CVE-2024-35888

erspan: make sure erspan_base_hdr is present in skb->head

7.3 HighFix available

What does this mean?

: 7.3v3.1, from CVE List
: 0.61%49th percentile
Fixed in: 6.1.89-r0linux-lts
Published: May 19, 2024
Modified: November 11, 2026
Weakness: CWE-908
Also known as: ALSA-2024:4211ALSA-2024:4352BELL-CVE-2024-35888CLSA-2026-1792243434DEBIAN-CVE-2024-35888DLA-3840-1DLA-3842-1EUVD-2024-35606
Show 40 moreShow less
GHSA-mcp4-w22q-6q4hOESA-2024-1705OESA-2024-1706OESA-2024-1707RHSA-2024:4211RHSA-2024:4352RHSA-2024:9315RHSA-2025:3510RLSA-2024:4211RLSA-2024:4352RXSA-2024:4211SUSE-SU-2024:4314-1SUSE-SU-2024:4315-1SUSE-SU-2024:4316-1SUSE-SU-2024:4318-1SUSE-SU-2024:4364-1SUSE-SU-2024:4376-1SUSE-SU-2024:4387-1SUSE-SU-2025:20163-1SUSE-SU-2025:20164-1SUSE-SU-2025:20246-1SUSE-SU-2025:20247-1UBUNTU-CVE-2024-35888USN-6893-1USN-6893-2USN-6893-3USN-6896-1USN-6896-2USN-6896-3USN-6896-4USN-6896-5USN-6898-1USN-6898-2USN-6898-3USN-6898-4USN-6917-1USN-6918-1USN-6919-1USN-6927-1USN-7019-1

In the Linux kernel, the following vulnerability has been resolved:

erspan: make sure erspan_base_hdr is present in skb->head

syzbot reported a problem in ip6erspan_rcv() [1]

Issue is that ip6erspan_rcv() (and erspan_rcv()) no longer make sure erspan_base_hdr is present in skb linear part (skb->head) before getting @ver field from it.

Add the missing pskb_may_pull() calls.

v2: Reload iph pointer in erspan_rcv() after pskb_may_pull() because skb->head might have changed.

[1]

BUG: KMSAN: uninit-value in pskb_may_pull_reason include/linux/skbuff.h:2742 [inline] BUG: KMSAN: uninit-value in pskb_may_pull include/linux/skbuff.h:2756 [inline] BUG: KMSAN: uninit-value in ip6erspan_rcv net/ipv6/ip6_gre.c:541 [inline] BUG: KMSAN: uninit-value in gre_rcv+0x11f8/0x1930 net/ipv6/ip6_gre.c:610 pskb_may_pull_reason include/linux/skbuff.h:2742 [inline] pskb_may_pull include/linux/skbuff.h:2756 [inline] ip6erspan_rcv net/ipv6/ip6_gre.c:541 [inline] gre_rcv+0x11f8/0x1930 net/ipv6/ip6_gre.c:610 ip6_protocol_deliver_rcu+0x1d4c/0x2ca0 net/ipv6/ip6_input.c:438 ip6_input_finish net/ipv6/ip6_input.c:483 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] ip6_input+0x15d/0x430 net/ipv6/ip6_input.c:492 ip6_mc_input+0xa7e/0xc80 net/ipv6/ip6_input.c:586 dst_input include/net/dst.h:460 [inline] ip6_rcv_finish+0x955/0x970 net/ipv6/ip6_input.c:79 NF_HOOK include/linux/netfilter.h:314 [inline] ipv6_rcv+0xde/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5538 [inline] __netif_receive_skb+0x1da/0xa00 net/core/dev.c:5652 netif_receive_skb_internal net/core/dev.c:5738 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5798 tun_rx_batched+0x3ee/0x980 drivers/net/tun.c:1549 tun_get_user+0x5566/0x69e0 drivers/net/tun.c:2002 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:2108 [inline] new_sync_write fs/read_write.c:497 [inline] vfs_write+0xb63/0x1520 fs/read_write.c:590 ksys_write+0x20f/0x4c0 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0x93/0xe0 fs/read_write.c:652 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75

Uninit was created at: slab_post_alloc_hook mm/slub.c:3804 [inline] slab_alloc_node mm/slub.c:3845 [inline] kmem_cache_alloc_node+0x613/0xc50 mm/slub.c:3888 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:577 __alloc_skb+0x35b/0x7a0 net/core/skbuff.c:668 alloc_skb include/linux/skbuff.h:1318 [inline] alloc_skb_with_frags+0xc8/0xbf0 net/core/skbuff.c:6504 sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2795 tun_alloc_skb drivers/net/tun.c:1525 [inline] tun_get_user+0x209a/0x69e0 drivers/net/tun.c:1846 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:2108 [inline] new_sync_write fs/read_write.c:497 [inline] vfs_write+0xb63/0x1520 fs/read_write.c:590 ksys_write+0x20f/0x4c0 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0x93/0xe0 fs/read_write.c:652 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75

CPU: 1 PID: 5045 Comm: syz-executor114 Not tainted 6.9.0-rc1-syzkaller-00021-g962490525cff #0

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

0.61%Up 0.6 points since May 20, 2024

What each source reports

CVE List Score used 7.3

erspan: make sure erspan_base_hdr is present in skb->head

In the Linux kernel, the following vulnerability has been resolved:

erspan: make sure erspan_base_hdr is present in skb->head

syzbot reported a problem in ip6erspan_rcv() [1]

Issue is that ip6erspan_rcv() (and erspan_rcv()) no longer make sure erspan_base_hdr is present in skb linear part (skb->head) before getting @ver field from it.

Add the missing pskb_may_pull() calls.

v2: Reload iph pointer in erspan_rcv() after pskb_may_pull() because skb->head might have changed.

[1]

CPU: 1 PID: 5045 Comm: syz-executor114 Not tainted 6.9.0-rc1-syzkaller-00021-g962490525cff #0

Record: CVE-2024-35888
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

EUVDEUVD-2024-35606 7.3

In the Linux kernel, the following vulnerability has been resolved:

erspan: make sure erspan_base_hdr is present in skb->head

syzbot reported a problem in ip6erspan_rcv() [1]

Issue is that ip6erspan_rcv() (and erspan_rcv()) no longer make sure erspan_base_hdr is present in skb linear part (skb->head) before getting @ver field from it.

Add the missing pskb_may_pull() calls.

v2: Reload iph pointer in erspan_rcv() after pskb_may_pull() because skb->head might have changed.

[1]

CPU: 1 PID: 5045 Comm: syz-executor114 Not tainted 6.9.0-rc1-syzkaller-00021-g962490525cff #0

Record: EUVD-2024-35606
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-mcp4-w22q-6q4h 5.5

In the Linux kernel, the following vulnerability has been resolved: erspan: make sure...

In the Linux kernel, the following vulnerability has been resolved:

erspan: make sure erspan_base_hdr is present in skb->head

syzbot reported a problem in ip6erspan_rcv() [1]

Issue is that ip6erspan_rcv() (and erspan_rcv()) no longer make sure erspan_base_hdr is present in skb linear part (skb->head) before getting @ver field from it.

Add the missing pskb_may_pull() calls.

v2: Reload iph pointer in erspan_rcv() after pskb_may_pull() because skb->head might have changed.

[1]

CPU: 1 PID: 5045 Comm: syz-executor114 Not tainted 6.9.0-rc1-syzkaller-00021-g962490525cff #0

Record: GHSA-mcp4-w22q-6q4h
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-908
Updated: 2026-11-02

NVD 7.3

In the Linux kernel, the following vulnerability has been resolved:

erspan: make sure erspan_base_hdr is present in skb->head

syzbot reported a problem in ip6erspan_rcv() [1]

Issue is that ip6erspan_rcv() (and erspan_rcv()) no longer make sure erspan_base_hdr is present in skb linear part (skb->head) before getting @ver field from it.

Add the missing pskb_may_pull() calls.

v2: Reload iph pointer in erspan_rcv() after pskb_may_pull() because skb->head might have changed.

[1]

CPU: 1 PID: 5045 Comm: syz-executor114 Not tainted 6.9.0-rc1-syzkaller-00021-g962490525cff #0

Record: CVE-2024-35888
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-908
Updated: 2026-11-02

OSVBELL-CVE-2024-35888 7.3

Record: BELL-CVE-2024-35888
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSV 7.3

erspan: make sure erspan_base_hdr is present in skb->head

In the Linux kernel, the following vulnerability has been resolved:

erspan: make sure erspan_base_hdr is present in skb->head

syzbot reported a problem in ip6erspan_rcv() [1]

Issue is that ip6erspan_rcv() (and erspan_rcv()) no longer make sure erspan_base_hdr is present in skb linear part (skb->head) before getting @ver field from it.

Add the missing pskb_may_pull() calls.

v2: Reload iph pointer in erspan_rcv() after pskb_may_pull() because skb->head might have changed.

