CVE-2024-35884

udp: do not accept non-tunnel GSO skbs landing in a tunnel

9.8 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

udp: do not accept non-tunnel GSO skbs landing in a tunnel

When rx-udp-gro-forwarding is enabled UDP packets might be GROed when being forwarded. If such packets might land in a tunnel this can cause various issues and udp_gro_receive makes sure this isn't the case by looking for a matching socket. This is performed in udp4/6_gro_lookup_skb but only in the current netns. This is an issue with tunneled packets when the endpoint is in another netns. In such cases the packets will be GROed at the UDP level, which leads to various issues later on. The same thing can happen with rx-gro-list.

We saw this with geneve packets being GROed at the UDP level. In such case gso_size is set; later the packet goes through the geneve rx path, the geneve header is pulled, the offset are adjusted and frag_list skbs are not adjusted with regard to geneve. When those skbs hit skb_fragment, it will misbehave. Different outcomes are possible depending on what the GROed skbs look like; from corrupted packets to kernel crashes.

One example is a BUG_ON[1] triggered in skb_segment while processing the frag_list. Because gso_size is wrong (geneve header was pulled) skb_segment thinks there is "geneve header size" of data in frag_list, although it's in fact the next packet. The BUG_ON itself has nothing to do with the issue. This is only one of the potential issues.

Looking up for a matching socket in udp_gro_receive is fragile: the lookup could be extended to all netns (not speaking about performances) but nothing prevents those packets from being modified in between and we could still not find a matching socket. It's OK to keep the current logic there as it should cover most cases but we also need to make sure we handle tunnel packets being GROed too early.

This is done by extending the checks in udp_unexpected_gso: GSO packets lacking the SKB_GSO_UDP_TUNNEL/_CSUM bits and landing in a tunnel must be segmented.

[1] kernel BUG at net/core/skbuff.c:4408! RIP: 0010:skb_segment+0xd2a/0xf70 __udp_gso_segment+0xaa/0x560

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.69%Up 0.6 points since May 20, 2024

What each source reports

CVE List Score used 9.8

udp: do not accept non-tunnel GSO skbs landing in a tunnel

In the Linux kernel, the following vulnerability has been resolved:

udp: do not accept non-tunnel GSO skbs landing in a tunnel

This is done by extending the checks in udp_unexpected_gso: GSO packets lacking the SKB_GSO_UDP_TUNNEL/_CSUM bits and landing in a tunnel must be segmented.

[1] kernel BUG at net/core/skbuff.c:4408! RIP: 0010:skb_segment+0xd2a/0xf70 __udp_gso_segment+0xaa/0x560

Record: CVE-2024-35884
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2024-35602 9.8

In the Linux kernel, the following vulnerability has been resolved:

udp: do not accept non-tunnel GSO skbs landing in a tunnel

This is done by extending the checks in udp_unexpected_gso: GSO packets lacking the SKB_GSO_UDP_TUNNEL/_CSUM bits and landing in a tunnel must be segmented.

[1] kernel BUG at net/core/skbuff.c:4408! RIP: 0010:skb_segment+0xd2a/0xf70 __udp_gso_segment+0xaa/0x560

Record: EUVD-2024-35602
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-fw47-mxv2-w4h2 8.8

In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non...

In the Linux kernel, the following vulnerability has been resolved:

udp: do not accept non-tunnel GSO skbs landing in a tunnel

This is done by extending the checks in udp_unexpected_gso: GSO packets lacking the SKB_GSO_UDP_TUNNEL/_CSUM bits and landing in a tunnel must be segmented.

[1] kernel BUG at net/core/skbuff.c:4408! RIP: 0010:skb_segment+0xd2a/0xf70 __udp_gso_segment+0xaa/0x560

Record: GHSA-fw47-mxv2-w4h2
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-617
Updated: 2026-11-02

NVD 9.8

In the Linux kernel, the following vulnerability has been resolved:

udp: do not accept non-tunnel GSO skbs landing in a tunnel

This is done by extending the checks in udp_unexpected_gso: GSO packets lacking the SKB_GSO_UDP_TUNNEL/_CSUM bits and landing in a tunnel must be segmented.

[1] kernel BUG at net/core/skbuff.c:4408! RIP: 0010:skb_segment+0xd2a/0xf70 __udp_gso_segment+0xaa/0x560

Record: CVE-2024-35884
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-617
Updated: 2026-11-02

OSVBELL-CVE-2024-35884 5.5

Record: BELL-CVE-2024-35884
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 9.8

udp: do not accept non-tunnel GSO skbs landing in a tunnel

In the Linux kernel, the following vulnerability has been resolved:

udp: do not accept non-tunnel GSO skbs landing in a tunnel

This is done by extending the checks in udp_unexpected_gso: GSO packets lacking the SKB_GSO_UDP_TUNNEL/_CSUM bits and landing in a tunnel must be segmented.

