_lpage_info when the memslot is allocated, but disallowing huge pages for memory that has mixed attributes has to be done in a more complicated way. During the KVM_SET_MEMORY_ATTRIBUTES ioctl KVM updates lpage_info for each memslot in the range that has mismatched attributes. KVM does this a memslot at a time, and marks a special bit, KVM_LPAGE_MIXED_FLAG, in the kvm_lpage_info for any huge page. This bit is essentially a permanently elevated count. So huge pages will not be mapped for the GFN at that page size if the count is elevated in either case: a huge head or tail page unaligned to the memslot or if KVM_LPAGE_MIXED_FLAG is set because it has mixed attributes.

To determine whether a huge page has consistent attributes, the KVM_SET_MEMORY_ATTRIBUTES operation checks an xarray to make sure it consistently has the incoming attribute. Since level - 1 huge pages are aligned to level huge pages, it employs an optimization. As long as the level - 1 huge pages are checked first, it can just check these and assume that if each level - 1 huge page contained within the level sized huge page is not mixed, then the level size huge page is not mixed. This optimization happens in the helper hugepage_has_attrs().

Unfortunately, although the kvm_lpage_info array representing page size 'level' will contain an entry for an unaligned tail page of size level, the array for level - 1 will not contain an entry for each GFN at page size level. The level - 1 array will only contain an index for any unaligned region covered by level - 1 huge page size, which can be a smaller region. So this causes the optimization to overflow the level - 1 kvm_lpage_info and perform a vmalloc out of bounds read.

In some cases of head and tail pages where an overflow could happen, callers skip the operation completely as KVM_LPAGE_MIXED_FLAG is not required to prevent huge pages as discussed earlier. But for memslots that are smaller than the 1GB page size, it does call hugepage_has_attrs(). In this case the huge page is both the head and tail page. The issue can be observed simply by compiling the kernel with CONFIG_KASAN_VMALLOC and running the selftest “private_mem_conversions_test”, which produces the output like the following:

BUG: KASAN: vmalloc-out-of-bounds in hugepage_has_attrs+0x7e/0x110 Read of size 4 at addr ffffc900000a3008 by task private_mem_con/169 Call Trace: dump_stack_lvl print_report ? __virt_addr_valid ? hugepage_has_attrs ? hugepage_has_attrs kasan_report ? hugepage_has_attrs hugepage_has_attrs kvm_arch_post_set_memory_attributes kvm_vm_ioctl

It is a little ambiguous whether the unaligned head page (in the bug case also the tail page) should be expected to have KVM_LPAGE_MIXED_FLAG set. It is not functionally required, as the unal ---truncated---

Record
EUVD-2024-24253
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-p437-j6g9-3f2f 5.5

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: x86: Don't...

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes

Fix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger KASAN splat, as seen in the private_mem_conversions_test selftest.

When memory attributes are set on a GFN range, that range will have specific properties applied to the TDP. A huge page cannot be used when the attributes are inconsistent, so they are disabled for those the specific huge pages. For internal KVM reasons, huge pages are also not allowed to span adjacent memslots regardless of whether the backing memory could be mapped as huge.

What GFNs support which huge page sizes is tracked by an array of arrays 'lpage_info' on the memslot, of ‘kvm_lpage_info’ structs. Each index of lpage_info contains a vmalloc allocated array of these for a specific supported page size. The kvm_lpage_info denotes whether a specific huge page (GFN and page size) on the memslot is supported. These arrays include indices for unaligned head and tail huge pages.

Preventing huge pages from spanning adjacent memslot is covered by incrementing the count in head and tail kvm_lpage_info when the memslot is allocated, but disallowing huge pages for memory that has mixed attributes has to be done in a more complicated way. During the KVM_SET_MEMORY_ATTRIBUTES ioctl KVM updates lpage_info for each memslot in the range that has mismatched attributes. KVM does this a memslot at a time, and marks a special bit, KVM_LPAGE_MIXED_FLAG, in the kvm_lpage_info for any huge page. This bit is essentially a permanently elevated count. So huge pages will not be mapped for the GFN at that page size if the count is elevated in either case: a huge head or tail page unaligned to the memslot or if KVM_LPAGE_MIXED_FLAG is set because it has mixed attributes.

To determine whether a huge page has consistent attributes, the KVM_SET_MEMORY_ATTRIBUTES operation checks an xarray to make sure it consistently has the incoming attribute. Since level - 1 huge pages are aligned to level huge pages, it employs an optimization. As long as the level - 1 huge pages are checked first, it can just check these and assume that if each level - 1 huge page contained within the level sized huge page is not mixed, then the level size huge page is not mixed. This optimization happens in the helper hugepage_has_attrs().

Unfortunately, although the kvm_lpage_info array representing page size 'level' will contain an entry for an unaligned tail page of size level, the array for level - 1 will not contain an entry for each GFN at page size level. The level - 1 array will only contain an index for any unaligned region covered by level - 1 huge page size, which can be a smaller region. So this causes the optimization to overflow the level - 1 kvm_lpage_info and perform a vmalloc out of bounds read.

In some cases of head and tail pages where an overflow could happen, callers skip the operation completely as KVM_LPAGE_MIXED_FLAG is not required to prevent huge pages as discussed earlier. But for memslots that are smaller than the 1GB page size, it does call hugepage_has_attrs(). In this case the huge page is both the head and tail page. The issue can be observed simply by compiling the kernel with CONFIG_KASAN_VMALLOC and running the selftest “private_mem_conversions_test”, which produces the output like the following:

BUG: KASAN: vmalloc-out-of-bounds in hugepage_has_attrs+0x7e/0x110 Read of size 4 at addr ffffc900000a3008 by task private_mem_con/169 Call Trace: dump_stack_lvl print_report ? __virt_addr_valid ? hugepage_has_attrs ? hugepage_has_attrs kasan_report ? hugepage_has_attrs hugepage_has_attrs kvm_arch_post_set_memory_attributes kvm_vm_ioctl

It is a little ambiguous whether the unaligned head page (in the bug case also the tail page) should be expected to have KVM_LPAGE_MIXED_FLAG set. It is not functionally required, as the unal ---truncated---

Record
GHSA-p437-j6g9-3f2f
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 5.5

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes

Fix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger KASAN splat, as seen in the private_mem_conversions_test selftest.