[1]

CPU: 1 PID: 5045 Comm: syz-executor114 Not tainted 6.9.0-rc1-syzkaller-00021-g962490525cff #0

Record: CVE-2024-35888
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

Show 43 moreShow less

OSVDEBIAN-CVE-2024-35888 7.3

In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspan_base_hdr is present in skb->head syzbot reported a problem in ip6erspan_rcv() [1] Issue is that ip6erspan_rcv() (and erspan_rcv()) no longer make sure erspan_base_hdr is present in skb linear part (skb->head) before getting @ver field from it. Add the missing pskb_may_pull() calls. v2: Reload iph pointer in erspan_rcv() after pskb_may_pull() because skb->head might have changed. [1] BUG: KMSAN: uninit-value in pskb_may_pull_reason include/linux/skbuff.h:2742 [inline] BUG: KMSAN: uninit-value in pskb_may_pull include/linux/skbuff.h:2756 [inline] BUG: KMSAN: uninit-value in ip6erspan_rcv net/ipv6/ip6_gre.c:541 [inline] BUG: KMSAN: uninit-value in gre_rcv+0x11f8/0x1930 net/ipv6/ip6_gre.c:610 pskb_may_pull_reason include/linux/skbuff.h:2742 [inline] pskb_may_pull include/linux/skbuff.h:2756 [inline] ip6erspan_rcv net/ipv6/ip6_gre.c:541 [inline] gre_rcv+0x11f8/0x1930 net/ipv6/ip6_gre.c:610 ip6_protocol_deliver_rcu+0x1d4c/0x2ca0 net/ipv6/ip6_input.c:438 ip6_input_finish net/ipv6/ip6_input.c:483 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] ip6_input+0x15d/0x430 net/ipv6/ip6_input.c:492 ip6_mc_input+0xa7e/0xc80 net/ipv6/ip6_input.c:586 dst_input include/net/dst.h:460 [inline] ip6_rcv_finish+0x955/0x970 net/ipv6/ip6_input.c:79 NF_HOOK include/linux/netfilter.h:314 [inline] ipv6_rcv+0xde/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5538 [inline] __netif_receive_skb+0x1da/0xa00 net/core/dev.c:5652 netif_receive_skb_internal net/core/dev.c:5738 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5798 tun_rx_batched+0x3ee/0x980 drivers/net/tun.c:1549 tun_get_user+0x5566/0x69e0 drivers/net/tun.c:2002 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:2108 [inline] new_sync_write fs/read_write.c:497 [inline] vfs_write+0xb63/0x1520 fs/read_write.c:590 ksys_write+0x20f/0x4c0 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0x93/0xe0 fs/read_write.c:652 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was created at: slab_post_alloc_hook mm/slub.c:3804 [inline] slab_alloc_node mm/slub.c:3845 [inline] kmem_cache_alloc_node+0x613/0xc50 mm/slub.c:3888 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:577 __alloc_skb+0x35b/0x7a0 net/core/skbuff.c:668 alloc_skb include/linux/skbuff.h:1318 [inline] alloc_skb_with_frags+0xc8/0xbf0 net/core/skbuff.c:6504 sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2795 tun_alloc_skb drivers/net/tun.c:1525 [inline] tun_get_user+0x209a/0x69e0 drivers/net/tun.c:1846 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:2108 [inline] new_sync_write fs/read_write.c:497 [inline] vfs_write+0xb63/0x1520 fs/read_write.c:590 ksys_write+0x20f/0x4c0 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0x93/0xe0 fs/read_write.c:652 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 CPU: 1 PID: 5045 Comm: syz-executor114 Not tainted 6.9.0-rc1-syzkaller-00021-g962490525cff #0

Record: DEBIAN-CVE-2024-35888
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSVOESA-2024-1705 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: cdc_eem: fix tx fixup skb leak

when usbnet transmit a skb, eem fixup it in eem_tx_fixup(), if skb_copy_expand() failed, it return NULL, usbnet_start_xmit() will have no chance to free original skb.

fix it by free orginal skb in eem_tx_fixup() first, then check skb clone status, if failed, return NULL to usbnet.(CVE-2021-47236)

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix use-after-free in gfs2_glock_shrink_scan

The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to remove the glock from the lru list in __gfs2_glock_put().

On the shrink scan path, the same flag is cleared under lru_lock but because of cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the put side can be made without deleting the glock from the lru list.

Keep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to ensure correct behavior on both sides - clear GLF_LRU after list_del under lru_lock.(CVE-2021-47254)

In the Linux kernel, the following vulnerability has been resolved:

netrom: Decrease sock refcount when sock timers expire

Commit 63346650c1a9 ("netrom: switch to sock timer API") switched to use sock timer API. It replaces mod_timer() by sk_reset_timer(), and del_timer() by sk_stop_timer().

Function sk_reset_timer() will increase the refcount of sock if it is called on an inactive timer, hence, in case the timer expires, we need to decrease the refcount ourselves in the handler, otherwise, the sock refcount will be unbalanced and the sock will never be freed.(CVE-2021-47294)

In the Linux kernel, the following vulnerability has been resolved:

memory: fsl_ifc: fix leak of IO mapping on probe failure

On probe error the driver should unmap the IO memory. Smatch reports:

drivers/memory/fsl_ifc.c:298 fsl_ifc_ctrl_probe() warn: 'fsl_ifc_ctrl_dev->gregs' not released on lines: 298.(CVE-2021-47315)

In the Linux kernel, the following vulnerability has been resolved:

watchdog: Fix possible use-after-free in wdt_startup()

This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free.

Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.(CVE-2021-47324)

In the Linux kernel, the following vulnerability has been resolved:

scsi: megaraid_sas: Fix resource leak in case of probe failure

The driver doesn't clean up all the allocated resources properly when scsi_add_host(), megasas_start_aen() function fails during the PCI device probe.

Clean up all those resources.(CVE-2021-47329)

In the Linux kernel, the following vulnerability has been resolved:

ipack: ipoctal: fix module reference leak

A reference to the carrier module was taken on every open but was only released once when the final reference to the tty struct was dropped.

Fix this by taking the module reference and initialising the tty driver data when installing the tty.(CVE-2021-47403)

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc2: check return value after calling platform_get_resource()

It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value.(CVE-2021-47409)

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix freeing of uninitialized misc IRQ vector

When VSI set up failed in i40e_probe() as part of PF switch set up driver was trying to free misc IRQ vectors in i40e_clear_interrupt_scheme and produced a kernel Oops:

Trying to free already-free IRQ 266 WARNING:…

Record: OESA-2024-1705
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVOESA-2024-1706 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix use-after-free of encap entry in neigh update handler

Function mlx5e_rep_neigh_update() wasn't updated to accommodate rtnl lock removal from TC filter update path and properly handle concurrent encap entry insertion/deletion which can lead to following use-after-free:

[23827.464923] ================================================================== [23827.469446] BUG: KASAN: use-after-free in mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.470971] Read of size 4 at addr ffff8881d132228c by task kworker/u20:6/21635 [23827.472251] [23827.472615] CPU: 9 PID: 21635 Comm: kworker/u20:6 Not tainted 5.13.0-rc3+ #5 [23827.473788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 [23827.475639] Workqueue: mlx5e mlx5e_rep_neigh_update [mlx5_core] [23827.476731] Call Trace: [23827.477260] dump_stack+0xbb/0x107 [23827.477906] print_address_description.constprop.0+0x18/0x140 [23827.478896] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.479879] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.480905] kasan_report.cold+0x7c/0xd8 [23827.481701] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.482744] kasan_check_range+0x145/0x1a0 [23827.493112] mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.494054] ? mlx5e_tc_tun_encap_info_equal_generic+0x140/0x140 [mlx5_core] [23827.495296] mlx5e_rep_neigh_update+0x41e/0x5e0 [mlx5_core] [23827.496338] ? mlx5e_rep_neigh_entry_release+0xb80/0xb80 [mlx5_core] [23827.497486] ? read_word_at_a_time+0xe/0x20 [23827.498250] ? strscpy+0xa0/0x2a0 [23827.498889] process_one_work+0x8ac/0x14e0 [23827.499638] ? lockdep_hardirqs_on_prepare+0x400/0x400 [23827.500537] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [23827.501359] ? rwlock_bug.part.0+0x90/0x90 [23827.502116] worker_thread+0x53b/0x1220 [23827.502831] ? process_one_work+0x14e0/0x14e0 [23827.503627] kthread+0x328/0x3f0 [23827.504254] ? _raw_spin_unlock_irq+0x24/0x40 [23827.505065] ? __kthread_bind_mask+0x90/0x90 [23827.505912] ret_from_fork+0x1f/0x30 [23827.506621] [23827.506987] Allocated by task 28248: [23827.507694] kasan_save_stack+0x1b/0x40 [23827.508476] __kasan_kmalloc+0x7c/0x90 [23827.509197] mlx5e_attach_encap+0xde1/0x1d40 [mlx5_core] [23827.510194] mlx5e_tc_add_fdb_flow+0x397/0xc40 [mlx5_core] [23827.511218] __mlx5e_add_fdb_flow+0x519/0xb30 [mlx5_core] [23827.512234] mlx5e_configure_flower+0x191c/0x4870 [mlx5_core] [23827.513298] tc_setup_cb_add+0x1d5/0x420 [23827.514023] fl_hw_replace_filter+0x382/0x6a0 [cls_flower] [23827.514975] fl_change+0x2ceb/0x4a51 [cls_flower] [23827.515821] tc_new_tfilter+0x89a/0x2070 [23827.516548] rtnetlink_rcv_msg+0x644/0x8c0 [23827.517300] netlink_rcv_skb+0x11d/0x340 [23827.518021] netlink_unicast+0x42b/0x700 [23827.518742] netlink_sendmsg+0x743/0xc20 [23827.519467] sock_sendmsg+0xb2/0xe0 [23827.520131] ____sys_sendmsg+0x590/0x770 [23827.520851] ___sys_sendmsg+0xd8/0x160 [23827.521552] __sys_sendmsg+0xb7/0x140 [23827.522238] do_syscall_64+0x3a/0x70 [23827.522907] entry_SYSCALL_64_after_hwframe+0x44/0xae [23827.523797] [23827.524163] Freed by task 25948: [23827.524780] kasan_save_stack+0x1b/0x40 [23827.525488] kasan_set_track+0x1c/0x30 [23827.526187] kasan_set_free_info+0x20/0x30 [23827.526968] __kasan_slab_free+0xed/0x130 [23827.527709] slab_free_freelist_hook+0xcf/0x1d0 [23827.528528] kmem_cache_free_bulk+0x33a/0x6e0 [23827.529317] kfree_rcu_work+0x55f/0xb70 [23827.530024] process_one_work+0x8ac/0x14e0 [23827.530770] worker_thread+0x53b/0x1220 [23827.531480] kthread+0x328/0x3f0 [23827.532114] ret_from_fork+0x1f/0x30 [23827.532785] [23827.533147] Last potentially related work creation: [23827.534007] kasan_save_stack+0x1b/0x40 [23827.534710] kasan_record_aux_stack+0xab/0xc0 …