[1] kernel BUG at net/core/skbuff.c:4408! RIP: 0010:skb_segment+0xd2a/0xf70 __udp_gso_segment+0xaa/0x560

Record: CVE-2024-35884
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 32 moreShow less

OSVDEBIAN-CVE-2024-35884 5.5

In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non-tunnel GSO skbs landing in a tunnel When rx-udp-gro-forwarding is enabled UDP packets might be GROed when being forwarded. If such packets might land in a tunnel this can cause various issues and udp_gro_receive makes sure this isn't the case by looking for a matching socket. This is performed in udp4/6_gro_lookup_skb but only in the current netns. This is an issue with tunneled packets when the endpoint is in another netns. In such cases the packets will be GROed at the UDP level, which leads to various issues later on. The same thing can happen with rx-gro-list. We saw this with geneve packets being GROed at the UDP level. In such case gso_size is set; later the packet goes through the geneve rx path, the geneve header is pulled, the offset are adjusted and frag_list skbs are not adjusted with regard to geneve. When those skbs hit skb_fragment, it will misbehave. Different outcomes are possible depending on what the GROed skbs look like; from corrupted packets to kernel crashes. One example is a BUG_ON[1] triggered in skb_segment while processing the frag_list. Because gso_size is wrong (geneve header was pulled) skb_segment thinks there is "geneve header size" of data in frag_list, although it's in fact the next packet. The BUG_ON itself has nothing to do with the issue. This is only one of the potential issues. Looking up for a matching socket in udp_gro_receive is fragile: the lookup could be extended to all netns (not speaking about performances) but nothing prevents those packets from being modified in between and we could still not find a matching socket. It's OK to keep the current logic there as it should cover most cases but we also need to make sure we handle tunnel packets being GROed too early. This is done by extending the checks in udp_unexpected_gso: GSO packets lacking the SKB_GSO_UDP_TUNNEL/_CSUM bits and landing in a tunnel must be segmented. [1] kernel BUG at net/core/skbuff.c:4408! RIP: 0010:skb_segment+0xd2a/0xf70 __udp_gso_segment+0xaa/0x560

Record: DEBIAN-CVE-2024-35884
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2024:7000 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:7000
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:7001 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:7001
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:8107 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:8107
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2024:8161 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:8161
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2024:7000 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26638 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26846 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52798 CVE-2023-52809 CVE-2023-52817 CVE-2023-52840 CVE-2023-52800 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36922 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36919 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38579 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41023 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41064 CVE-2024-41065 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42094 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42225 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43830 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2024:7000
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-35884 8.2

Record: UBUNTU-CVE-2024-35884
CVSS 4.0: 8.2 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-11

OSVALSA-2024:7000 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

Record: ALSA-2024:7000
Updated: 2026-11-02

OSVALSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52817 CVE-2023-52840 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:7001
Updated: 2026-11-02

OSVCLSA-2024-1727815919 No score

kernel: Fix of 73 CVEs

firmware: cs_dsp: Return error if block header overflows file {CVE-2024-42238}
scsi: qedf: Make qedf_execute_tmf() non-preemptible {CVE-2024-42124}
ftruncate: pass a signed offset {CVE-2024-42084}
firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files {CVE-2024-41056}
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor {CVE-2024-41035}
xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005}
drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
scsi: mpi3mr: Avoid memcpy field-spanning write WARNING {CVE-2024-36920}
dmaengine: idxd: Fix oops during rmmod on single-CPU platforms {CVE-2024-35989}
udp: do not accept non-tunnel GSO skbs landing in a tunnel {CVE-2024-35884}
nvme-fc: do not wait in vain when unloading module {CVE-2024-26846}
drm/amdgpu: Fix the null pointer when load rlc firmware {CVE-2024-26649}
Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() {CVE-2023-52840}
wifi: ath11k: fix htt pktlog locking {CVE-2023-52800}
wifi: ath11k: fix dfs radar event locking {CVE-2023-52798}
ACPI: LPIT: Avoid u32 multiplication overflow {CVE-2023-52683}
ACPI: extlog: fix NULL pointer dereference check {CVE-2023-52605}
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
phylib: fix potential use-after-free {CVE-2022-48754}
serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527}
nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
mlxsw: thermal: Fix out-of-bounds memory accesses {CVE-2021-47441}
hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs {CVE-2021-47393}
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386}
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385}
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47384}
virtio-net: Add validation for used length {CVE-2021-47352}
fbmem: Do not delete the mode that is still in use {CVE-2021-47338}
watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
ACPI: fix NULL pointer dereference {CVE-2021-47289}
driver core: auxiliary bus: Fix memory leak when driver_register() fail {CVE-2021-47287}
Input: elantech - fix stack out of bound access in elantech_change_report_id() {CVE-2021-47097}
HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts {CVE-2022-48866}
ipv6: prevent possible NULL dereference in rt6_probe() {CVE-2024-40960}
xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() {CVE-2024-40959}
wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941}
wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912}
wifi: cfg80211: Lock wiphy in cfg80211_get_station {CVE-2024-40911}
USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages {CVE-2024-40904}
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet {CVE-2024-39506}
vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
crypto: bcm - Fix pointer arithmetic {CVE-2024-38579}
scsi: qedf: Ensure the copied buf is NUL terminated {CVE-2024-38559}
net: openvswitch: fix overwriting ct original tuple for ICMPv6…