When memory attributes are set on a GFN range, that range will have specific properties applied to the TDP. A huge page cannot be used when the attributes are inconsistent, so they are disabled for those the specific huge pages. For internal KVM reasons, huge pages are also not allowed to span adjacent memslots regardless of whether the backing memory could be mapped as huge.

What GFNs support which huge page sizes is tracked by an array of arrays 'lpage_info' on the memslot, of ‘kvm_lpage_info’ structs. Each index of lpage_info contains a vmalloc allocated array of these for a specific supported page size. The kvm_lpage_info denotes whether a specific huge page (GFN and page size) on the memslot is supported. These arrays include indices for unaligned head and tail huge pages.

Preventing huge pages from spanning adjacent memslot is covered by incrementing the count in head and tail kvm_lpage_info when the memslot is allocated, but disallowing huge pages for memory that has mixed attributes has to be done in a more complicated way. During the KVM_SET_MEMORY_ATTRIBUTES ioctl KVM updates lpage_info for each memslot in the range that has mismatched attributes. KVM does this a memslot at a time, and marks a special bit, KVM_LPAGE_MIXED_FLAG, in the kvm_lpage_info for any huge page. This bit is essentially a permanently elevated count. So huge pages will not be mapped for the GFN at that page size if the count is elevated in either case: a huge head or tail page unaligned to the memslot or if KVM_LPAGE_MIXED_FLAG is set because it has mixed attributes.

To determine whether a huge page has consistent attributes, the KVM_SET_MEMORY_ATTRIBUTES operation checks an xarray to make sure it consistently has the incoming attribute. Since level - 1 huge pages are aligned to level huge pages, it employs an optimization. As long as the level - 1 huge pages are checked first, it can just check these and assume that if each level - 1 huge page contained within the level sized huge page is not mixed, then the level size huge page is not mixed. This optimization happens in the helper hugepage_has_attrs().

Unfortunately, although the kvm_lpage_info array representing page size 'level' will contain an entry for an unaligned tail page of size level, the array for level - 1 will not contain an entry for each GFN at page size level. The level - 1 array will only contain an index for any unaligned region covered by level - 1 huge page size, which can be a smaller region. So this causes the optimization to overflow the level - 1 kvm_lpage_info and perform a vmalloc out of bounds read.

In some cases of head and tail pages where an overflow could happen, callers skip the operation completely as KVM_LPAGE_MIXED_FLAG is not required to prevent huge pages as discussed earlier. But for memslots that are smaller than the 1GB page size, it does call hugepage_has_attrs(). In this case the huge page is both the head and tail page. The issue can be observed simply by compiling the kernel with CONFIG_KASAN_VMALLOC and running the selftest “private_mem_conversions_test”, which produces the output like the following:

BUG: KASAN: vmalloc-out-of-bounds in hugepage_has_attrs+0x7e/0x110 Read of size 4 at addr ffffc900000a3008 by task private_mem_con/169 Call Trace: dump_stack_lvl print_report ? __virt_addr_valid ? hugepage_has_attrs ? hugepage_has_attrs kasan_report ? hugepage_has_attrs hugepage_has_attrs kvm_arch_post_set_memory_attributes kvm_vm_ioctl

It is a little ambiguous whether the unaligned head page (in the bug case also the tail page) should be expected to have KVM_LPAGE_MIXED_FLAG set. It is not functionally required, as the unal ---truncated---

Record
CVE-2024-26991
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVBELL-CVE-2024-26991 5.5
Record
BELL-CVE-2024-26991
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.5

KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes

Fix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger KASAN splat, as seen in the private_mem_conversions_test selftest.

When memory attributes are set on a GFN range, that range will have specific properties applied to the TDP. A huge page cannot be used when the attributes are inconsistent, so they are disabled for those the specific huge pages. For internal KVM reasons, huge pages are also not allowed to span adjacent memslots regardless of whether the backing memory could be mapped as huge.

What GFNs support which huge page sizes is tracked by an array of arrays 'lpage_info' on the memslot, of ‘kvm_lpage_info’ structs. Each index of lpage_info contains a vmalloc allocated array of these for a specific supported page size. The kvm_lpage_info denotes whether a specific huge page (GFN and page size) on the memslot is supported. These arrays include indices for unaligned head and tail huge pages.

Preventing huge pages from spanning adjacent memslot is covered by incrementing the count in head and tail kvm_lpage_info when the memslot is allocated, but disallowing huge pages for memory that has mixed attributes has to be done in a more complicated way. During the KVM_SET_MEMORY_ATTRIBUTES ioctl KVM updates lpage_info for each memslot in the range that has mismatched attributes. KVM does this a memslot at a time, and marks a special bit, KVM_LPAGE_MIXED_FLAG, in the kvm_lpage_info for any huge page. This bit is essentially a permanently elevated count. So huge pages will not be mapped for the GFN at that page size if the count is elevated in either case: a huge head or tail page unaligned to the memslot or if KVM_LPAGE_MIXED_FLAG is set because it has mixed attributes.

To determine whether a huge page has consistent attributes, the KVM_SET_MEMORY_ATTRIBUTES operation checks an xarray to make sure it consistently has the incoming attribute. Since level - 1 huge pages are aligned to level huge pages, it employs an optimization. As long as the level - 1 huge pages are checked first, it can just check these and assume that if each level - 1 huge page contained within the level sized huge page is not mixed, then the level size huge page is not mixed. This optimization happens in the helper hugepage_has_attrs().

Unfortunately, although the kvm_lpage_info array representing page size 'level' will contain an entry for an unaligned tail page of size level, the array for level - 1 will not contain an entry for each GFN at page size level. The level - 1 array will only contain an index for any unaligned region covered by level - 1 huge page size, which can be a smaller region. So this causes the optimization to overflow the level - 1 kvm_lpage_info and perform a vmalloc out of bounds read.