Record: OESA-2024-1706
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVOESA-2024-1707 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix use-after-free of encap entry in neigh update handler

Record: OESA-2024-1707
CVSS 3.1: 0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2024:4211 7.3

Red Hat Security Advisory: kernel security and bug fix update

Record: RHSA-2024:4211
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:4352 7.0

Red Hat Security Advisory: kernel-rt security and bug fix update

Record: RHSA-2024:4352
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:3510 6.7

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:3510
CVSS 3.1: 6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2024:4211 7.0

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)
kernel: ovl: fix leaked entry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: gro: fix ownership transfer (CVE-2024-35890)
kernel: tls: (CVE-2024-26584, CVE-2024-26583, CVE-2024-26585)
kernel: wifi: (CVE-2024-35789, CVE-2024-27410, CVE-2024-35838, CVE-2024-35845)
kernel: mlxsw: (CVE-2024-35855, CVE-2024-35854, CVE-2024-35853, CVE-2024-35852, CVE-2024-36007)
kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)
kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng [rhel-8] (CVE-2023-52615)
kernel: net/mlx5e: (CVE-2023-52626, CVE-2024-35835, CVE-2023-52667, CVE-2024-35959)
kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)
kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset [rhel-8] (CVE-2024-26801)
kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
kernel: netfilter: nf_tables: use timestamp to check for set element timeout [rhel-8.10] (CVE-2024-27397)
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: x86/mm/swap: (CVE-2024-26759, CVE-2024-26906)
kernel: tipc: fix kernel warning when sending SYN message [rhel-8] (CVE-2023-52700)
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)
kernel: powerpc/imc-pmu/powernv: (CVE-2023-52675, CVE-2023-52686)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: crypto: (CVE-2024-26974, CVE-2023-52669, CVE-2023-52813)
kernel: net/mlx5/bnx2x/usb: (CVE-2024-35960, CVE-2024-35958, CVE-2021-47310, CVE-2024-26804, CVE-2021-47311, CVE-2024-26859, CVE-2021-47236, CVE-2023-52703)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)
kernel: USB/usbnet: (CVE-2023-52781, CVE-2023-52877, CVE-2021-47495)
kernel: can: (CVE-2023-52878, CVE-2021-47456)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:Rocky Linux-29783)
Temporary values in FIPS integrity test should be zeroized [rhel-8.10.z] (JIRA:Rocky Linux-35361)
Rocky Linux8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:Rocky Linux-36048)
[Rocky Linux8] blktests block/024 failed (JIRA:Rocky Linux-8130)
Rocky Linux8.9: EEH injections results Error: Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:Rocky Linux-14195)
Latency spikes with Matrox G200 graphic cards (JIRA:Rocky Linux-36172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2024:4211
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2024:4352 7.0

Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: tls (CVE-2024-26585,CVE-2024-26584, CVE-2024-26583
kernel-rt: kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)
kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng (CVE-2023-52615)
kernel-rt: kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)
kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset CVE-2024-26801)
kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)
kernel: wifi: mac80211: (CVE-2024-35789, CVE-2024-35838, CVE-2024-35845)
kernel: wifi: nl80211: reject iftype change with mesh ID change (CVE-2024-27410)
kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)
kernel:TCP-spoofed ghost ACKs and leak initial sequence number (CVE-2023-52881)
kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel: ovl: fix leaked dentry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: mm/swap: fix race when skipping swapcache (CVE-2024-26759)
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)
kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)
kernel: net/usb: kalmia: avoid printing uninitialized value on error path (CVE-2023-52703)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: net/bnx2x: Prevent access to a freed page in page_pool (CVE-2024-26859)
kernel: crypto: (CVE-2024-26974, CVE-2023-52813)
kernel: can: (CVE-2023-52878, CVE-2021-47456)
kernel: usb: (CVE-2023-52781, CVE-2023-52877)
kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
kernel: usbnet: sanity check for maxpacket (CVE-2021-47495)
kernel: gro: fix ownership transfer (CVE-2024-35890)
kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)
kernel: tipc: fix kernel warning when sending SYN message (CVE-2023-52700)
kernel: net/mlx5/mlxsw: (CVE-2024-35960, CVE-2024-36007, CVE-2024-35855)
kernel: net/mlx5e: (CVE-2024-35959, CVE-2023-52626, CVE-2024-35835)
kernel: mlxsw: (CVE-2024-35854, CVE-2024-35853, CVE-2024-35852)
kernel: net: (CVE-2024-35958, CVE-2021-47311, CVE-2021-47236, CVE-2021-47310)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

kernel-rt: update RT source tree to the latest Rocky Linux-8.10.z kernel (JIRA:Rocky Linux-40882)
[rhel8.9][cxgb4]BUG: using smp_processor_id() in preemptible [00000000] code: ethtool/54735 (JIRA:Rocky Linux-8779)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2024:4352
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRXSA-2024:4211 7.0

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)
kernel: ovl: fix leaked entry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: gro: fix ownership transfer (CVE-2024-35890)
kernel: tls: (CVE-2024-26584, CVE-2024-26583, CVE-2024-26585)
kernel: wifi: (CVE-2024-35789, CVE-2024-27410, CVE-2024-35838, CVE-2024-35845)
kernel: mlxsw: (CVE-2024-35855, CVE-2024-35854, CVE-2024-35853, CVE-2024-35852, CVE-2024-36007)
kernel: PCI interrupt mapping cause oops [rhel-8] (CVE-2021-46909)
kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng [rhel-8] (CVE-2023-52615)
kernel: net/mlx5e: (CVE-2023-52626, CVE-2024-35835, CVE-2023-52667, CVE-2024-35959)
kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)
kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset [rhel-8] (CVE-2024-26801)
kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
kernel: netfilter: nf_tables: use timestamp to check for set element timeout [rhel-8.10] (CVE-2024-27397)
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: x86/mm/swap: (CVE-2024-26759, CVE-2024-26906)
kernel: tipc: fix kernel warning when sending SYN message [rhel-8] (CVE-2023-52700)
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)
kernel: powerpc/imc-pmu/powernv: (CVE-2023-52675, CVE-2023-52686)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: crypto: (CVE-2024-26974, CVE-2023-52669, CVE-2023-52813)
kernel: net/mlx5/bnx2x/usb: (CVE-2024-35960, CVE-2024-35958, CVE-2021-47310, CVE-2024-26804, CVE-2021-47311, CVE-2024-26859, CVE-2021-47236, CVE-2023-52703)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)
kernel: USB/usbnet: (CVE-2023-52781, CVE-2023-52877, CVE-2021-47495)
kernel: can: (CVE-2023-52878, CVE-2021-47456)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:Rocky Linux SIG Cloud-29783)
Temporary values in FIPS integrity test should be zeroized [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-35361)
Rocky Linux SIG Cloud8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:Rocky Linux SIG Cloud-36048)
[Rocky Linux SIG Cloud8] blktests block/024 failed (JIRA:Rocky Linux SIG Cloud-8130)
Rocky Linux SIG Cloud8.9: EEH injections results Error: Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:Rocky Linux SIG Cloud-14195)
Latency spikes with Matrox G200 graphic cards (JIRA:Rocky Linux SIG Cloud-36172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RXSA-2024:4211
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-35888 8.7

Record: UBUNTU-CVE-2024-35888
CVSS 4.0: 8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-11

OSVALSA-2024:4211 No score

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel:TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)
kernel: ovl: fix leaked dentry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: mm/swap: fix race when skipping swapcache (CVE-2024-26759)
kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)
kernel: powerpc/powernv: Add a null pointer check in opal_event_init() (CVE-2023-52686)
kernel: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (CVE-2023-52675)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: net/bnx2x: Prevent access to a freed page in page_pool (CVE-2024-26859)
kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974)
kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960)
kernel: net/mlx5e: Fix mlx5e_priv_init() cleanup flow (CVE-2024-35959)
kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)
kernel: net: ti: fix UAF in tlan_remove_one (CVE-2021-47310)

Bug Fix(es):

Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:AlmaLinux-29783)
Temporary values in FIPS integrity test should be zeroized [almalinux-8.10.z] (JIRA:AlmaLinux-35361)
AlmaLinux8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:AlmaLinux-36048)
[AlmaLinux8] blktests block/024 failed (JIRA:AlmaLinux-8130)
AlmaLinux8.9: EEH injections results Error: Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:AlmaLinux-14195)
Latency spikes with Matrox G200 graphic cards (JIRA:AlmaLinux-36172)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:4211
Updated: 2026-11-02

OSVALSA-2024:4352 No score

Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: tls (CVE-2024-26585,CVE-2024-26584, CVE-2024-26583
kernel-rt: kernel: PCI interrupt mapping cause oops [almalinux-8] (CVE-2021-46909)
kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (CVE-2021-47069)
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng (CVE-2023-52615)
kernel-rt: kernel: drm/amdgpu: use-after-free vulnerability (CVE-2024-26656)
kernel: Bluetooth: Avoid potential use-after-free in hci_error_reset CVE-2024-26801)
kernel: Squashfs: check the inode number is not the invalid value of zero (CVE-2024-26982)
kernel: netfilter: nf_tables: use timestamp to check for set element timeout (CVE-2024-27397)
kernel: wifi: mac80211: (CVE-2024-35789, CVE-2024-35838, CVE-2024-35845)
kernel: wifi: nl80211: reject iftype change with mesh ID change (CVE-2024-27410)
kernel: perf/core: Bail out early if the request AUX area is out of bound (CVE-2023-52835)
kernel:TCP-spoofed ghost ACKs and leak initial sequence number (CVE-2023-52881)
kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
kernel: ovl: fix leaked dentry (CVE-2021-46972)
kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
kernel: mm/swap: fix race when skipping swapcache (CVE-2024-26759)
kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)
kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)
kernel: net/usb: kalmia: avoid printing uninitialized value on error path (CVE-2023-52703)
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
kernel: net/bnx2x: Prevent access to a freed page in page_pool (CVE-2024-26859)
kernel: crypto: (CVE-2024-26974, CVE-2023-52813)
kernel: can: (CVE-2023-52878, CVE-2021-47456)
kernel: usb: (CVE-2023-52781, CVE-2023-52877)
kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
kernel: usbnet: sanity check for maxpacket (CVE-2021-47495)
kernel: gro: fix ownership transfer (CVE-2024-35890)
kernel: erspan: make sure erspan_base_hdr is present in skb->head (CVE-2024-35888)
kernel: tipc: fix kernel warning when sending SYN message (CVE-2023-52700)
kernel: net/mlx5/mlxsw: (CVE-2024-35960, CVE-2024-36007, CVE-2024-35855)
kernel: net/mlx5e: (CVE-2024-35959, CVE-2023-52626, CVE-2024-35835)
kernel: mlxsw: (CVE-2024-35854, CVE-2024-35853, CVE-2024-35852)
kernel: net: (CVE-2024-35958, CVE-2021-47311, CVE-2021-47236, CVE-2021-47310)
kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)