Record: CLSA-2024-1727815919
Updated: 2026-11-02

OSVCLSA-2025-1746479711 No score

kernel-uek: Fix of 225 CVEs

sctp: sysctl: auth_enable: avoid using current->nsproxy
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640}
bpf: Use preempt_count() directly in bpf_send_signal_common()
Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy"
jfs: fix slab-out-of-bounds read in ea_get()
serial: 8250_dma: terminate correct DMA in tx_dma_flush()
Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy"
net: usb: usbnet: restore usb%d name exception for local mac addresses
vlan: fix memory leak in vlan_newlink() {CVE-2022-49636}
rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity
LTS tag: v5.4.291
eeprom: digsy_mtc: Make GPIO lookup table match the device
slimbus: messaging: Free transaction ID in delayed interrupt scenario {CVE-2025-21914}
intel_th: pci: Add Panther Lake-P/U support
intel_th: pci: Add Panther Lake-H support
intel_th: pci: Add Arrow Lake support
Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
xhci: pci: Fix indentation in the PCI device ID definitions
usb: gadget: Check bmAttributes only if configuration is valid
usb: gadget: Fix setting self-powered state on suspend
usb: gadget: Set self-powered based on MaxPower and bmAttributes
usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
usb: typec: ucsi: increase timeout for PPM reset operations
usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
usb: renesas_usbhs: Flush the notify_hotplug_work {CVE-2025-21917}
usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
usb: renesas_usbhs: Use devm_usb_get_phy()
usb: renesas_usbhs: Call clk_put()
Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
gpio: rcar: Fix missing of_node_put() call
net: ipv6: fix missing dst ref drop in ila lwtunnel
net: ipv6: fix dst ref loop in ila lwtunnel
net-timestamp: support TCP GSO case for a few missing flags
vlan: enforce underlying device type {CVE-2025-21920}
ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
drm/sched: Fix preprocessor guard
hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
llc: do not use skb_get() before dev_queue_xmit() {CVE-2025-21925}
hwmon: (ad7314) Validate leading zero bits and return error
hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
hwmon: (pmbus) Initialise page count in pmbus_identify()
caif_virtio: fix wrong pointer check in cfv_probe() {CVE-2025-21904}
net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926}
HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
HID: google: fix unused variable warning under !CONFIG_ACPI
wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905}
mm/page_alloc: fix uninitialized variable
rapidio: fix an API misues when rio_add_net() fails {CVE-2025-21934}
rapidio: add check for rio_add_net() in rio_scan_alloc_net()
wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
x86/cpu: Validate CPUID leaf 0x2 EDX output
x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
ALSA: hda/realtek: update ALC222 depop optimize
ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
drm/amdgpu: disable BAR resize on Dell G5 SE
drm/amdgpu: Check extended configuration space register when system uses large bar
drm/amdgpu: skip BAR resizing if the bios already…

Record: CLSA-2025-1746479711
Updated: 2026-11-02

OSVRLSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

Record: RLSA-2024:7001
Updated: 2026-11-02

OSVSUSE-SU-2024:2372-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282bsc#1222072).
CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (git-fixesbsc#1223641).
CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
CVE-2024-35861:…

Record: SUSE-SU-2024:2372-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2394-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282, bsc#1222072).
CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (bsc#1223641).
CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
CVE-2024-35857: icmp: prevent possible…

Record: SUSE-SU-2024:2394-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2571-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758).
CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52865: Add check for mtk_alloc_clk_data (bsc#1225086).
CVE-2023-52821: Fixed a possible null pointer dereference (bsc#1225022).
CVE-2023-52867: Fixed possible buffer overflow (bsc#1225009).
CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,).
CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
CVE-2023-52759: Ignore negated quota changes (bsc#1225560).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52864: Fixed opening of char device (bsc#1225132).
CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
CVE-2024-35843: iommu/vt-d: Use device rbtree in iopf reporting path (bsc#1224751).
CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799).
CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841).
CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879).
CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789).
CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
CVE-2024-38556:…

Record: SUSE-SU-2024:2571-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2896-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). -…

Record: SUSE-SU-2024:2896-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2939-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958).
CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
CVE-2021-47546: ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571).
CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len. (bsc#1226555).
CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071).
CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869).
CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
CVE-2023-52787: blk-mq: make…

Record: SUSE-SU-2024:2939-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…

Record: SUSE-SU-2024:2973-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
CVE-2024-35890:…

Record: SUSE-SU-2025:20008-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…