In some cases of head and tail pages where an overflow could happen, callers skip the operation completely as KVM_LPAGE_MIXED_FLAG is not required to prevent huge pages as discussed earlier. But for memslots that are smaller than the 1GB page size, it does call hugepage_has_attrs(). In this case the huge page is both the head and tail page. The issue can be observed simply by compiling the kernel with CONFIG_KASAN_VMALLOC and running the selftest “private_mem_conversions_test”, which produces the output like the following:

BUG: KASAN: vmalloc-out-of-bounds in hugepage_has_attrs+0x7e/0x110 Read of size 4 at addr ffffc900000a3008 by task private_mem_con/169 Call Trace: dump_stack_lvl print_report ? __virt_addr_valid ? hugepage_has_attrs ? hugepage_has_attrs kasan_report ? hugepage_has_attrs hugepage_has_attrs kvm_arch_post_set_memory_attributes kvm_vm_ioctl

It is a little ambiguous whether the unaligned head page (in the bug case also the tail page) should be expected to have KVM_LPAGE_MIXED_FLAG set. It is not functionally required, as the unal ---truncated---

Record
CVE-2024-26991
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 13 moreShow less
OSVDEBIAN-CVE-2024-26991 5.5

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes Fix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger KASAN splat, as seen in the private_mem_conversions_test selftest. When memory attributes are set on a GFN range, that range will have specific properties applied to the TDP. A huge page cannot be used when the attributes are inconsistent, so they are disabled for those the specific huge pages. For internal KVM reasons, huge pages are also not allowed to span adjacent memslots regardless of whether the backing memory could be mapped as huge. What GFNs support which huge page sizes is tracked by an array of arrays 'lpage_info' on the memslot, of ‘kvm_lpage_info’ structs. Each index of lpage_info contains a vmalloc allocated array of these for a specific supported page size. The kvm_lpage_info denotes whether a specific huge page (GFN and page size) on the memslot is supported. These arrays include indices for unaligned head and tail huge pages. Preventing huge pages from spanning adjacent memslot is covered by incrementing the count in head and tail kvm_lpage_info when the memslot is allocated, but disallowing huge pages for memory that has mixed attributes has to be done in a more complicated way. During the KVM_SET_MEMORY_ATTRIBUTES ioctl KVM updates lpage_info for each memslot in the range that has mismatched attributes. KVM does this a memslot at a time, and marks a special bit, KVM_LPAGE_MIXED_FLAG, in the kvm_lpage_info for any huge page. This bit is essentially a permanently elevated count. So huge pages will not be mapped for the GFN at that page size if the count is elevated in either case: a huge head or tail page unaligned to the memslot or if KVM_LPAGE_MIXED_FLAG is set because it has mixed attributes. To determine whether a huge page has consistent attributes, the KVM_SET_MEMORY_ATTRIBUTES operation checks an xarray to make sure it consistently has the incoming attribute. Since level - 1 huge pages are aligned to level huge pages, it employs an optimization. As long as the level - 1 huge pages are checked first, it can just check these and assume that if each level - 1 huge page contained within the level sized huge page is not mixed, then the level size huge page is not mixed. This optimization happens in the helper hugepage_has_attrs(). Unfortunately, although the kvm_lpage_info array representing page size 'level' will contain an entry for an unaligned tail page of size level, the array for level - 1 will not contain an entry for each GFN at page size level. The level - 1 array will only contain an index for any unaligned region covered by level - 1 huge page size, which can be a smaller region. So this causes the optimization to overflow the level - 1 kvm_lpage_info and perform a vmalloc out of bounds read. In some cases of head and tail pages where an overflow could happen, callers skip the operation completely as KVM_LPAGE_MIXED_FLAG is not required to prevent huge pages as discussed earlier. But for memslots that are smaller than the 1GB page size, it does call hugepage_has_attrs(). In this case the huge page is both the head and tail page. The issue can be observed simply by compiling the kernel with CONFIG_KASAN_VMALLOC and running the selftest “private_mem_conversions_test”, which produces the output like the following: BUG: KASAN: vmalloc-out-of-bounds in hugepage_has_attrs+0x7e/0x110 Read of size 4 at addr ffffc900000a3008 by task private_mem_con/169 Call Trace: dump_stack_lvl print_report ? __virt_addr_valid ? hugepage_has_attrs ? hugepage_has_attrs kasan_report ? hugepage_has_attrs hugepage_has_attrs kvm_arch_post_set_memory_attributes kvm_vm_ioctl It is a little ambiguous whether the unaligned head page (in the bug case also the tail page) should be expected to have KVM_LPAGE_MIXED_FLAG set. It is not functionally required, as the unal ---truncated---

Record
DEBIAN-CVE-2024-26991
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:6997 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:6997
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-26991 5.5