Bug Fix(es):

kernel-rt: update RT source tree to the latest AlmaLinux-8.10.z kernel (JIRA:AlmaLinux-40882)
[almalinux8.9][cxgb4]BUG: using smp_processor_id() in preemptible [00000000] code: ethtool/54735 (JIRA:AlmaLinux-8779)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:4352
Updated: 2026-11-02

OSVCLSA-2026-1792243434 No score

kernel: Fix of 123 CVEs

ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
mm/hugetlb: fix list corruption in allocate_file_region_entries() {CVE-2026-74518}
mm/page_reporting: use system_freezable_wq to fix UAF during suspend {CVE-2026-74481}
bpf: Fix UAF in sock clone early bailouts {CVE-2026-68399}
xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}
net: Introduce skb tc depth field to track packet loops {CVE-2026-63983}
ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst {CVE-2026-72255}
net: thunderbolt: Fix frags[] overflow by bounding frame_count {CVE-2026-72157}
SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
rxrpc: serialize kernel accept preallocation with socket teardown {CVE-2026-74436}
isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
ata: libata-core: Reject an invalid concurrent positioning ranges count {CVE-2026-72030}
wifi: mac80211: validate extension-frame layout before RX {CVE-2026-68470}
wifi: mac80211: pass 'sta' to ieee80211_rx_data_set_sta() {CVE-2026-68470}
drm/amd/pm: fix pptable use-after-free {CVE-2026-74450}
smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
smb: client: clear ce->tgthint in free_tgts() {CVE-2026-89636}
smb: client: harden DFS cache against invalid target hints {CVE-2026-93210}
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}
HID: sony: clean up device list on probe failure {CVE-2026-90041}
drm/amd/display: Fix dangling pointer in CRTC reset function {CVE-2026-93175}
hwrng: core - fix rng list on registration error {CVE-2026-93163}
RDMA/rvt: Return NULL after port allocation failure {CVE-2026-93104}
fs/resctrl: Prevent use-after-free in rdtgroup_kn_put() {CVE-2026-93100}
bpf: Fix potential UAF when reading bpf link info {CVE-2026-90392}
HID: synchronize input before cleaning up a failed probe {CVE-2026-90329}
bpf: Don't predict JMP32 pointer vs zero comparisons {CVE-2026-98041}
smb: client: cancel reconnect work in clean_demultiplex_info() {CVE-2026-98175}
smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs {CVE-2026-98171}
netfilter: cttimeout: prevent UAF during module unload {CVE-2026-97609}
thunderbolt: Prevent XDomain delayed work use-after-free on disconnect {CVE-2026-74575}
NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}
Squashfs: check block offset is not negative {CVE-2026-90203}
RDMA/siw: Fix endpoint/socket association handling {CVE-2026-74345}
HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
hid: hid-logitech-hidpp: avoid unnecessary assignments in hidpp_connect_event {CVE-2026-93826}
configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}
scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}
RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept {CVE-2026-98367}
ALSA: 6fire: fix OOB write from device-reported iso length {CVE-2026-98312}
scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf {CVE-2026-63887}
scsi: target: Fix hexadecimal CHAP_I handling {CVE-2026-63886}
scsi: target: iscsi: Validate CHAP_R length before base64 decode {CVE-2026-63886}
wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}
nfsd: RCU-protect cl_cb_session to fix…

Record: CLSA-2026-1792243434
Updated: 2026-11-02

OSVSUSE-SU-2024:4314-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).
CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819).
CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).
CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).
CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354).
CVE-2024-49895: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352).
CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).
CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).
CVE-2024-49901: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (bsc#1232305).
CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func (bsc#1232337).
CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).
CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).
CVE-2024-49913: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307).
CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
CVE-2024-49922:…

Record: SUSE-SU-2024:4314-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135).
CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).
CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).
CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).
CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).
CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
CVE-2024-50127: net: sched: fix…

Record: SUSE-SU-2024:4315-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4316-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).
CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).
CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).
CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).
CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).
CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374).
CVE-2024-49923: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (bsc#1232361).
CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368).
CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).
CVE-2024-49983:…

Record: SUSE-SU-2024:4316-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4318-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free…

Record: SUSE-SU-2024:4318-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4364-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
CVE-2022-48957: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (bsc#1231973).
CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
CVE-2022-48980: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (bsc#1232233).
CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070).
CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
CVE-2022-49017: tipc: re-fetch skb cb after tipc_msg_validate (bsc#1232004).
CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005).
CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837).
CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46716: dmaengine: altera-msgdma:…

Record: SUSE-SU-2024:4364-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4376-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
CVE-2024-47701: ext4: explicitly exit when ext4_find_inline_entry returns an error (bsc#1231920).
CVE-2024-47745: mm: split critical region in remap_file_pages() and invoke LSMs in between (bsc#1232135).
CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
CVE-2024-49968: ext4: fix error message when rejecting the default hash (bsc#1232264).
CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).
CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).
CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).
CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
CVE-2024-50127: net: sched: fix…

Record: SUSE-SU-2024:4376-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4387-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).
CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added…

Record: SUSE-SU-2024:4387-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20163-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs:…

Record: SUSE-SU-2025:20163-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20164-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs: do…

Record: SUSE-SU-2025:20164-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20246-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs:…

Record: SUSE-SU-2025:20246-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20247-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs: do…

Record: SUSE-SU-2025:20247-1
Updated: 2026-11-02

OSVUSN-6893-1 No score

linux, linux-azure, linux-gcp, linux-ibm, linux-intel, linux-lowlatency, linux-oem-6.8, linux-raspi vulnerabilities

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Accessibility subsystem;
Android drivers;
Drivers core;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
Buffer Sharing and Synchronization framework;
GPU drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Device tree and open firmware driver;
Chrome hardware platform drivers;
i.MX PM domains;
TI SCI PM domains driver;
S/390 drivers;
SCSI drivers;
SPI subsystem;
Thermal drivers;
TTY drivers;
USB subsystem;
Framebuffer layer;
BTRFS file system;
Network file system server daemon;
NILFS2 file system;
File systems infrastructure;
Pstore file system;
SMB network file system;
BPF subsystem;
Bluetooth subsystem;
Netfilter;
io_uring subsystem;
Core kernel;
Extra boot config (XBC);
Memory management;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
NFC subsystem;
RDS protocol;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
SELinux security module; (CVE-2024-35967, CVE-2024-35886, CVE-2024-26999, CVE-2024-27008, CVE-2024-26988, CVE-2024-35980, CVE-2024-26982, CVE-2024-35946, CVE-2024-35918, CVE-2024-27015, CVE-2024-35900, CVE-2024-35942, CVE-2024-35879, CVE-2024-35961, CVE-2024-35944, CVE-2024-35934, CVE-2024-35978, CVE-2024-35938, CVE-2024-27003, CVE-2024-35976, CVE-2024-36019, CVE-2024-35880, CVE-2024-35866, CVE-2024-35929, CVE-2024-35917, CVE-2024-35912, CVE-2024-35896, CVE-2024-26986, CVE-2024-35951, CVE-2024-35958, CVE-2024-26997, CVE-2024-35965, CVE-2024-35953, CVE-2024-26993, CVE-2024-26991, CVE-2024-35892, CVE-2024-36026, CVE-2024-35882, CVE-2024-35964, CVE-2024-35865, CVE-2024-35897, CVE-2024-26981, CVE-2024-35872, CVE-2024-36027, CVE-2024-26983, CVE-2024-35909, CVE-2024-35985, CVE-2024-35875, CVE-2024-35890, CVE-2024-26922, CVE-2024-26994, CVE-2024-35903, CVE-2024-35936, CVE-2024-35904, CVE-2024-27013, CVE-2024-36025, CVE-2024-26980, CVE-2024-27006, CVE-2024-35861, CVE-2024-35864, CVE-2024-27018, CVE-2024-36022, CVE-2024-26990, CVE-2024-35968, CVE-2024-35860, CVE-2024-36024, CVE-2024-35933, CVE-2024-27019, CVE-2024-35925, CVE-2024-35950, CVE-2024-35915, CVE-2024-35916, CVE-2024-35956, CVE-2024-36020, CVE-2024-35873, CVE-2024-27002, CVE-2024-35963, CVE-2024-35959, CVE-2024-35937, CVE-2024-27011, CVE-2024-27020, CVE-2024-35883, CVE-2024-35913, CVE-2024-35910, CVE-2024-27021, CVE-2024-35921, CVE-2024-35905, CVE-2024-27010, CVE-2024-35981, CVE-2024-35885, CVE-2024-35955, CVE-2024-35894, CVE-2024-35969, CVE-2024-36018, CVE-2024-35867, CVE-2024-27007, CVE-2024-35908, CVE-2024-26985, CVE-2024-27016, CVE-2024-35960, CVE-2024-35935, CVE-2024-35932, CVE-2024-35957, CVE-2024-27001, CVE-2024-35871, CVE-2024-35907, CVE-2024-35878, CVE-2024-35979, CVE-2024-35972, CVE-2024-35975, CVE-2024-35877, CVE-2024-35926, CVE-2024-26817, CVE-2024-35899, CVE-2024-27004, CVE-2024-35920, CVE-2024-35924, CVE-2024-35977, CVE-2024-35930, CVE-2024-35911, CVE-2024-26996,…