Record: SUSE-SU-2025:20028-1
Updated: 2026-11-02

OSVUSN-6893-1 No score

linux, linux-azure, linux-gcp, linux-ibm, linux-intel, linux-lowlatency, linux-oem-6.8, linux-raspi vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Accessibility subsystem;
Android drivers;
Drivers core;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
Buffer Sharing and Synchronization framework;
GPU drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Device tree and open firmware driver;
Chrome hardware platform drivers;
i.MX PM domains;
TI SCI PM domains driver;
S/390 drivers;
SCSI drivers;
SPI subsystem;
Thermal drivers;
TTY drivers;
USB subsystem;
Framebuffer layer;
BTRFS file system;
Network file system server daemon;
NILFS2 file system;
File systems infrastructure;
Pstore file system;
SMB network file system;
BPF subsystem;
Bluetooth subsystem;
Netfilter;
io_uring subsystem;
Core kernel;
Extra boot config (XBC);
Memory management;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
NFC subsystem;
RDS protocol;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
SELinux security module; (CVE-2024-35967, CVE-2024-35886, CVE-2024-26999, CVE-2024-27008, CVE-2024-26988, CVE-2024-35980, CVE-2024-26982, CVE-2024-35946, CVE-2024-35918, CVE-2024-27015, CVE-2024-35900, CVE-2024-35942, CVE-2024-35879, CVE-2024-35961, CVE-2024-35944, CVE-2024-35934, CVE-2024-35978, CVE-2024-35938, CVE-2024-27003, CVE-2024-35976, CVE-2024-36019, CVE-2024-35880, CVE-2024-35866, CVE-2024-35929, CVE-2024-35917, CVE-2024-35912, CVE-2024-35896, CVE-2024-26986, CVE-2024-35951, CVE-2024-35958, CVE-2024-26997, CVE-2024-35965, CVE-2024-35953, CVE-2024-26993, CVE-2024-26991, CVE-2024-35892, CVE-2024-36026, CVE-2024-35882, CVE-2024-35964, CVE-2024-35865, CVE-2024-35897, CVE-2024-26981, CVE-2024-35872, CVE-2024-36027, CVE-2024-26983, CVE-2024-35909, CVE-2024-35985, CVE-2024-35875, CVE-2024-35890, CVE-2024-26922, CVE-2024-26994, CVE-2024-35903, CVE-2024-35936, CVE-2024-35904, CVE-2024-27013, CVE-2024-36025, CVE-2024-26980, CVE-2024-27006, CVE-2024-35861, CVE-2024-35864, CVE-2024-27018, CVE-2024-36022, CVE-2024-26990, CVE-2024-35968, CVE-2024-35860, CVE-2024-36024, CVE-2024-35933, CVE-2024-27019, CVE-2024-35925, CVE-2024-35950, CVE-2024-35915, CVE-2024-35916, CVE-2024-35956, CVE-2024-36020, CVE-2024-35873, CVE-2024-27002, CVE-2024-35963, CVE-2024-35959, CVE-2024-35937, CVE-2024-27011, CVE-2024-27020, CVE-2024-35883, CVE-2024-35913, CVE-2024-35910, CVE-2024-27021, CVE-2024-35921, CVE-2024-35905, CVE-2024-27010, CVE-2024-35981, CVE-2024-35885, CVE-2024-35955, CVE-2024-35894, CVE-2024-35969, CVE-2024-36018, CVE-2024-35867, CVE-2024-27007, CVE-2024-35908, CVE-2024-26985, CVE-2024-27016, CVE-2024-35960, CVE-2024-35935, CVE-2024-35932, CVE-2024-35957, CVE-2024-27001, CVE-2024-35871, CVE-2024-35907, CVE-2024-35878, CVE-2024-35979, CVE-2024-35972, CVE-2024-35975, CVE-2024-35877, CVE-2024-35926, CVE-2024-26817, CVE-2024-35899, CVE-2024-27004, CVE-2024-35920, CVE-2024-35924, CVE-2024-35977, CVE-2024-35930, CVE-2024-35911, CVE-2024-26996,…

Record: USN-6893-1
Updated: 2026-11-02

OSVUSN-6893-2 No score

linux-gke, linux-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Accessibility subsystem;
Android drivers;
Drivers core;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
Buffer Sharing and Synchronization framework;
GPU drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Device tree and open firmware driver;
Chrome hardware platform drivers;
i.MX PM domains;
TI SCI PM domains driver;
S/390 drivers;
SCSI drivers;
SPI subsystem;
Thermal drivers;
TTY drivers;
USB subsystem;
Framebuffer layer;
BTRFS file system;
Network file system server daemon;
NILFS2 file system;
File systems infrastructure;
Pstore file system;
SMB network file system;
BPF subsystem;
Bluetooth subsystem;
Netfilter;
io_uring subsystem;
Core kernel;
Extra boot config (XBC);
Memory management;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
NFC subsystem;
RDS protocol;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
SELinux security module; (CVE-2024-35976, CVE-2024-35873, CVE-2024-35959, CVE-2024-27012, CVE-2024-36025, CVE-2024-35868, CVE-2024-26995, CVE-2024-35916, CVE-2024-36023, CVE-2024-35964, CVE-2024-35890, CVE-2024-26980, CVE-2024-35950, CVE-2024-27006, CVE-2024-35955, CVE-2024-35885, CVE-2024-35960, CVE-2024-35932, CVE-2024-26986, CVE-2024-35884, CVE-2024-35860, CVE-2024-36020, CVE-2024-35930, CVE-2024-35919, CVE-2024-27020, CVE-2024-26928, CVE-2024-35903, CVE-2024-35907, CVE-2024-35904, CVE-2024-35972, CVE-2024-35892, CVE-2024-26921, CVE-2024-35869, CVE-2024-35957, CVE-2024-35967, CVE-2024-35927, CVE-2024-35946, CVE-2024-27000, CVE-2024-35943, CVE-2024-35902, CVE-2024-27013, CVE-2024-35968, CVE-2024-35970, CVE-2024-35865, CVE-2024-36022, CVE-2024-26993, CVE-2024-36027, CVE-2024-35895, CVE-2024-35908, CVE-2024-35901, CVE-2024-35872, CVE-2024-26925, CVE-2024-35917, CVE-2024-35898, CVE-2024-35861, CVE-2024-35900, CVE-2024-26984, CVE-2024-35891, CVE-2023-52699, CVE-2024-35961, CVE-2024-35951, CVE-2024-36019, CVE-2024-27021, CVE-2024-35939, CVE-2024-26997, CVE-2024-26999, CVE-2024-35897, CVE-2024-35896, CVE-2024-26817, CVE-2024-35875, CVE-2024-35935, CVE-2024-27015, CVE-2024-26982, CVE-2024-35958, CVE-2024-26989, CVE-2024-26922, CVE-2024-26811, CVE-2024-27003, CVE-2024-35920, CVE-2024-27007, CVE-2024-35879, CVE-2024-35979, CVE-2024-35978, CVE-2024-35914, CVE-2024-35938, CVE-2024-35913, CVE-2024-26985, CVE-2024-35915, CVE-2024-35974, CVE-2024-27001, CVE-2024-35940, CVE-2024-35867, CVE-2024-26994, CVE-2024-35886, CVE-2024-35899, CVE-2024-27022, CVE-2024-35910, CVE-2024-35893, CVE-2024-27010, CVE-2024-36024, CVE-2024-26926, CVE-2024-26923, CVE-2024-26990, CVE-2024-35912, CVE-2024-26987, CVE-2024-35966, CVE-2024-35977, CVE-2024-35866, CVE-2024-35975, CVE-2024-35965, CVE-2024-35933, CVE-2024-26936, CVE-2024-35889, CVE-2024-35863, CVE-2024-27002, CVE-2024-27018, CVE-2024-36021, CVE-2024-27019, CVE-2024-35921, CVE-2024-35870,…