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes Fix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger KASAN splat, as seen in the private_mem_conversions_test selftest. When memory attributes are set on a GFN range, that range will have specific properties applied to the TDP. A huge page cannot be used when the attributes are inconsistent, so they are disabled for those the specific huge pages. For internal KVM reasons, huge pages are also not allowed to span adjacent memslots regardless of whether the backing memory could be mapped as huge. What GFNs support which huge page sizes is tracked by an array of arrays 'lpage_info' on the memslot, of ‘kvm_lpage_info’ structs. Each index of lpage_info contains a vmalloc allocated array of these for a specific supported page size. The kvm_lpage_info denotes whether a specific huge page (GFN and page size) on the memslot is supported. These arrays include indices for unaligned head and tail huge pages. Preventing huge pages from spanning adjacent memslot is covered by incrementing the count in head and tail kvm_lpage_info when the memslot is allocated, but disallowing huge pages for memory that has mixed attributes has to be done in a more complicated way. During the KVM_SET_MEMORY_ATTRIBUTES ioctl KVM updates lpage_info for each memslot in the range that has mismatched attributes. KVM does this a memslot at a time, and marks a special bit, KVM_LPAGE_MIXED_FLAG, in the kvm_lpage_info for any huge page. This bit is essentially a permanently elevated count. So huge pages will not be mapped for the GFN at that page size if the count is elevated in either case: a huge head or tail page unaligned to the memslot or if KVM_LPAGE_MIXED_FLAG is set because it has mixed attributes. To determine whether a huge page has consistent attributes, the KVM_SET_MEMORY_ATTRIBUTES operation checks an xarray to make sure it consistently has the incoming attribute. Since level - 1 huge pages are aligned to level huge pages, it employs an optimization. As long as the level - 1 huge pages are checked first, it can just check these and assume that if each level - 1 huge page contained within the level sized huge page is not mixed, then the level size huge page is not mixed. This optimization happens in the helper hugepage_has_attrs(). Unfortunately, although the kvm_lpage_info array representing page size 'level' will contain an entry for an unaligned tail page of size level, the array for level - 1 will not contain an entry for each GFN at page size level. The level - 1 array will only contain an index for any unaligned region covered by level - 1 huge page size, which can be a smaller region. So this causes the optimization to overflow the level - 1 kvm_lpage_info and perform a vmalloc out of bounds read. In some cases of head and tail pages where an overflow could happen, callers skip the operation completely as KVM_LPAGE_MIXED_FLAG is not required to prevent huge pages as discussed earlier. But for memslots that are smaller than the 1GB page size, it does call hugepage_has_attrs(). In this case the huge page is both the head and tail page. The issue can be observed simply by compiling the kernel with CONFIG_KASAN_VMALLOC and running the selftest “private_mem_conversions_test”, which produces the output like the following: BUG: KASAN: vmalloc-out-of-bounds in hugepage_has_attrs+0x7e/0x110 Read of size 4 at addr ffffc900000a3008 by task private_mem_con/169 Call Trace: dump_stack_lvl print_report ? __virt_addr_valid ? hugepage_has_attrs ? hugepage_has_attrs kasan_report ? hugepage_has_attrs hugepage_has_attrs kvm_arch_post_set_memory_attributes kvm_vm_ioctl It is a little ambiguous whether the unaligned head page (in the bug case also the tail page) should be expected to have KVM_LPAGE_MIXED_FLAG set. It is not functionally required, as the unal ---truncated---

Record
UBUNTU-CVE-2024-26991
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2024:6997 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
  • kernel: net/sched: act_mirred: don't override retval if we already lost the skb (CVE-2024-26739)
  • kernel: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CVE-2024-26947)
  • kernel: scsi: qla2xxx: Fix command flush on cable pull (CVE-2024-26931)
  • kernel: scsi: qla2xxx: Fix double free of the ha->vp_map pointer (CVE-2024-26930)
  • kernel: scsi: qla2xxx: Fix double free of fcport (CVE-2024-26929)
  • kernel: fork: defer linking file vma until vma is fully initialized (CVE-2024-27022)
  • kernel: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (CVE-2024-26991)
  • kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem (CVE-2024-35895)
  • kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016)
  • kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899)
  • kernel: cpufreq: exit() callback is optional (CVE-2024-38615)
  • kernel: ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601)
  • kernel: cppc_cpufreq: Fix possible null pointer dereference (CVE-2024-38573)
  • kernel: gfs2: Fix potential glock use-after-free on unmount (CVE-2024-38570)
  • kernel: wifi: nl80211: Avoid address calculations via out of bounds array indexing (CVE-2024-38562)
  • kernel: Input: cyapa - add missing input core locking to suspend/resume functions (CVE-2023-52884)
  • kernel: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CVE-2024-40984)
  • kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing (CVE-2024-41071)
  • kernel: wifi: mt76: replace skb_put with skb_put_zero (CVE-2024-42225)
  • kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CVE-2024-42246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:6997
Updated
2026-11-02
OSVSUSE-SU-2024:2135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
  • CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
  • CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
  • CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
  • CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
  • CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
  • CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
  • CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
  • CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
  • CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
  • CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
  • CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
  • CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
  • CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
  • CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
  • CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
  • CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
  • CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
  • CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
  • CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
  • CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
  • CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
  • CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2023-6270: Fixed a use-after-free issue in…
Record
SUSE-SU-2024:2135-1
Updated
2026-11-02
OSVSUSE-SU-2024:2203-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
  • CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
  • CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
  • CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
  • CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
  • CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
  • CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
  • CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
  • CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-26632: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635).
  • CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
  • CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
  • CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
  • CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
  • CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
  • CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
  • CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26704: Fixed a…
Record
SUSE-SU-2024:2203-1
Updated
2026-11-02
OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
  • CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
  • CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
  • CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
  • CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
  • CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
  • CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
  • CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
  • CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
  • CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
  • CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
  • CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
  • CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
  • CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
  • CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
  • CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
  • CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
  • CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
  • CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
  • CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…
Record
SUSE-SU-2024:2973-1
Updated
2026-11-02
OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
  • CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
  • CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
  • CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
  • CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
  • CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
  • CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
  • CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
  • CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
  • CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
  • CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
  • CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
  • CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
  • CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
  • CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
  • CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
  • CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
  • CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
  • CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
  • CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
  • CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
  • CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
  • CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
  • CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
  • CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
  • CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
  • CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
  • CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
  • CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
  • CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
  • CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
  • CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
  • CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
  • CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
  • CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
  • CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
  • CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
  • CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
  • CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
  • CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
  • CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
  • CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
  • CVE-2024-35890:…
Record
SUSE-SU-2025:20008-1
Updated
2026-11-02
OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
  • CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
  • CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
  • CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
  • CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
  • CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
  • CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
  • CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
  • CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
  • CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
  • CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
  • CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
  • CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
  • CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
  • CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
  • CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
  • CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
  • CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
  • CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
  • CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
  • CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
  • CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
  • CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
  • CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
  • CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
  • CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
  • CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
  • CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
  • CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
  • CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
  • CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
  • CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
  • CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
  • CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
  • CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
  • CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
  • CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
  • CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
  • CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
  • CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
  • CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
  • CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…
Record
SUSE-SU-2025:20028-1
Updated
2026-11-02
OSVUSN-6893-1 No score