Record: USN-6893-1
Updated: 2026-11-02

OSVUSN-6893-2 No score

linux-gke, linux-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Accessibility subsystem;
Android drivers;
Drivers core;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
Buffer Sharing and Synchronization framework;
GPU drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Device tree and open firmware driver;
Chrome hardware platform drivers;
i.MX PM domains;
TI SCI PM domains driver;
S/390 drivers;
SCSI drivers;
SPI subsystem;
Thermal drivers;
TTY drivers;
USB subsystem;
Framebuffer layer;
BTRFS file system;
Network file system server daemon;
NILFS2 file system;
File systems infrastructure;
Pstore file system;
SMB network file system;
BPF subsystem;
Bluetooth subsystem;
Netfilter;
io_uring subsystem;
Core kernel;
Extra boot config (XBC);
Memory management;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
NFC subsystem;
RDS protocol;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
SELinux security module; (CVE-2024-35976, CVE-2024-35873, CVE-2024-35959, CVE-2024-27012, CVE-2024-36025, CVE-2024-35868, CVE-2024-26995, CVE-2024-35916, CVE-2024-36023, CVE-2024-35964, CVE-2024-35890, CVE-2024-26980, CVE-2024-35950, CVE-2024-27006, CVE-2024-35955, CVE-2024-35885, CVE-2024-35960, CVE-2024-35932, CVE-2024-26986, CVE-2024-35884, CVE-2024-35860, CVE-2024-36020, CVE-2024-35930, CVE-2024-35919, CVE-2024-27020, CVE-2024-26928, CVE-2024-35903, CVE-2024-35907, CVE-2024-35904, CVE-2024-35972, CVE-2024-35892, CVE-2024-26921, CVE-2024-35869, CVE-2024-35957, CVE-2024-35967, CVE-2024-35927, CVE-2024-35946, CVE-2024-27000, CVE-2024-35943, CVE-2024-35902, CVE-2024-27013, CVE-2024-35968, CVE-2024-35970, CVE-2024-35865, CVE-2024-36022, CVE-2024-26993, CVE-2024-36027, CVE-2024-35895, CVE-2024-35908, CVE-2024-35901, CVE-2024-35872, CVE-2024-26925, CVE-2024-35917, CVE-2024-35898, CVE-2024-35861, CVE-2024-35900, CVE-2024-26984, CVE-2024-35891, CVE-2023-52699, CVE-2024-35961, CVE-2024-35951, CVE-2024-36019, CVE-2024-27021, CVE-2024-35939, CVE-2024-26997, CVE-2024-26999, CVE-2024-35897, CVE-2024-35896, CVE-2024-26817, CVE-2024-35875, CVE-2024-35935, CVE-2024-27015, CVE-2024-26982, CVE-2024-35958, CVE-2024-26989, CVE-2024-26922, CVE-2024-26811, CVE-2024-27003, CVE-2024-35920, CVE-2024-27007, CVE-2024-35879, CVE-2024-35979, CVE-2024-35978, CVE-2024-35914, CVE-2024-35938, CVE-2024-35913, CVE-2024-26985, CVE-2024-35915, CVE-2024-35974, CVE-2024-27001, CVE-2024-35940, CVE-2024-35867, CVE-2024-26994, CVE-2024-35886, CVE-2024-35899, CVE-2024-27022, CVE-2024-35910, CVE-2024-35893, CVE-2024-27010, CVE-2024-36024, CVE-2024-26926, CVE-2024-26923, CVE-2024-26990, CVE-2024-35912, CVE-2024-26987, CVE-2024-35966, CVE-2024-35977, CVE-2024-35866, CVE-2024-35975, CVE-2024-35965, CVE-2024-35933, CVE-2024-26936, CVE-2024-35889, CVE-2024-35863, CVE-2024-27002, CVE-2024-27018, CVE-2024-36021, CVE-2024-27019, CVE-2024-35921, CVE-2024-35870,…

Record: USN-6893-2
Updated: 2026-11-02

OSVUSN-6893-3 No score

linux-aws vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Accessibility subsystem;
Android drivers;
Drivers core;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
Buffer Sharing and Synchronization framework;
GPU drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Device tree and open firmware driver;
Chrome hardware platform drivers;
i.MX PM domains;
TI SCI PM domains driver;
S/390 drivers;
SCSI drivers;
SPI subsystem;
Thermal drivers;
TTY drivers;
USB subsystem;
Framebuffer layer;
BTRFS file system;
Network file system server daemon;
NILFS2 file system;
File systems infrastructure;
Pstore file system;
SMB network file system;
BPF subsystem;
Bluetooth subsystem;
Netfilter;
io_uring subsystem;
Core kernel;
Extra boot config (XBC);
Memory management;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
NFC subsystem;
RDS protocol;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
SELinux security module; (CVE-2024-35955, CVE-2024-35921, CVE-2024-35946, CVE-2024-35934, CVE-2024-26993, CVE-2024-35899, CVE-2024-35952, CVE-2024-35894, CVE-2024-35886, CVE-2024-35872, CVE-2024-35970, CVE-2024-35936, CVE-2024-35907, CVE-2024-27013, CVE-2024-35910, CVE-2024-27009, CVE-2024-35875, CVE-2024-36021, CVE-2024-26923, CVE-2024-26997, CVE-2024-35978, CVE-2024-35981, CVE-2024-27015, CVE-2024-26928, CVE-2024-35963, CVE-2024-35897, CVE-2024-27020, CVE-2024-35922, CVE-2024-27001, CVE-2024-27011, CVE-2024-35940, CVE-2024-35871, CVE-2024-35900, CVE-2024-35869, CVE-2024-35905, CVE-2024-35974, CVE-2024-35873, CVE-2024-35882, CVE-2024-35914, CVE-2024-35956, CVE-2024-35887, CVE-2024-35920, CVE-2024-27018, CVE-2024-35880, CVE-2024-35943, CVE-2024-35912, CVE-2024-35979, CVE-2024-35862, CVE-2024-36019, CVE-2024-35950, CVE-2024-35977, CVE-2024-35918, CVE-2024-26992, CVE-2024-35884, CVE-2024-35916, CVE-2024-26817, CVE-2024-35959, CVE-2024-35909, CVE-2024-35933, CVE-2024-35982, CVE-2024-26996, CVE-2024-35980, CVE-2024-36018, CVE-2024-26925, CVE-2024-35929, CVE-2024-35971, CVE-2024-26990, CVE-2024-35885, CVE-2024-36025, CVE-2024-26998, CVE-2024-35930, CVE-2024-26982, CVE-2024-36022, CVE-2024-35895, CVE-2024-35902, CVE-2024-35911, CVE-2024-27002, CVE-2024-35968, CVE-2024-35861, CVE-2024-35903, CVE-2024-36026, CVE-2024-35896, CVE-2024-35945, CVE-2024-26936, CVE-2024-35954, CVE-2024-26985, CVE-2024-35908, CVE-2024-35924, CVE-2024-35938, CVE-2024-26991, CVE-2024-27017, CVE-2024-26922, CVE-2024-35919, CVE-2024-35915, CVE-2024-35985, CVE-2024-26995, CVE-2024-35870, CVE-2024-27010, CVE-2024-35904, CVE-2024-26999, CVE-2024-26983, CVE-2024-35939, CVE-2024-35865, CVE-2024-35860, CVE-2024-35944, CVE-2024-27021, CVE-2024-27016, CVE-2024-27004, CVE-2024-27019, CVE-2024-36027, CVE-2024-35890, CVE-2024-35975, CVE-2024-35901, CVE-2024-35967, CVE-2024-26986, CVE-2024-35957, CVE-2024-35937, CVE-2024-26988, CVE-2024-35972, CVE-2024-35926, CVE-2024-26926,…

Record: USN-6893-3
Updated: 2026-11-02

OSVUSN-6896-1 No score

linux, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-ibm, linux-ibm-5.4, linux-kvm vulnerabilities

It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2023-6270)

It was discovered that the Atheros 802.11ac wireless driver did not properly validate certain data structures, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service. (CVE-2023-7042)

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-22099)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 architecture;
Block layer subsystem;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
PCI subsystem;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
NILFS2 file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Netfilter;
NET/ROM layer;
NFC subsystem;
Open vSwitch;
Packet sockets;
RDS protocol;
Network traffic control;
Sun RPC protocol;
Unix domain sockets;
ALSA SH drivers;
USB sound devices;
KVM core; (CVE-2024-35969, CVE-2024-35819, CVE-2024-26851, CVE-2024-26816, CVE-2024-26643, CVE-2023-52656, CVE-2024-27020, CVE-2024-35821, CVE-2024-35930, CVE-2024-35936, CVE-2024-27075, CVE-2024-26817, CVE-2024-26984, CVE-2024-35895, CVE-2024-35853, CVE-2024-27043, CVE-2024-35978, CVE-2024-35960, CVE-2024-26882, CVE-2024-35806, CVE-2024-35830, CVE-2024-26852, CVE-2024-35915, CVE-2024-36006, CVE-2024-35935, CVE-2024-26926, CVE-2024-35877, CVE-2024-27396, CVE-2024-26654, CVE-2024-27077, CVE-2024-27078, CVE-2024-27000, CVE-2024-35888, CVE-2024-27437, CVE-2024-26994, CVE-2024-26973, CVE-2024-26687, CVE-2024-26955, CVE-2024-26898, CVE-2024-26859, CVE-2023-52620,…

