Every CVE Search/ Get API key

CVE-2024-35905

bpf: Protect against int overflow for stack access size

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

bpf: Protect against int overflow for stack access size

This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail.

This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.22%Up 0.2 points since May 20, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.8

bpf: Protect against int overflow for stack access size

In the Linux kernel, the following vulnerability has been resolved:

bpf: Protect against int overflow for stack access size

This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail.

This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.

Record
CVE-2024-35905
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2024-35623 7.8

In the Linux kernel, the following vulnerability has been resolved:

bpf: Protect against int overflow for stack access size

This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail.

This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.

Record
EUVD-2024-35623
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-2m8j-fx85-xvhm 7.8

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int...

In the Linux kernel, the following vulnerability has been resolved:

bpf: Protect against int overflow for stack access size

This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail.

This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.

Record
GHSA-2m8j-fx85-xvhm
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-129
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

bpf: Protect against int overflow for stack access size

This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail.

This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.

Record
CVE-2024-35905
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-129, CWE-190
Updated
2026-11-02
OSVBELL-CVE-2024-35905 7.8
Record
BELL-CVE-2024-35905
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

bpf: Protect against int overflow for stack access size

In the Linux kernel, the following vulnerability has been resolved:

bpf: Protect against int overflow for stack access size

This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail.

This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.

Record
CVE-2024-35905
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 47 moreShow less
OSVDEBIAN-CVE-2024-35905 7.8

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail. This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.

Record
DEBIAN-CVE-2024-35905
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1706 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix use-after-free of encap entry in neigh update handler

Function mlx5e_rep_neigh_update() wasn't updated to accommodate rtnl lock removal from TC filter update path and properly handle concurrent encap entry insertion/deletion which can lead to following use-after-free:

[23827.464923] ================================================================== [23827.469446] BUG: KASAN: use-after-free in mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.470971] Read of size 4 at addr ffff8881d132228c by task kworker/u20:6/21635 [23827.472251] [23827.472615] CPU: 9 PID: 21635 Comm: kworker/u20:6 Not tainted 5.13.0-rc3+ #5 [23827.473788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 [23827.475639] Workqueue: mlx5e mlx5e_rep_neigh_update [mlx5_core] [23827.476731] Call Trace: [23827.477260] dump_stack+0xbb/0x107 [23827.477906] print_address_description.constprop.0+0x18/0x140 [23827.478896] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.479879] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.480905] kasan_report.cold+0x7c/0xd8 [23827.481701] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.482744] kasan_check_range+0x145/0x1a0 [23827.493112] mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.494054] ? mlx5e_tc_tun_encap_info_equal_generic+0x140/0x140 [mlx5_core] [23827.495296] mlx5e_rep_neigh_update+0x41e/0x5e0 [mlx5_core] [23827.496338] ? mlx5e_rep_neigh_entry_release+0xb80/0xb80 [mlx5_core] [23827.497486] ? read_word_at_a_time+0xe/0x20 [23827.498250] ? strscpy+0xa0/0x2a0 [23827.498889] process_one_work+0x8ac/0x14e0 [23827.499638] ? lockdep_hardirqs_on_prepare+0x400/0x400 [23827.500537] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [23827.501359] ? rwlock_bug.part.0+0x90/0x90 [23827.502116] worker_thread+0x53b/0x1220 [23827.502831] ? process_one_work+0x14e0/0x14e0 [23827.503627] kthread+0x328/0x3f0 [23827.504254] ? _raw_spin_unlock_irq+0x24/0x40 [23827.505065] ? __kthread_bind_mask+0x90/0x90 [23827.505912] ret_from_fork+0x1f/0x30 [23827.506621] [23827.506987] Allocated by task 28248: [23827.507694] kasan_save_stack+0x1b/0x40 [23827.508476] __kasan_kmalloc+0x7c/0x90 [23827.509197] mlx5e_attach_encap+0xde1/0x1d40 [mlx5_core] [23827.510194] mlx5e_tc_add_fdb_flow+0x397/0xc40 [mlx5_core] [23827.511218] __mlx5e_add_fdb_flow+0x519/0xb30 [mlx5_core] [23827.512234] mlx5e_configure_flower+0x191c/0x4870 [mlx5_core] [23827.513298] tc_setup_cb_add+0x1d5/0x420 [23827.514023] fl_hw_replace_filter+0x382/0x6a0 [cls_flower] [23827.514975] fl_change+0x2ceb/0x4a51 [cls_flower] [23827.515821] tc_new_tfilter+0x89a/0x2070 [23827.516548] rtnetlink_rcv_msg+0x644/0x8c0 [23827.517300] netlink_rcv_skb+0x11d/0x340 [23827.518021] netlink_unicast+0x42b/0x700 [23827.518742] netlink_sendmsg+0x743/0xc20 [23827.519467] sock_sendmsg+0xb2/0xe0 [23827.520131] ____sys_sendmsg+0x590/0x770 [23827.520851] ___sys_sendmsg+0xd8/0x160 [23827.521552] __sys_sendmsg+0xb7/0x140 [23827.522238] do_syscall_64+0x3a/0x70 [23827.522907] entry_SYSCALL_64_after_hwframe+0x44/0xae [23827.523797] [23827.524163] Freed by task 25948: [23827.524780] kasan_save_stack+0x1b/0x40 [23827.525488] kasan_set_track+0x1c/0x30 [23827.526187] kasan_set_free_info+0x20/0x30 [23827.526968] __kasan_slab_free+0xed/0x130 [23827.527709] slab_free_freelist_hook+0xcf/0x1d0 [23827.528528] kmem_cache_free_bulk+0x33a/0x6e0 [23827.529317] kfree_rcu_work+0x55f/0xb70 [23827.530024] process_one_work+0x8ac/0x14e0 [23827.530770] worker_thread+0x53b/0x1220 [23827.531480] kthread+0x328/0x3f0 [23827.532114] ret_from_fork+0x1f/0x30 [23827.532785] [23827.533147] Last potentially related work creation: [23827.534007] kasan_save_stack+0x1b/0x40 [23827.534710] kasan_record_aux_stack+0xab/0xc0 …