linux, linux-azure, linux-gcp, linux-ibm, linux-intel, linux-lowlatency, linux-oem-6.8, linux-raspi vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Accessibility subsystem;
  • Android drivers;
  • Drivers core;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • Buffer Sharing and Synchronization framework;
  • GPU drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Device tree and open firmware driver;
  • Chrome hardware platform drivers;
  • i.MX PM domains;
  • TI SCI PM domains driver;
  • S/390 drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • Framebuffer layer;
  • BTRFS file system;
  • Network file system server daemon;
  • NILFS2 file system;
  • File systems infrastructure;
  • Pstore file system;
  • SMB network file system;
  • BPF subsystem;
  • Bluetooth subsystem;
  • Netfilter;
  • io_uring subsystem;
  • Core kernel;
  • Extra boot config (XBC);
  • Memory management;
  • Amateur Radio drivers;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • NFC subsystem;
  • RDS protocol;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • Wireless networking;
  • eXpress Data Path;
  • SELinux security module; (CVE-2024-35967, CVE-2024-35886, CVE-2024-26999, CVE-2024-27008, CVE-2024-26988, CVE-2024-35980, CVE-2024-26982, CVE-2024-35946, CVE-2024-35918, CVE-2024-27015, CVE-2024-35900, CVE-2024-35942, CVE-2024-35879, CVE-2024-35961, CVE-2024-35944, CVE-2024-35934, CVE-2024-35978, CVE-2024-35938, CVE-2024-27003, CVE-2024-35976, CVE-2024-36019, CVE-2024-35880, CVE-2024-35866, CVE-2024-35929, CVE-2024-35917, CVE-2024-35912, CVE-2024-35896, CVE-2024-26986, CVE-2024-35951, CVE-2024-35958, CVE-2024-26997, CVE-2024-35965, CVE-2024-35953, CVE-2024-26993, CVE-2024-26991, CVE-2024-35892, CVE-2024-36026, CVE-2024-35882, CVE-2024-35964, CVE-2024-35865, CVE-2024-35897, CVE-2024-26981, CVE-2024-35872, CVE-2024-36027, CVE-2024-26983, CVE-2024-35909, CVE-2024-35985, CVE-2024-35875, CVE-2024-35890, CVE-2024-26922, CVE-2024-26994, CVE-2024-35903, CVE-2024-35936, CVE-2024-35904, CVE-2024-27013, CVE-2024-36025, CVE-2024-26980, CVE-2024-27006, CVE-2024-35861, CVE-2024-35864, CVE-2024-27018, CVE-2024-36022, CVE-2024-26990, CVE-2024-35968, CVE-2024-35860, CVE-2024-36024, CVE-2024-35933, CVE-2024-27019, CVE-2024-35925, CVE-2024-35950, CVE-2024-35915, CVE-2024-35916, CVE-2024-35956, CVE-2024-36020, CVE-2024-35873, CVE-2024-27002, CVE-2024-35963, CVE-2024-35959, CVE-2024-35937, CVE-2024-27011, CVE-2024-27020, CVE-2024-35883, CVE-2024-35913, CVE-2024-35910, CVE-2024-27021, CVE-2024-35921, CVE-2024-35905, CVE-2024-27010, CVE-2024-35981, CVE-2024-35885, CVE-2024-35955, CVE-2024-35894, CVE-2024-35969, CVE-2024-36018, CVE-2024-35867, CVE-2024-27007, CVE-2024-35908, CVE-2024-26985, CVE-2024-27016, CVE-2024-35960, CVE-2024-35935, CVE-2024-35932, CVE-2024-35957, CVE-2024-27001, CVE-2024-35871, CVE-2024-35907, CVE-2024-35878, CVE-2024-35979, CVE-2024-35972, CVE-2024-35975, CVE-2024-35877, CVE-2024-35926, CVE-2024-26817, CVE-2024-35899, CVE-2024-27004, CVE-2024-35920, CVE-2024-35924, CVE-2024-35977, CVE-2024-35930, CVE-2024-35911, CVE-2024-26996,…
Record
USN-6893-1
Updated
2026-11-02
OSVUSN-6893-2 No score

linux-gke, linux-nvidia vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Accessibility subsystem;
  • Android drivers;
  • Drivers core;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • Buffer Sharing and Synchronization framework;
  • GPU drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Device tree and open firmware driver;
  • Chrome hardware platform drivers;
  • i.MX PM domains;
  • TI SCI PM domains driver;
  • S/390 drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • Framebuffer layer;
  • BTRFS file system;
  • Network file system server daemon;
  • NILFS2 file system;
  • File systems infrastructure;
  • Pstore file system;
  • SMB network file system;
  • BPF subsystem;
  • Bluetooth subsystem;
  • Netfilter;
  • io_uring subsystem;
  • Core kernel;
  • Extra boot config (XBC);
  • Memory management;
  • Amateur Radio drivers;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • NFC subsystem;
  • RDS protocol;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • Wireless networking;
  • eXpress Data Path;
  • SELinux security module; (CVE-2024-35976, CVE-2024-35873, CVE-2024-35959, CVE-2024-27012, CVE-2024-36025, CVE-2024-35868, CVE-2024-26995, CVE-2024-35916, CVE-2024-36023, CVE-2024-35964, CVE-2024-35890, CVE-2024-26980, CVE-2024-35950, CVE-2024-27006, CVE-2024-35955, CVE-2024-35885, CVE-2024-35960, CVE-2024-35932, CVE-2024-26986, CVE-2024-35884, CVE-2024-35860, CVE-2024-36020, CVE-2024-35930, CVE-2024-35919, CVE-2024-27020, CVE-2024-26928, CVE-2024-35903, CVE-2024-35907, CVE-2024-35904, CVE-2024-35972, CVE-2024-35892, CVE-2024-26921, CVE-2024-35869, CVE-2024-35957, CVE-2024-35967, CVE-2024-35927, CVE-2024-35946, CVE-2024-27000, CVE-2024-35943, CVE-2024-35902, CVE-2024-27013, CVE-2024-35968, CVE-2024-35970, CVE-2024-35865, CVE-2024-36022, CVE-2024-26993, CVE-2024-36027, CVE-2024-35895, CVE-2024-35908, CVE-2024-35901, CVE-2024-35872, CVE-2024-26925, CVE-2024-35917, CVE-2024-35898, CVE-2024-35861, CVE-2024-35900, CVE-2024-26984, CVE-2024-35891, CVE-2023-52699, CVE-2024-35961, CVE-2024-35951, CVE-2024-36019, CVE-2024-27021, CVE-2024-35939, CVE-2024-26997, CVE-2024-26999, CVE-2024-35897, CVE-2024-35896, CVE-2024-26817, CVE-2024-35875, CVE-2024-35935, CVE-2024-27015, CVE-2024-26982, CVE-2024-35958, CVE-2024-26989, CVE-2024-26922, CVE-2024-26811, CVE-2024-27003, CVE-2024-35920, CVE-2024-27007, CVE-2024-35879, CVE-2024-35979, CVE-2024-35978, CVE-2024-35914, CVE-2024-35938, CVE-2024-35913, CVE-2024-26985, CVE-2024-35915, CVE-2024-35974, CVE-2024-27001, CVE-2024-35940, CVE-2024-35867, CVE-2024-26994, CVE-2024-35886, CVE-2024-35899, CVE-2024-27022, CVE-2024-35910, CVE-2024-35893, CVE-2024-27010, CVE-2024-36024, CVE-2024-26926, CVE-2024-26923, CVE-2024-26990, CVE-2024-35912, CVE-2024-26987, CVE-2024-35966, CVE-2024-35977, CVE-2024-35866, CVE-2024-35975, CVE-2024-35965, CVE-2024-35933, CVE-2024-26936, CVE-2024-35889, CVE-2024-35863, CVE-2024-27002, CVE-2024-27018, CVE-2024-36021, CVE-2024-27019, CVE-2024-35921, CVE-2024-35870,…
Record
USN-6893-2
Updated
2026-11-02
OSVUSN-6893-3 No score