Record: USN-6893-2
Updated: 2026-11-02

OSVUSN-6893-3 No score

linux-aws vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Accessibility subsystem;
Android drivers;
Drivers core;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
Buffer Sharing and Synchronization framework;
GPU drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Device tree and open firmware driver;
Chrome hardware platform drivers;
i.MX PM domains;
TI SCI PM domains driver;
S/390 drivers;
SCSI drivers;
SPI subsystem;
Thermal drivers;
TTY drivers;
USB subsystem;
Framebuffer layer;
BTRFS file system;
Network file system server daemon;
NILFS2 file system;
File systems infrastructure;
Pstore file system;
SMB network file system;
BPF subsystem;
Bluetooth subsystem;
Netfilter;
io_uring subsystem;
Core kernel;
Extra boot config (XBC);
Memory management;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
NFC subsystem;
RDS protocol;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
SELinux security module; (CVE-2024-35955, CVE-2024-35921, CVE-2024-35946, CVE-2024-35934, CVE-2024-26993, CVE-2024-35899, CVE-2024-35952, CVE-2024-35894, CVE-2024-35886, CVE-2024-35872, CVE-2024-35970, CVE-2024-35936, CVE-2024-35907, CVE-2024-27013, CVE-2024-35910, CVE-2024-27009, CVE-2024-35875, CVE-2024-36021, CVE-2024-26923, CVE-2024-26997, CVE-2024-35978, CVE-2024-35981, CVE-2024-27015, CVE-2024-26928, CVE-2024-35963, CVE-2024-35897, CVE-2024-27020, CVE-2024-35922, CVE-2024-27001, CVE-2024-27011, CVE-2024-35940, CVE-2024-35871, CVE-2024-35900, CVE-2024-35869, CVE-2024-35905, CVE-2024-35974, CVE-2024-35873, CVE-2024-35882, CVE-2024-35914, CVE-2024-35956, CVE-2024-35887, CVE-2024-35920, CVE-2024-27018, CVE-2024-35880, CVE-2024-35943, CVE-2024-35912, CVE-2024-35979, CVE-2024-35862, CVE-2024-36019, CVE-2024-35950, CVE-2024-35977, CVE-2024-35918, CVE-2024-26992, CVE-2024-35884, CVE-2024-35916, CVE-2024-26817, CVE-2024-35959, CVE-2024-35909, CVE-2024-35933, CVE-2024-35982, CVE-2024-26996, CVE-2024-35980, CVE-2024-36018, CVE-2024-26925, CVE-2024-35929, CVE-2024-35971, CVE-2024-26990, CVE-2024-35885, CVE-2024-36025, CVE-2024-26998, CVE-2024-35930, CVE-2024-26982, CVE-2024-36022, CVE-2024-35895, CVE-2024-35902, CVE-2024-35911, CVE-2024-27002, CVE-2024-35968, CVE-2024-35861, CVE-2024-35903, CVE-2024-36026, CVE-2024-35896, CVE-2024-35945, CVE-2024-26936, CVE-2024-35954, CVE-2024-26985, CVE-2024-35908, CVE-2024-35924, CVE-2024-35938, CVE-2024-26991, CVE-2024-27017, CVE-2024-26922, CVE-2024-35919, CVE-2024-35915, CVE-2024-35985, CVE-2024-26995, CVE-2024-35870, CVE-2024-27010, CVE-2024-35904, CVE-2024-26999, CVE-2024-26983, CVE-2024-35939, CVE-2024-35865, CVE-2024-35860, CVE-2024-35944, CVE-2024-27021, CVE-2024-27016, CVE-2024-27004, CVE-2024-27019, CVE-2024-36027, CVE-2024-35890, CVE-2024-35975, CVE-2024-35901, CVE-2024-35967, CVE-2024-26986, CVE-2024-35957, CVE-2024-35937, CVE-2024-26988, CVE-2024-35972, CVE-2024-35926, CVE-2024-26926,…