Record: USN-6896-1
Updated: 2026-11-02

OSVUSN-6896-2 No score

linux-hwe-5.4, linux-oracle-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 architecture;
Block layer subsystem;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
PCI subsystem;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
NILFS2 file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Netfilter;
NET/ROM layer;
NFC subsystem;
Open vSwitch;
Packet sockets;
RDS protocol;
Network traffic control;
Sun RPC protocol;
Unix domain sockets;
ALSA SH drivers;
USB sound devices;
KVM core; (CVE-2024-27076, CVE-2024-35849, CVE-2024-35899, CVE-2024-27038, CVE-2024-35982, CVE-2024-26687, CVE-2024-26863, CVE-2024-36004, CVE-2024-27004, CVE-2024-27065, CVE-2024-36020, CVE-2024-27000, CVE-2024-26981, CVE-2024-26973, CVE-2024-35922, CVE-2024-35969, CVE-2024-26851, CVE-2023-52880, CVE-2024-35813, CVE-2024-26859, CVE-2024-27078, CVE-2024-27020, CVE-2024-35809, CVE-2024-27001, CVE-2024-26969, CVE-2024-26993, CVE-2024-35935, CVE-2024-35815, CVE-2024-26931, CVE-2024-35823, CVE-2024-26984, CVE-2024-27024, CVE-2024-27419, CVE-2024-27008, CVE-2024-35825, CVE-2023-52644, CVE-2024-35933, CVE-2024-35830, CVE-2024-35900, CVE-2024-27046, CVE-2024-26651,…

Record: USN-6896-2
Updated: 2026-11-02

OSVUSN-6896-3 No score

linux-oracle, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 architecture;
Block layer subsystem;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
PCI subsystem;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
NILFS2 file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Netfilter;
NET/ROM layer;
NFC subsystem;
Open vSwitch;
Packet sockets;
RDS protocol;
Network traffic control;
Sun RPC protocol;
Unix domain sockets;
ALSA SH drivers;
USB sound devices;
KVM core; (CVE-2023-52620, CVE-2023-52650, CVE-2024-26999, CVE-2024-26857, CVE-2024-35984, CVE-2024-27043, CVE-2024-26810, CVE-2023-52880, CVE-2024-35915, CVE-2024-26955, CVE-2024-27396, CVE-2024-35922, CVE-2024-27395, CVE-2024-35899, CVE-2024-35809, CVE-2024-27000, CVE-2024-27004, CVE-2024-35830, CVE-2024-26931, CVE-2024-26993, CVE-2024-27013, CVE-2024-26812, CVE-2024-35893, CVE-2024-27073, CVE-2024-26687, CVE-2024-26969, CVE-2024-26901, CVE-2024-26875, CVE-2024-26976, CVE-2024-26889, CVE-2024-26586, CVE-2024-36020, CVE-2024-26859, CVE-2024-35944, CVE-2024-35888, CVE-2024-26965, CVE-2024-36007, CVE-2024-35847, CVE-2024-27436, CVE-2024-35982, CVE-2023-52699,…

Record: USN-6896-3
Updated: 2026-11-02

OSVUSN-6896-4 No score

linux-raspi, linux-raspi-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 architecture;
Block layer subsystem;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
PCI subsystem;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
NILFS2 file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Netfilter;
NET/ROM layer;
NFC subsystem;
Open vSwitch;
Packet sockets;
RDS protocol;
Network traffic control;
Sun RPC protocol;
Unix domain sockets;
ALSA SH drivers;
USB sound devices;
KVM core; (CVE-2024-35930, CVE-2024-26687, CVE-2024-26828, CVE-2024-26903, CVE-2024-35893, CVE-2024-35847, CVE-2024-35849, CVE-2024-35789, CVE-2024-26812, CVE-2024-26898, CVE-2024-26937, CVE-2024-35809, CVE-2023-52620, CVE-2024-35852, CVE-2024-26922, CVE-2024-26923, CVE-2024-27001, CVE-2024-35915, CVE-2024-35935, CVE-2024-26974, CVE-2024-26859, CVE-2024-26999, CVE-2024-26981, CVE-2024-35982, CVE-2024-26969, CVE-2024-26889, CVE-2024-26984, CVE-2024-27077, CVE-2024-26973, CVE-2024-27436, CVE-2024-26965, CVE-2024-35855, CVE-2024-27024, CVE-2024-26934, CVE-2024-35806, CVE-2024-35895, CVE-2024-27076, CVE-2024-26931, CVE-2024-35888, CVE-2024-35899, CVE-2024-35815,…

Record: USN-6896-4
Updated: 2026-11-02

OSVUSN-6896-5 No score

linux-aws, linux-aws-5.4, linux-iot vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

x86 architecture;
Block layer subsystem;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
PCI subsystem;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
NILFS2 file system;
Diskquota system;
SMB network file system;
UBI file system;
io_uring subsystem;
BPF subsystem;
Core kernel;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Netfilter;
NET/ROM layer;
NFC subsystem;
Open vSwitch;
Packet sockets;
RDS protocol;
Network traffic control;
Sun RPC protocol;
Unix domain sockets;
ALSA SH drivers;
USB sound devices;
KVM core; (CVE-2024-35982, CVE-2024-26862, CVE-2024-35997, CVE-2024-26851, CVE-2024-26817, CVE-2024-26820, CVE-2024-26974, CVE-2024-35806, CVE-2024-26903, CVE-2024-35822, CVE-2024-27076, CVE-2024-26901, CVE-2024-26955, CVE-2024-26976, CVE-2024-35821, CVE-2024-27038, CVE-2024-26994, CVE-2023-52656, CVE-2024-27008, CVE-2024-26966, CVE-2024-26898, CVE-2024-26931, CVE-2024-35888, CVE-2024-26810, CVE-2024-26969, CVE-2024-35960, CVE-2024-26884, CVE-2024-26999, CVE-2024-35847, CVE-2024-35807, CVE-2024-26857, CVE-2024-35915, CVE-2023-52880, CVE-2024-35936, CVE-2024-26875, CVE-2024-26973, CVE-2024-35899, CVE-2024-35910, CVE-2024-27020, CVE-2024-26828, CVE-2024-26957,…

Record: USN-6896-5
Updated: 2026-11-02

OSVUSN-6898-1 No score

linux, linux-gcp, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-oracle vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…

Record: USN-6898-1
Updated: 2026-11-02

OSVUSN-6898-2 No score

linux-ibm-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…

Record: USN-6898-2
Updated: 2026-11-02

OSVUSN-6898-3 No score

linux-aws, linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35955, CVE-2024-35805, CVE-2024-26814, CVE-2024-27008, CVE-2024-26970, CVE-2024-35944, CVE-2024-27013, CVE-2024-35938, CVE-2024-35853, CVE-2024-35969, CVE-2024-26981, CVE-2024-26929, CVE-2024-27020, CVE-2024-35885, CVE-2024-35973, CVE-2024-35958, CVE-2024-26961, CVE-2024-35912, CVE-2024-35890, CVE-2024-35804, CVE-2024-35813, CVE-2024-27393, CVE-2024-26956, CVE-2024-35915, CVE-2024-26642, CVE-2024-35847, CVE-2024-26960, CVE-2024-26923, CVE-2024-35935, CVE-2024-36025, CVE-2024-35898, CVE-2024-26810, CVE-2024-35809, CVE-2024-26813, CVE-2024-36007, CVE-2024-35817, CVE-2024-35849, CVE-2024-35819, CVE-2024-35884, CVE-2024-35922, CVE-2024-36008, CVE-2024-27004, CVE-2024-35902, CVE-2024-26828, CVE-2024-35791, CVE-2024-35930, CVE-2024-26973, CVE-2024-26984, CVE-2024-35806, CVE-2024-26629, CVE-2024-26955, CVE-2024-26937, CVE-2024-27059, CVE-2024-35872, CVE-2024-35978, CVE-2024-26950, CVE-2024-27018, CVE-2024-35857, CVE-2024-35990, CVE-2024-27437, CVE-2024-35822, CVE-2024-36020,…

Record: USN-6898-3
Updated: 2026-11-02

OSVUSN-6898-4 No score

linux-aws-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35872, CVE-2024-35807, CVE-2024-27013, CVE-2024-35989, CVE-2024-36008, CVE-2024-26957, CVE-2024-35912, CVE-2024-27000, CVE-2024-35918, CVE-2024-26977, CVE-2024-35821, CVE-2024-35853, CVE-2024-26814, CVE-2024-35823, CVE-2024-35958, CVE-2024-26813, CVE-2024-26811, CVE-2024-26937, CVE-2024-26951, CVE-2024-35925, CVE-2024-26929, CVE-2024-35988, CVE-2024-35902, CVE-2024-26994, CVE-2024-27001, CVE-2024-36029, CVE-2024-36005, CVE-2024-35970, CVE-2024-36007, CVE-2024-35809, CVE-2024-27019, CVE-2024-26970, CVE-2024-27059, CVE-2024-35877, CVE-2024-35899, CVE-2024-26989, CVE-2024-27008, CVE-2024-26812, CVE-2024-35969, CVE-2024-35785, CVE-2024-35871, CVE-2024-35847, CVE-2024-36006, CVE-2024-35973, CVE-2024-27396, CVE-2024-35849, CVE-2024-35990, CVE-2024-26960, CVE-2024-26931, CVE-2024-35852, CVE-2024-26965, CVE-2024-35960, CVE-2024-35813, CVE-2024-26976, CVE-2024-36004, CVE-2024-35895, CVE-2024-27018, CVE-2024-26969, CVE-2024-27016, CVE-2024-27437, CVE-2024-26956, CVE-2024-26629,…