linux-aws vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Accessibility subsystem;
  • Android drivers;
  • Drivers core;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • Buffer Sharing and Synchronization framework;
  • GPU drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Device tree and open firmware driver;
  • Chrome hardware platform drivers;
  • i.MX PM domains;
  • TI SCI PM domains driver;
  • S/390 drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • Framebuffer layer;
  • BTRFS file system;
  • Network file system server daemon;
  • NILFS2 file system;
  • File systems infrastructure;
  • Pstore file system;
  • SMB network file system;
  • BPF subsystem;
  • Bluetooth subsystem;
  • Netfilter;
  • io_uring subsystem;
  • Core kernel;
  • Extra boot config (XBC);
  • Memory management;
  • Amateur Radio drivers;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • NFC subsystem;
  • RDS protocol;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • Wireless networking;
  • eXpress Data Path;
  • SELinux security module; (CVE-2024-35955, CVE-2024-35921, CVE-2024-35946, CVE-2024-35934, CVE-2024-26993, CVE-2024-35899, CVE-2024-35952, CVE-2024-35894, CVE-2024-35886, CVE-2024-35872, CVE-2024-35970, CVE-2024-35936, CVE-2024-35907, CVE-2024-27013, CVE-2024-35910, CVE-2024-27009, CVE-2024-35875, CVE-2024-36021, CVE-2024-26923, CVE-2024-26997, CVE-2024-35978, CVE-2024-35981, CVE-2024-27015, CVE-2024-26928, CVE-2024-35963, CVE-2024-35897, CVE-2024-27020, CVE-2024-35922, CVE-2024-27001, CVE-2024-27011, CVE-2024-35940, CVE-2024-35871, CVE-2024-35900, CVE-2024-35869, CVE-2024-35905, CVE-2024-35974, CVE-2024-35873, CVE-2024-35882, CVE-2024-35914, CVE-2024-35956, CVE-2024-35887, CVE-2024-35920, CVE-2024-27018, CVE-2024-35880, CVE-2024-35943, CVE-2024-35912, CVE-2024-35979, CVE-2024-35862, CVE-2024-36019, CVE-2024-35950, CVE-2024-35977, CVE-2024-35918, CVE-2024-26992, CVE-2024-35884, CVE-2024-35916, CVE-2024-26817, CVE-2024-35959, CVE-2024-35909, CVE-2024-35933, CVE-2024-35982, CVE-2024-26996, CVE-2024-35980, CVE-2024-36018, CVE-2024-26925, CVE-2024-35929, CVE-2024-35971, CVE-2024-26990, CVE-2024-35885, CVE-2024-36025, CVE-2024-26998, CVE-2024-35930, CVE-2024-26982, CVE-2024-36022, CVE-2024-35895, CVE-2024-35902, CVE-2024-35911, CVE-2024-27002, CVE-2024-35968, CVE-2024-35861, CVE-2024-35903, CVE-2024-36026, CVE-2024-35896, CVE-2024-35945, CVE-2024-26936, CVE-2024-35954, CVE-2024-26985, CVE-2024-35908, CVE-2024-35924, CVE-2024-35938, CVE-2024-26991, CVE-2024-27017, CVE-2024-26922, CVE-2024-35919, CVE-2024-35915, CVE-2024-35985, CVE-2024-26995, CVE-2024-35870, CVE-2024-27010, CVE-2024-35904, CVE-2024-26999, CVE-2024-26983, CVE-2024-35939, CVE-2024-35865, CVE-2024-35860, CVE-2024-35944, CVE-2024-27021, CVE-2024-27016, CVE-2024-27004, CVE-2024-27019, CVE-2024-36027, CVE-2024-35890, CVE-2024-35975, CVE-2024-35901, CVE-2024-35967, CVE-2024-26986, CVE-2024-35957, CVE-2024-35937, CVE-2024-26988, CVE-2024-35972, CVE-2024-35926, CVE-2024-26926,…
Record
USN-6893-3
Updated
2026-11-02
OSVUSN-6918-1 No score

linux-oracle vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service.