Record: USN-6893-3
Updated: 2026-11-02

OSVUSN-6898-1 No score

linux, linux-gcp, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-oracle vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…

Record: USN-6898-1
Updated: 2026-11-02

OSVUSN-6898-2 No score

linux-ibm-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…

Record: USN-6898-2
Updated: 2026-11-02

OSVUSN-6898-3 No score

linux-aws, linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…

Record: USN-6898-3
Updated: 2026-11-02

OSVUSN-6898-4 No score

linux-aws-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35872, CVE-2024-35807, CVE-2024-27013, CVE-2024-35989, CVE-2024-36008, CVE-2024-26957, CVE-2024-35912, CVE-2024-27000, CVE-2024-35918, CVE-2024-26977, CVE-2024-35821, CVE-2024-35853, CVE-2024-26814, CVE-2024-35823, CVE-2024-35958, CVE-2024-26813, CVE-2024-26811, CVE-2024-26937, CVE-2024-26951, CVE-2024-35925, CVE-2024-26929, CVE-2024-35988, CVE-2024-35902, CVE-2024-26994, CVE-2024-27001, CVE-2024-36029, CVE-2024-36005, CVE-2024-35970, CVE-2024-36007, CVE-2024-35809, CVE-2024-27019, CVE-2024-26970, CVE-2024-27059, CVE-2024-35877, CVE-2024-35899, CVE-2024-26989, CVE-2024-27008, CVE-2024-26812, CVE-2024-35969, CVE-2024-35785, CVE-2024-35871, CVE-2024-35847, CVE-2024-36006, CVE-2024-35973, CVE-2024-27396, CVE-2024-35849, CVE-2024-35990, CVE-2024-26960, CVE-2024-26931, CVE-2024-35852, CVE-2024-26965, CVE-2024-35960, CVE-2024-35813, CVE-2024-26976, CVE-2024-36004, CVE-2024-35895, CVE-2024-27018, CVE-2024-26969, CVE-2024-27016, CVE-2024-27437, CVE-2024-26956, CVE-2024-26629,…

Record: USN-6898-4
Updated: 2026-11-02

OSVUSN-6917-1 No score

linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
Distributed Switch Architecture;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
Key management;
ALSA SH drivers;
KVM core; (CVE-2024-26993, CVE-2024-26996, CVE-2024-35879, CVE-2024-26812, CVE-2024-26984, CVE-2024-26817, CVE-2024-35950, CVE-2024-26960, CVE-2024-27437, CVE-2024-26964, CVE-2024-27059, CVE-2024-35969, CVE-2024-35936, CVE-2024-35912, CVE-2024-35915, CVE-2024-35938, CVE-2024-27019, CVE-2024-35822, CVE-2024-35997, CVE-2024-35855, CVE-2024-26925, CVE-2024-26654, CVE-2024-26923, CVE-2024-36031, CVE-2024-36020, CVE-2024-35823, CVE-2024-35852, CVE-2024-35989, CVE-2024-27000, CVE-2024-35853, CVE-2024-27013, CVE-2024-35854, CVE-2024-35922, CVE-2024-26937, CVE-2023-52880, CVE-2024-26974, CVE-2024-26629, CVE-2024-35804, CVE-2024-35958, CVE-2024-26814, CVE-2024-35890, CVE-2024-35940, CVE-2024-26999, CVE-2024-35847, CVE-2024-27015, CVE-2024-26687, CVE-2024-26970, CVE-2024-35930, CVE-2024-26813, CVE-2024-26810, CVE-2024-26969, CVE-2024-26977, CVE-2024-26956, CVE-2024-35901, CVE-2024-27020,…