Record: USN-6898-4
Updated: 2026-11-02

OSVUSN-6917-1 No score

linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
Distributed Switch Architecture;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
Key management;
ALSA SH drivers;
KVM core; (CVE-2024-26993, CVE-2024-26996, CVE-2024-35879, CVE-2024-26812, CVE-2024-26984, CVE-2024-26817, CVE-2024-35950, CVE-2024-26960, CVE-2024-27437, CVE-2024-26964, CVE-2024-27059, CVE-2024-35969, CVE-2024-35936, CVE-2024-35912, CVE-2024-35915, CVE-2024-35938, CVE-2024-27019, CVE-2024-35822, CVE-2024-35997, CVE-2024-35855, CVE-2024-26925, CVE-2024-26654, CVE-2024-26923, CVE-2024-36031, CVE-2024-36020, CVE-2024-35823, CVE-2024-35852, CVE-2024-35989, CVE-2024-27000, CVE-2024-35853, CVE-2024-27013, CVE-2024-35854, CVE-2024-35922, CVE-2024-26937, CVE-2023-52880, CVE-2024-26974, CVE-2024-26629, CVE-2024-35804, CVE-2024-35958, CVE-2024-26814, CVE-2024-35890, CVE-2024-35940, CVE-2024-26999, CVE-2024-35847, CVE-2024-27015, CVE-2024-26687, CVE-2024-26970, CVE-2024-35930, CVE-2024-26813, CVE-2024-26810, CVE-2024-26969, CVE-2024-26977, CVE-2024-26956, CVE-2024-35901, CVE-2024-27020,…

Record: USN-6917-1
Updated: 2026-11-02

OSVUSN-6918-1 No score

linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
Accessibility subsystem;
Android drivers;
Drivers core;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
Buffer Sharing and Synchronization framework;
GPU drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Device tree and open firmware driver;
Chrome hardware platform drivers;
i.MX PM domains;
TI SCI PM domains driver;
S/390 drivers;
SCSI drivers;
SPI subsystem;
Thermal drivers;
TTY drivers;
USB subsystem;
Framebuffer layer;
BTRFS file system;
Network file system server daemon;
NILFS2 file system;
File systems infrastructure;
Pstore file system;
SMB network file system;
BPF subsystem;
Bluetooth subsystem;
Netfilter;
io_uring subsystem;
Core kernel;
Extra boot config (XBC);
Memory management;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
IPv4 networking;
IPv6 networking;
Multipath TCP;
NFC subsystem;
RDS protocol;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
SELinux security module; (CVE-2024-26988, CVE-2024-36023, CVE-2024-35869, CVE-2024-35938, CVE-2024-27000, CVE-2024-35880, CVE-2024-35915, CVE-2024-35959, CVE-2024-35883, CVE-2024-35886, CVE-2024-35976, CVE-2024-35903, CVE-2024-35980, CVE-2024-27020, CVE-2024-35955, CVE-2024-35964, CVE-2024-26980, CVE-2024-35882, CVE-2024-35927, CVE-2024-35884, CVE-2024-35914, CVE-2024-35905, CVE-2024-26925, CVE-2024-35885, CVE-2024-26990, CVE-2024-27012, CVE-2024-35969, CVE-2024-35862, CVE-2024-35956, CVE-2024-35971, CVE-2024-27022, CVE-2024-35935, CVE-2024-26992, CVE-2024-27010, CVE-2024-35892, CVE-2024-26999, CVE-2024-26989, CVE-2024-35963, CVE-2024-35981, CVE-2024-26997, CVE-2024-35920, CVE-2024-35918, CVE-2024-35933, CVE-2024-35867, CVE-2024-35904, CVE-2024-35890, CVE-2024-35968, CVE-2024-35917, CVE-2024-35897, CVE-2024-26922, CVE-2024-36026, CVE-2024-27013, CVE-2024-26991, CVE-2024-26996, CVE-2024-35873, CVE-2024-26987, CVE-2024-35895, CVE-2024-36027, CVE-2024-35896, CVE-2024-35894, CVE-2024-26983, CVE-2024-35966, CVE-2024-35967, CVE-2024-35945, CVE-2024-27003, CVE-2024-35939, CVE-2024-35861, CVE-2024-26985, CVE-2024-27015, CVE-2024-35982, CVE-2024-35912, CVE-2024-35979, CVE-2024-35879, CVE-2024-26982, CVE-2024-35891, CVE-2024-35925, CVE-2024-35870, CVE-2024-27021, CVE-2024-35866, CVE-2024-27014, CVE-2024-27001, CVE-2024-27004, CVE-2024-35953, CVE-2024-36021, CVE-2024-35931, CVE-2024-27007, CVE-2024-35922, CVE-2024-35872, CVE-2024-35926, CVE-2024-27016, CVE-2024-26984, CVE-2024-35919, CVE-2024-35911, CVE-2024-26923, CVE-2024-35929, CVE-2024-35887, CVE-2024-35893, CVE-2024-35898, CVE-2024-35930, CVE-2024-35934, CVE-2024-35916, CVE-2024-35877, CVE-2024-26926, CVE-2024-35974, CVE-2024-36018, CVE-2024-27002, CVE-2024-35975, CVE-2024-35864, CVE-2024-35958, CVE-2024-35944, CVE-2024-35985, CVE-2024-35940, CVE-2024-35900, CVE-2024-27018, CVE-2024-26936, CVE-2024-36024, CVE-2024-26998, CVE-2024-35954, CVE-2024-35878, CVE-2024-26928, CVE-2024-35952, CVE-2024-36020, CVE-2024-26986, CVE-2024-35950,…

Record: USN-6918-1
Updated: 2026-11-02

OSVUSN-6919-1 No score

linux-raspi vulnerabilities

It was discovered that the HugeTLB file system component of the Linux Kernel contained a NULL pointer dereference vulnerability. A privileged attacker could possibly use this to to cause a denial of service. (CVE-2024-0841)

It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. (CVE-2024-21823)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Cryptographic API;
DMA engine subsystem;
EFI core;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
NTB driver;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
MediaTek PM domains;
Power supply drivers;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
EROFS file system;
Ext4 file system;
F2FS file system;
FAT file system;
Network file system client; -…

Record: USN-6919-1
Updated: 2026-11-02

OSVUSN-6927-1 No score

linux-gcp-5.15 vulnerabilities

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Accessibility subsystem;
Android drivers;
Bluetooth drivers;
Clock framework and drivers;
Data acquisition framework and drivers;
Cryptographic API;
DMA engine subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
IRQ chip drivers;
Multiple devices driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Device tree and open firmware driver;
PCI subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC drivers;
Trusted Execution Environment drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
FAT file system;
Network file system client;
Network file system server daemon;
NILFS2 file system;
Pstore file system;
SMB network file system;
UBI file system;
Netfilter;
BPF subsystem;
Core kernel;
PCI iomap interfaces;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
Distributed Switch Architecture;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
NFC subsystem;
Open vSwitch;
RDS protocol;
Network traffic control;
SMC sockets;
Unix domain sockets;
eXpress Data Path;
ALSA SH drivers;
KVM core; (CVE-2024-35902, CVE-2024-35958, CVE-2024-35978, CVE-2024-35886, CVE-2024-35807, CVE-2024-26994, CVE-2024-36004, CVE-2024-35955, CVE-2024-26925, CVE-2024-27059, CVE-2024-35989, CVE-2024-35940, CVE-2024-26952, CVE-2024-35907, CVE-2024-35819, CVE-2024-35872, CVE-2024-36016, CVE-2023-52488, CVE-2024-35884, CVE-2024-26886, CVE-2024-27018, CVE-2024-35905, CVE-2024-35897, CVE-2024-26929, CVE-2024-36007, CVE-2024-35855, CVE-2024-35885, CVE-2024-26965, CVE-2024-35896, CVE-2024-36029, CVE-2024-35813, CVE-2024-26811, CVE-2024-26923,…

Record: USN-6927-1
Updated: 2026-11-02

OSVUSN-7019-1 No score

linux-xilinx-zynqmp vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-40902)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
M68K architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
Bluetooth drivers;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FireWire subsystem;
FPGA Framework;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
IRQ chip drivers;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
EEPROM drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Pin controllers subsystem;
PTP clock framework;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC…