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • Accessibility subsystem;
  • Android drivers;
  • Drivers core;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Cryptographic API;
  • Buffer Sharing and Synchronization framework;
  • GPU drivers;
  • On-Chip Interconnect management framework;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Device tree and open firmware driver;
  • Chrome hardware platform drivers;
  • i.MX PM domains;
  • TI SCI PM domains driver;
  • S/390 drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Thermal drivers;
  • TTY drivers;
  • USB subsystem;
  • Framebuffer layer;
  • BTRFS file system;
  • Network file system server daemon;
  • NILFS2 file system;
  • File systems infrastructure;
  • Pstore file system;
  • SMB network file system;
  • BPF subsystem;
  • Bluetooth subsystem;
  • Netfilter;
  • io_uring subsystem;
  • Core kernel;
  • Extra boot config (XBC);
  • Memory management;
  • Amateur Radio drivers;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • NFC subsystem;
  • RDS protocol;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • Wireless networking;
  • eXpress Data Path;
  • SELinux security module; (CVE-2024-26988, CVE-2024-36023, CVE-2024-35869, CVE-2024-35938, CVE-2024-27000, CVE-2024-35880, CVE-2024-35915, CVE-2024-35959, CVE-2024-35883, CVE-2024-35886, CVE-2024-35976, CVE-2024-35903, CVE-2024-35980, CVE-2024-27020, CVE-2024-35955, CVE-2024-35964, CVE-2024-26980, CVE-2024-35882, CVE-2024-35927, CVE-2024-35884, CVE-2024-35914, CVE-2024-35905, CVE-2024-26925, CVE-2024-35885, CVE-2024-26990, CVE-2024-27012, CVE-2024-35969, CVE-2024-35862, CVE-2024-35956, CVE-2024-35971, CVE-2024-27022, CVE-2024-35935, CVE-2024-26992, CVE-2024-27010, CVE-2024-35892, CVE-2024-26999, CVE-2024-26989, CVE-2024-35963, CVE-2024-35981, CVE-2024-26997, CVE-2024-35920, CVE-2024-35918, CVE-2024-35933, CVE-2024-35867, CVE-2024-35904, CVE-2024-35890, CVE-2024-35968, CVE-2024-35917, CVE-2024-35897, CVE-2024-26922, CVE-2024-36026, CVE-2024-27013, CVE-2024-26991, CVE-2024-26996, CVE-2024-35873, CVE-2024-26987, CVE-2024-35895, CVE-2024-36027, CVE-2024-35896, CVE-2024-35894, CVE-2024-26983, CVE-2024-35966, CVE-2024-35967, CVE-2024-35945, CVE-2024-27003, CVE-2024-35939, CVE-2024-35861, CVE-2024-26985, CVE-2024-27015, CVE-2024-35982, CVE-2024-35912, CVE-2024-35979, CVE-2024-35879, CVE-2024-26982, CVE-2024-35891, CVE-2024-35925, CVE-2024-35870, CVE-2024-27021, CVE-2024-35866, CVE-2024-27014, CVE-2024-27001, CVE-2024-27004, CVE-2024-35953, CVE-2024-36021, CVE-2024-35931, CVE-2024-27007, CVE-2024-35922, CVE-2024-35872, CVE-2024-35926, CVE-2024-27016, CVE-2024-26984, CVE-2024-35919, CVE-2024-35911, CVE-2024-26923, CVE-2024-35929, CVE-2024-35887, CVE-2024-35893, CVE-2024-35898, CVE-2024-35930, CVE-2024-35934, CVE-2024-35916, CVE-2024-35877, CVE-2024-26926, CVE-2024-35974, CVE-2024-36018, CVE-2024-27002, CVE-2024-35975, CVE-2024-35864, CVE-2024-35958, CVE-2024-35944, CVE-2024-35985, CVE-2024-35940, CVE-2024-35900, CVE-2024-27018, CVE-2024-26936, CVE-2024-36024, CVE-2024-26998, CVE-2024-35954, CVE-2024-35878, CVE-2024-26928, CVE-2024-35952, CVE-2024-36020, CVE-2024-26986, CVE-2024-35950,…
Record
USN-6918-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:9
From an advisory covering 21 CVEs
 before 7.3.0-427.37.1.el9_4
7.3.0-427.37.1.el9_4
kernel
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-debug
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-devel
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-modules
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-cross-headers
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-debug
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-debug-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-debug-devel
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-debug-modules
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-devel
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-devel-matched
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-doc
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-headers
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-modules
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-modules-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-modules-extra
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt-debug
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt-devel
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt-modules
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt-modules-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-rt-modules-extra
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-tools
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-tools-libs
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-tools-libs-devel
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-uki-virt
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-zfcpdump
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-zfcpdump-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-zfcpdump-devel
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-zfcpdump-devel-matched
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-zfcpdump-modules
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-zfcpdump-modules-core
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
kernel-zfcpdump-modules-extra
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
libperf
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
perf
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
python3-perf
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
rtla
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
rv
AlmaLinux:9
From an advisory covering 21 CVEs
 before 5.14.0-427.37.1.el9_4
5.14.0-427.37.1.el9_4
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
Kernel
Linux
 6.8.0 up to 6.8.8
6.8.8
linux
Debian:13
 before 6.8.9-1
6.8.9-1
linux
Debian:14
 before 6.8.9-1
6.8.9-1
bpftool-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:7.3.0-427.37.1.el9_4
0:7.3.0-427.37.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
bpftool
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:7.3.0-427.37.1.el9_4
0:7.3.0-427.37.1.el9_4
bpftool-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:7.3.0-427.37.1.el9_4
0:7.3.0-427.37.1.el9_4
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-tools
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-tools-libs
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-zfcpdump
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-zfcpdump-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-zfcpdump-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-zfcpdump-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
libperf-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
perf-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
python3-perf
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
python3-perf-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
bpftool-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:7.3.0-427.37.1.el9_4