Record: USN-6917-1
Updated: 2026-11-02

OSVUSN-6918-1 No score

linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Accessibility subsystem;
Android drivers;
Drivers core;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
Buffer Sharing and Synchronization framework;
GPU drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Device tree and open firmware driver;
Chrome hardware platform drivers;
i.MX PM domains;
TI SCI PM domains driver;
S/390 drivers;
SCSI drivers;
SPI subsystem;
Thermal drivers;
TTY drivers;
USB subsystem;
Framebuffer layer;
BTRFS file system;
Network file system server daemon;
NILFS2 file system;
File systems infrastructure;
Pstore file system;
SMB network file system;
BPF subsystem;
Bluetooth subsystem;
Netfilter;
io_uring subsystem;
Core kernel;
Extra boot config (XBC);
Memory management;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
NFC subsystem;
RDS protocol;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
SELinux security module; (CVE-2024-26988, CVE-2024-36023, CVE-2024-35869, CVE-2024-35938, CVE-2024-27000, CVE-2024-35880, CVE-2024-35915, CVE-2024-35959, CVE-2024-35883, CVE-2024-35886, CVE-2024-35976, CVE-2024-35903, CVE-2024-35980, CVE-2024-27020, CVE-2024-35955, CVE-2024-35964, CVE-2024-26980, CVE-2024-35882, CVE-2024-35927, CVE-2024-35884, CVE-2024-35914, CVE-2024-35905, CVE-2024-26925, CVE-2024-35885, CVE-2024-26990, CVE-2024-27012, CVE-2024-35969, CVE-2024-35862, CVE-2024-35956, CVE-2024-35971, CVE-2024-27022, CVE-2024-35935, CVE-2024-26992, CVE-2024-27010, CVE-2024-35892, CVE-2024-26999, CVE-2024-26989, CVE-2024-35963, CVE-2024-35981, CVE-2024-26997, CVE-2024-35920, CVE-2024-35918, CVE-2024-35933, CVE-2024-35867, CVE-2024-35904, CVE-2024-35890, CVE-2024-35968, CVE-2024-35917, CVE-2024-35897, CVE-2024-26922, CVE-2024-36026, CVE-2024-27013, CVE-2024-26991, CVE-2024-26996, CVE-2024-35873, CVE-2024-26987, CVE-2024-35895, CVE-2024-36027, CVE-2024-35896, CVE-2024-35894, CVE-2024-26983, CVE-2024-35966, CVE-2024-35967, CVE-2024-35945, CVE-2024-27003, CVE-2024-35939, CVE-2024-35861, CVE-2024-26985, CVE-2024-27015, CVE-2024-35982, CVE-2024-35912, CVE-2024-35979, CVE-2024-35879, CVE-2024-26982, CVE-2024-35891, CVE-2024-35925, CVE-2024-35870, CVE-2024-27021, CVE-2024-35866, CVE-2024-27014, CVE-2024-27001, CVE-2024-27004, CVE-2024-35953, CVE-2024-36021, CVE-2024-35931, CVE-2024-27007, CVE-2024-35922, CVE-2024-35872, CVE-2024-35926, CVE-2024-27016, CVE-2024-26984, CVE-2024-35919, CVE-2024-35911, CVE-2024-26923, CVE-2024-35929, CVE-2024-35887, CVE-2024-35893, CVE-2024-35898, CVE-2024-35930, CVE-2024-35934, CVE-2024-35916, CVE-2024-35877, CVE-2024-26926, CVE-2024-35974, CVE-2024-36018, CVE-2024-27002, CVE-2024-35975, CVE-2024-35864, CVE-2024-35958, CVE-2024-35944, CVE-2024-35985, CVE-2024-35940, CVE-2024-35900, CVE-2024-27018, CVE-2024-26936, CVE-2024-36024, CVE-2024-26998, CVE-2024-35954, CVE-2024-35878, CVE-2024-26928, CVE-2024-35952, CVE-2024-36020, CVE-2024-26986, CVE-2024-35950,…

Record: USN-6918-1
Updated: 2026-11-02

OSVUSN-6919-1 No score

linux-raspi vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client; -…

Record: USN-6919-1
Updated: 2026-11-02

OSVUSN-6927-1 No score

linux-gcp-5.15 vulnerabilities

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
Distributed Switch Architecture;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35902, CVE-2024-35958, CVE-2024-35978, CVE-2024-35886, CVE-2024-35807, CVE-2024-26994, CVE-2024-36004, CVE-2024-35955, CVE-2024-26925, CVE-2024-27059, CVE-2024-35989, CVE-2024-35940, CVE-2024-26952, CVE-2024-35907, CVE-2024-35819, CVE-2024-35872, CVE-2024-36016, CVE-2023-52488, CVE-2024-35884, CVE-2024-26886, CVE-2024-27018, CVE-2024-35905, CVE-2024-35897, CVE-2024-26929, CVE-2024-36007, CVE-2024-35855, CVE-2024-35885, CVE-2024-26965, CVE-2024-35896, CVE-2024-36029, CVE-2024-35813, CVE-2024-26811, CVE-2024-26923,…

Record: USN-6927-1
Updated: 2026-11-02

OSVUSN-7019-1 No score

linux-xilinx-zynqmp vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-40902)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
M68K architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
Bluetooth drivers;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FireWire subsystem;
FPGA Framework;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
IRQ chip drivers;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
EEPROM drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Pin controllers subsystem;
PTP clock framework;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC…