Record: USN-7019-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 63 CVEs	before 4.18.0-553.8.1.el8_10	4.18.0-553.8.1.el8_10
`kernel-rt` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-kvm` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 58 CVEs	before 4.18.0-553.8.1.rt7.349.el8_10	4.18.0-553.8.1.rt7.349.el8_10
`linux-lts` Alpaquita:23	6.1.82-r0 up to 6.1.89-r0	6.1.89-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.11.els16	7.0.0-284.1101.el9_2.tuxcare.11.els16
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els16	2:1.0.0-2.el9_2.tuxcare.11.els16
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els16	2:1.0.0-2.el9_2.tuxcare.11.els16
`libbpf-static` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els16	2:1.0.0-2.el9_2.tuxcare.11.els16
`perf` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`python3-perf` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`rtla` TuxCare:AlmaLinux:9.2 From an advisory covering 120 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els16	5.14.0-284.1101.el9_2.tuxcare.11.els16
`Kernel` Linux	before 4.19.312, 4.20.0 up to 5.4.274, 5.0.0 up to 5.10.215, 5.5.0 up to 5.15.154, 5.11.0 up to 6.1.85, 5.16.0 up to 6.6.26, 6.2.0 up to 6.8.5	4.19.3125.4.2745.10.2155.15.1546.1.856.6.266.8.5
`linux` Debian:12	before 6.1.85-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 14 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1	6.1.85-1
`linux` Debian:13	before 6.8.9-1	6.8.9-1
`linux` Debian:14	before 6.8.9-1	6.8.9-1
`linux` Debian:10 From an advisory covering 258 CVEs	before 4.19.316-1, plus listed versions 4.19.118-14.19.118-24.19.118-2+deb10u14.19.118-2+deb10u1~bpo9+14.19.118-2~bpo9+1 Show 41 moreShow less 4.19.131-14.19.131-24.19.132-14.19.146-14.19.152-14.19.160-14.19.160-24.19.171-14.19.171-24.19.177-14.19.181-14.19.194-14.19.194-24.19.194-34.19.208-14.19.232-14.19.235-14.19.249-14.19.249-24.19.260-14.19.269-14.19.282-14.19.289-14.19.289-24.19.304-14.19.37-54.19.37-5+deb10u14.19.37-5+deb10u24.19.37-5+deb10u2~bpo9+14.19.37-64.19.67-14.19.67-24.19.67-2+deb10u14.19.67-2+deb10u1~bpo9+14.19.67-2+deb10u24.19.67-2+deb10u2~bpo9+14.19.67-2~bpo9+14.19.87-14.19.98-14.19.98-1+deb10u14.19.98-1~bpo9+1	4.19.316-1
`linux-5.10` Debian:10 From an advisory covering 344 CVEs	before 5.10.216-1~deb10u1, plus listed versions 5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1 Show 8 moreShow less 5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1	5.10.216-1~deb10u1
`kernel` openEuler:20.03-LTS-SP4 From an advisory covering 47 CVEs	before 4.19.90-2406.2.0.0281.oe2003sp4	4.19.90-2406.2.0.0281.oe2003sp4
`kernel` openEuler:22.03-LTS-SP1 From an advisory covering 61 CVEs	before 5.10.0-136.79.0.159.oe2203sp1	5.10.0-136.79.0.159.oe2203sp1
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 55 CVEs	before 5.10.0-207.0.0.116.oe2203sp3	5.10.0-207.0.0.116.oe2203sp3
`bpftool` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 63 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-modules` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-rt-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel` Rocky Linux:8 From an advisory covering 61 CVEs	before 0:4.18.0-553.8.1.el8_10	0:4.18.0-553.8.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 58 CVEs	before 0:4.18.0-553.8.1.rt7.349.el8_10	0:4.18.0-553.8.1.rt7.349.el8_10
`kernel-livepatch-SLE15-SP6-RT_Update_6` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 241 CVEs	before 1-150600.1.3.1	1-150600.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 241 CVEs	before 6.4.0-150600.10.20.1	6.4.0-150600.10.20.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 241 CVEs	before 6.4.0-150600.10.20.1	6.4.0-150600.10.20.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 241 CVEs	before 6.4.0-150600.10.20.1	6.4.0-150600.10.20.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 241 CVEs	before 6.4.0-150600.10.20.1	6.4.0-150600.10.20.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 241 CVEs	before 6.4.0-150600.10.20.1	6.4.0-150600.10.20.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 241 CVEs	before 6.4.0-150600.10.20.1	6.4.0-150600.10.20.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 241 CVEs	before 6.4.0-150600.10.20.1	6.4.0-150600.10.20.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 241 CVEs	before 6.4.0-150600.10.20.1	6.4.0-150600.10.20.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-livepatch-SLE15-SP5-RT_Update_23` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 230 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-rt` openSUSE:Leap Micro 5.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.13.79.1	5.14.21-150500.13.79.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 228 CVEs	before 6.4.0-150600.8.20.1	6.4.0-150600.8.20.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 228 CVEs	before 6.4.0-150600.8.20.1	6.4.0-150600.8.20.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 228 CVEs	before 6.4.0-150600.8.20.1	6.4.0-150600.8.20.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 228 CVEs	before 6.4.0-150600.8.20.1	6.4.0-150600.8.20.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 228 CVEs	before 6.4.0-150600.8.20.1	6.4.0-150600.8.20.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 228 CVEs	before 6.4.0-150600.8.20.1	6.4.0-150600.8.20.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1.150600.12.12.6	6.4.0-150600.23.30.1.150600.12.12.6
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-livepatch-SLE15-SP6_Update_6` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 506 CVEs	before 1-150600.13.3.5	1-150600.13.3.5
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1.150600.12.12.6	6.4.0-150600.23.30.1.150600.12.12.6
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1.150500.6.39.4	5.14.21-150500.55.88.1.150500.6.39.4
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1.150500.6.39.4	5.14.21-150500.55.88.1.150500.6.39.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-livepatch-SLE15-SP5_Update_21` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 439 CVEs	before 1-150500.11.5.1	1-150500.11.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 230 CVEs	before 5.14.21-150500.33.75.1	5.14.21-150500.33.75.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 230 CVEs	before 5.14.21-150500.33.75.1	5.14.21-150500.33.75.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 230 CVEs	before 5.14.21-150500.33.75.1	5.14.21-150500.33.75.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.33.75.1	5.14.21-150500.33.75.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.33.75.1	5.14.21-150500.33.75.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 230 CVEs	before 5.14.21-150500.33.75.1	5.14.21-150500.33.75.1
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 490 CVEs	before 6.4.0-15061.9.coco15sp6.1	6.4.0-15061.9.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 490 CVEs	before 6.4.0-15061.9.coco15sp6.1	6.4.0-15061.9.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 490 CVEs	before 6.4.0-15061.9.coco15sp6.1	6.4.0-15061.9.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 490 CVEs	before 6.4.0-15061.9.coco15sp6.1	6.4.0-15061.9.coco15sp6.1
`kernel-livepatch-MICRO-6-0-RT_Update_4` SUSE:Linux Micro 6.0 From an advisory covering 507 CVEs	before 1-1.1	1-1.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 507 CVEs	before 6.4.0-22.1	6.4.0-22.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 507 CVEs	before 6.4.0-22.1	6.4.0-22.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 507 CVEs	before 6.4.0-24.1	6.4.0-24.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 507 CVEs	before 6.4.0-24.1.21.4	6.4.0-24.1.21.4
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1128.138~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1128.138~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1133.140~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1133.140~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1132.141~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1132.141~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-189.209~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-189.209~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1075.80~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	5.4.0-1075.80~18.04.1
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1127.136~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1127.136~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1112.124~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1112.124~18.04.1
`linux` Ubuntu:20.04:LTS	before 5.4.0-189.209, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-189.209
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1128.138, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1128.138
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1065.71~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 35 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.1	5.15.0-1065.71~20.04.1
`linux-azure` Ubuntu:20.04:LTS	before 5.4.0-1133.140, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	5.4.0-1133.140
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1068.77~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 38 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.1	5.15.0-1068.77~20.04.1
`linux-bluefield` Ubuntu:20.04:LTS	before 5.4.0-1088.95, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92	5.4.0-1088.95
`linux-gcp` Ubuntu:20.04:LTS	before 5.4.0-1132.141, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	5.4.0-1132.141
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1065.73~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 35 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.1	5.15.0-1065.73~20.04.1
`linux-gkeop` Ubuntu:20.04:LTS	before 5.4.0-1095.99, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	5.4.0-1095.99
`linux-gkeop-5.15` Ubuntu:20.04:LTS	before 5.15.0-1048.55~20.04.1, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 32 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.1	5.15.0-1048.55~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-116.126~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 35 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.1	5.15.0-116.126~20.04.1
`linux-ibm` Ubuntu:20.04:LTS	before 5.4.0-1075.80, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 45 moreShow less 5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71	5.4.0-1075.80
`linux-ibm-5.15` Ubuntu:20.04:LTS	before 5.15.0-1058.61~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 16 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.1	5.15.0-1058.61~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1060.66~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 26 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.1	5.15.0-1060.66~20.04.1
`linux-iot` Ubuntu:20.04:LTS	before 5.4.0-1040.41, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 26 moreShow less 5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.40	5.4.0-1040.41
`linux-kvm` Ubuntu:20.04:LTS	before 5.4.0-1116.123, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78	5.4.0-1116.123
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-116.126~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 35 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.1	5.15.0-116.126~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:20.04:LTS	before 5.15.0-1027.27~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 7 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.1	5.15.0-1027.27~20.04.1
`linux-oracle` Ubuntu:20.04:LTS	before 5.4.0-1127.136, plus listed versions 5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1061.655.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1066.715.4.0-1067.725.4.0-1069.755.4.0-1070.765.4.0-1071.775.4.0-1073.795.4.0-1076.83	5.4.0-1127.136
`linux-oracle-5.15` Ubuntu:20.04:LTS	before 5.15.0-1063.69~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 34 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.1	5.15.0-1063.69~20.04.1
`linux-raspi` Ubuntu:20.04:LTS	before 5.4.0-1112.124, plus listed versions 5.4.0-1007.75.4.0-1008.85.4.0-1011.115.4.0-1012.125.4.0-1013.13 Show 45 moreShow less 5.4.0-1015.155.4.0-1016.175.4.0-1018.205.4.0-1019.215.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1029.325.4.0-1030.335.4.0-1032.355.4.0-1033.365.4.0-1034.375.4.0-1035.385.4.0-1036.395.4.0-1038.415.4.0-1041.455.4.0-1042.465.4.0-1043.475.4.0-1044.485.4.0-1045.495.4.0-1046.505.4.0-1047.525.4.0-1048.535.4.0-1050.565.4.0-1052.585.4.0-1053.605.4.0-1055.625.4.0-1056.635.4.0-1058.655.4.0-1059.675.4.0-1060.685.4.0-1062.705.4.0-1065.755.4.0-1066.765.4.0-1068.785.4.0-1069.795.4.0-1070.805.4.0-1071.815.4.0-1073.845.4.0-1074.855.4.0-1077.885.4.0-1078.89	5.4.0-1112.124
`linux-riscv-5.15` Ubuntu:20.04:LTS	before 5.15.0-1061.65~20.04.1, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 33 moreShow less 5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.1	5.15.0-1061.65~20.04.1
`linux-xilinx-zynqmp` Ubuntu:20.04:LTS	before 5.4.0-1047.51, plus listed versions 5.4.0-1020.245.4.0-1021.255.4.0-1022.265.4.0-1023.275.4.0-1024.28 Show 22 moreShow less 5.4.0-1025.295.4.0-1026.305.4.0-1027.315.4.0-1028.325.4.0-1029.335.4.0-1030.345.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1035.395.4.0-1036.405.4.0-1037.415.4.0-1038.425.4.0-1039.435.4.0-1040.445.4.0-1041.455.4.0-1042.465.4.0-1043.475.4.0-1044.485.4.0-1045.495.4.0-1046.50	5.4.0-1047.51
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known

History

History
Recorded	Changed	Sources
Nov 11, 2026	affected	OSV
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-35888 is a high vulnerability (CVSS 7.3) in Debian Linux, published May 19, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. Fixed in linux-lts 6.1.89-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 474 package rows, 505 versions, 5,362 references and the rest of 32 source descriptions. The JSON record has them.