0:7.3.0-427.37.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-tools-libs-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
libperf
Red Hat:enterprise_linux:9::crb
From an advisory covering 21 CVEs
 before 0:5.14.0-427.37.1.el9_4
0:5.14.0-427.37.1.el9_4
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3.150600.12.2.7
6.4.0-150600.23.7.3.150600.12.2.7
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.4
6.4.0-150600.23.7.4
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-livepatch-SLE15-SP6_Update_1
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 408 CVEs
 before 1-150600.13.3.7
1-150600.13.3.7
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3.150600.12.2.7
6.4.0-150600.23.7.3.150600.12.2.7
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.4
6.4.0-150600.23.7.4
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-livepatch-SLE15-SP6-RT_Update_1
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 783 CVEs
 before 1-150600.1.5.1
1-150600.1.5.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-18.1
6.4.0-18.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-17.1.1.51
6.4.0-17.1.1.51
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-18.1
6.4.0-18.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-18.1
6.4.0-18.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 826 CVEs
 before 6.4.0-9.1
6.4.0-9.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 826 CVEs
 before 6.4.0-9.1
6.4.0-9.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1011.12~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.2
6.8.0-1011.12~22.04.1
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1010.10~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.1
6.8.0-1010.10~22.04.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
 None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-nvidia-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
 None known
linux-nvidia-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1009.9~22.04.1, plus listed versions
6.8.0-1008.8~22.04.1
6.8.0-1009.9~22.04.1
linux-oem-5.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
 None known
linux-oem-6.0
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
 None known
linux-oem-6.1
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
 None known
linux-oracle-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1008.8~22.04.1, plus listed versions
6.8.0-1006.6~22.04.3
6.8.0-1008.8~22.04.1
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-riscv-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
 None known
linux-starfive-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
 None known
linux-starfive-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1
 None known
linux
Ubuntu:24.04:LTS
 before 6.8.0-38.38, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 4 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.36
6.8.0-38.38
linux-aws
Ubuntu:24.04:LTS
 before 6.8.0-1011.12, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.86.8.0-1009.96.8.0-1010.10
6.8.0-1011.12
linux-azure
Ubuntu:24.04:LTS
 before 6.8.0-1010.10, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.9
6.8.0-1010.10
linux-gcp
Ubuntu:24.04:LTS
 before 6.8.0-1010.11, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.66.8.0-1007.76.8.0-1008.96.8.0-1009.10
6.8.0-1010.11
linux-gke
Ubuntu:24.04:LTS
 before 6.8.0-1006.9, plus listed versions
6.8.0-1003.56.8.0-1004.76.8.0-1005.8
6.8.0-1006.9
linux-ibm
Ubuntu:24.04:LTS
 before 6.8.0-1008.8, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.7
6.8.0-1008.8
linux-intel
Ubuntu:24.04:LTS
 before 6.8.0-1007.14, plus listed versions
6.8.0-1005.126.8.0-1006.13
6.8.0-1007.14
linux-lowlatency
Ubuntu:24.04:LTS
 before 6.8.0-38.38.1, plus listed versions
6.5.0-9.9.16.6.0-14.14.16.8.0-7.7.16.8.0-25.25.36.8.0-28.28.16.8.0-31.31.16.8.0-35.35.16.8.0-36.36.1
6.8.0-38.38.1
linux-nvidia
Ubuntu:24.04:LTS
 before 6.8.0-1009.9, plus listed versions
6.8.0-1007.76.8.0-1008.8
6.8.0-1009.9
linux-oem-6.8
Ubuntu:24.04:LTS
 before 6.8.0-1008.8, plus listed versions
6.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.7
6.8.0-1008.8
linux-oracle
Ubuntu:24.04:LTS
 before 6.8.0-1008.8, plus listed versions
6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.56.8.0-1006.6
6.8.0-1008.8
linux-raspi
Ubuntu:24.04:LTS
 before 6.8.0-1007.7, plus listed versions
6.5.0-1005.76.7.0-1001.16.8.0-1001.16.8.0-1002.26.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.6
6.8.0-1007.7
linux-riscv
Ubuntu:24.04:LTS
 before 6.8.0-38.38.1, plus listed versions
6.5.0-9.9.16.8.0-20.20.16.8.0-28.28.16.8.0-31.31.16.8.0-35.35.16.8.0-36.36.1
6.8.0-38.38.1
linux-raspi-realtime
Ubuntu:Pro:Realtime:24.04:LTS
 before 6.8.0-2006.6, plus listed versions
6.7.0-2001.16.8.0-2001.16.8.0-2002.26.8.0-2004.46.8.0-2005.5
6.8.0-2006.6
linux-realtime
Ubuntu:Pro:Realtime:24.04:LTS
 before 6.8.1-1004.4, plus listed versions
6.8.0-1008.196.8.1-1001.16.8.1-1002.26.8.1-1003.3
6.8.1-1004.4
linux
Ubuntu:24.04:LTS
From an advisory covering 179 CVEs
 before 6.8.0-38.38, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 4 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.36
6.8.0-38.38
linux-azure
Ubuntu:24.04:LTS
From an advisory covering 179 CVEs
 before 6.8.0-1010.10, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.9
6.8.0-1010.10
linux-gcp
Ubuntu:24.04:LTS
From an advisory covering 179 CVEs
 before 6.8.0-1010.11, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.66.8.0-1007.76.8.0-1008.96.8.0-1009.10
6.8.0-1010.11
linux-ibm
Ubuntu:24.04:LTS
From an advisory covering 179 CVEs
 before 6.8.0-1008.8, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.7
6.8.0-1008.8
linux-intel
Ubuntu:24.04:LTS
From an advisory covering 179 CVEs
 before 6.8.0-1007.14, plus listed versions
6.8.0-1005.126.8.0-1006.13
6.8.0-1007.14
linux-lowlatency
Ubuntu:24.04:LTS
From an advisory covering 179 CVEs
 before 6.8.0-38.38.1, plus listed versions
6.5.0-9.9.16.6.0-14.14.16.8.0-7.7.16.8.0-25.25.36.8.0-28.28.16.8.0-31.31.16.8.0-35.35.16.8.0-36.36.1
6.8.0-38.38.1
linux-oem-6.8
Ubuntu:24.04:LTS
From an advisory covering 179 CVEs
 before 6.8.0-1008.8, plus listed versions
6.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.7
6.8.0-1008.8
linux-raspi
Ubuntu:24.04:LTS
From an advisory covering 179 CVEs
 before 6.8.0-1007.7, plus listed versions
6.5.0-1005.76.7.0-1001.16.8.0-1001.16.8.0-1002.26.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.6
6.8.0-1007.7
linux-gke
Ubuntu:24.04:LTS
From an advisory covering 179 CVEs
 before 6.8.0-1006.9, plus listed versions
6.8.0-1003.56.8.0-1004.76.8.0-1005.8
6.8.0-1006.9

History

History
RecordedChangedSources
affected
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-26991 is a medium vulnerability (CVSS 5.5) in Linux, published May 1, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 13th percentile. Fixed in linux-lts 6.12.41-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 52 package rows, 1 version, 2,048 references and the rest of 9 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open