Record: USN-7019-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-rt` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-kvm` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`linux-lts` Alpaquita:23	6.1.82-r0 up to 6.1.89-r0	6.1.89-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`bpftool` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-core` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-cross-headers` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-core` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-devel` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-modules` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-debug-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-devel` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-headers` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-ipaclones-internal` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-modules` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-selftests-internal` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-tools` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-tools-libs` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`kernel-tools-libs-devel` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`perf` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`python3-perf` TuxCare:CentOS-Stream:8 From an advisory covering 75 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els3	4.18.0-553.6.1.el8_10.tuxcare.els3
`bpftool` TuxCare:OracleLinux:7 From an advisory covering 218 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1	5.4.17-2136.338.4.2.el7uek.tuxcare.els1
`kernel-uek` TuxCare:OracleLinux:7 From an advisory covering 218 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1	5.4.17-2136.338.4.2.el7uek.tuxcare.els1
`kernel-uek-container` TuxCare:OracleLinux:7 From an advisory covering 218 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1	5.4.17-2136.338.4.2.el7uek.tuxcare.els1
`kernel-uek-container-debug` TuxCare:OracleLinux:7 From an advisory covering 218 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1	5.4.17-2136.338.4.2.el7uek.tuxcare.els1
`kernel-uek-debug` TuxCare:OracleLinux:7 From an advisory covering 218 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1	5.4.17-2136.338.4.2.el7uek.tuxcare.els1
`kernel-uek-debug-devel` TuxCare:OracleLinux:7 From an advisory covering 218 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1	5.4.17-2136.338.4.2.el7uek.tuxcare.els1
`kernel-uek-devel` TuxCare:OracleLinux:7 From an advisory covering 218 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1	5.4.17-2136.338.4.2.el7uek.tuxcare.els1
`kernel-uek-headers` TuxCare:OracleLinux:7 From an advisory covering 218 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1	5.4.17-2136.338.4.2.el7uek.tuxcare.els1
`kernel-uek-tools` TuxCare:OracleLinux:7 From an advisory covering 218 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1	5.4.17-2136.338.4.2.el7uek.tuxcare.els1
`perf` TuxCare:OracleLinux:7 From an advisory covering 218 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1	5.4.17-2136.338.4.2.el7uek.tuxcare.els1
`python-perf` TuxCare:OracleLinux:7 From an advisory covering 218 CVEs	before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1	5.4.17-2136.338.4.2.el7uek.tuxcare.els1
`Kernel` Linux	5.6.0 up to 5.10.215, 5.11.0 up to 5.15.154, 5.16.0 up to 6.1.85, 6.2.0 up to 6.6.26, 6.7.0 up to 6.8.5	5.10.2155.15.1546.1.856.6.266.8.5
`linux` Debian:12	before 6.1.85-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 14 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1	6.1.85-1
`linux` Debian:13	before 6.8.9-1	6.8.9-1
`linux` Debian:14	before 6.8.9-1	6.8.9-1
`linux-5.10` Debian:10 From an advisory covering 344 CVEs	before 5.10.216-1~deb10u1, plus listed versions 5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1 Show 8 moreShow less 5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1	5.10.216-1~deb10u1
`bpftool` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules-extra` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::realtime From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::realtime From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::realtime From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::realtime From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::realtime From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel` Rocky Linux:8 From an advisory covering 147 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-livepatch-SLE15-SP5-RT_Update_17` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 249 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2.150600.12.4.3	6.4.0-150600.23.14.2.150600.12.4.3
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-livepatch-SLE15-SP6_Update_2` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 285 CVEs	before 1-150600.13.3.2	1-150600.13.3.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2.150600.12.4.3	6.4.0-150600.23.14.2.150600.12.4.3
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.1	6.4.0-150600.8.8.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.1	6.4.0-150600.8.8.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.2	5.14.21-150500.55.73.2
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-livepatch-SLE15-SP5_Update_17` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 531 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` openSUSE:Leap Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` openSUSE:Leap Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.2	5.14.21-150500.55.73.2
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-livepatch-SLE15-SP6-RT_Update_1` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 783 CVEs	before 1-150600.1.5.1	1-150600.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-17.1.1.51	6.4.0-17.1.1.51
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 826 CVEs	before 6.4.0-9.1	6.4.0-9.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 826 CVEs	before 6.4.0-9.1	6.4.0-9.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1065.71~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 35 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.1	5.15.0-1065.71~20.04.1
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1068.77~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 38 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.1	5.15.0-1068.77~20.04.1
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1065.73~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 35 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.1	5.15.0-1065.73~20.04.1
`linux-gkeop-5.15` Ubuntu:20.04:LTS	before 5.15.0-1048.55~20.04.1, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 32 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.1	5.15.0-1048.55~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-116.126~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 35 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.1	5.15.0-116.126~20.04.1
`linux-ibm-5.15` Ubuntu:20.04:LTS	before 5.15.0-1058.61~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 16 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.1	5.15.0-1058.61~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1060.66~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 26 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.1	5.15.0-1060.66~20.04.1
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-116.126~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 35 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.1	5.15.0-116.126~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:20.04:LTS	before 5.15.0-1027.27~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 7 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.1	5.15.0-1027.27~20.04.1
`linux-oracle-5.15` Ubuntu:20.04:LTS	before 5.15.0-1063.69~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 34 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.1	5.15.0-1063.69~20.04.1
`linux-riscv-5.15` Ubuntu:20.04:LTS	before 5.15.0-1061.65~20.04.1, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 33 moreShow less 5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.1	5.15.0-1061.65~20.04.1
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux` Ubuntu:22.04:LTS	before 5.15.0-116.126, plus listed versions 5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23 Show 45 moreShow less 5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115	5.15.0-116.126
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws` Ubuntu:22.04:LTS	before 5.15.0-1065.71, plus listed versions 5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7 Show 44 moreShow less 5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70	5.15.0-1065.71
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	before 6.8.0-1011.12~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.2	6.8.0-1011.12~22.04.1
`linux-azure` Ubuntu:22.04:LTS	before 5.15.0-1068.77, plus listed versions 5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6 Show 45 moreShow less 5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75	5.15.0-1068.77
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known

History

History
Recorded	Changed	Sources
Nov 11, 2026	affected	OSV
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-35884 is a critical vulnerability (CVSS 9.8) in Debian Linux, published May 19, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.69%, the 53rd percentile. Fixed in linux-lts 6.1.89-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 239 package rows, 6 versions, 4,256 references and the rest of 22 source descriptions. The JSON record has them.