Record
OESA-2024-1706
CVSS 3.1
0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated
2026-11-02
OSVOESA-2024-1707 0.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix use-after-free of encap entry in neigh update handler

Function mlx5e_rep_neigh_update() wasn't updated to accommodate rtnl lock removal from TC filter update path and properly handle concurrent encap entry insertion/deletion which can lead to following use-after-free:

[23827.464923] ================================================================== [23827.469446] BUG: KASAN: use-after-free in mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.470971] Read of size 4 at addr ffff8881d132228c by task kworker/u20:6/21635 [23827.472251] [23827.472615] CPU: 9 PID: 21635 Comm: kworker/u20:6 Not tainted 5.13.0-rc3+ #5 [23827.473788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 [23827.475639] Workqueue: mlx5e mlx5e_rep_neigh_update [mlx5_core] [23827.476731] Call Trace: [23827.477260] dump_stack+0xbb/0x107 [23827.477906] print_address_description.constprop.0+0x18/0x140 [23827.478896] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.479879] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.480905] kasan_report.cold+0x7c/0xd8 [23827.481701] ? mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.482744] kasan_check_range+0x145/0x1a0 [23827.493112] mlx5e_encap_take+0x72/0x140 [mlx5_core] [23827.494054] ? mlx5e_tc_tun_encap_info_equal_generic+0x140/0x140 [mlx5_core] [23827.495296] mlx5e_rep_neigh_update+0x41e/0x5e0 [mlx5_core] [23827.496338] ? mlx5e_rep_neigh_entry_release+0xb80/0xb80 [mlx5_core] [23827.497486] ? read_word_at_a_time+0xe/0x20 [23827.498250] ? strscpy+0xa0/0x2a0 [23827.498889] process_one_work+0x8ac/0x14e0 [23827.499638] ? lockdep_hardirqs_on_prepare+0x400/0x400 [23827.500537] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [23827.501359] ? rwlock_bug.part.0+0x90/0x90 [23827.502116] worker_thread+0x53b/0x1220 [23827.502831] ? process_one_work+0x14e0/0x14e0 [23827.503627] kthread+0x328/0x3f0 [23827.504254] ? _raw_spin_unlock_irq+0x24/0x40 [23827.505065] ? __kthread_bind_mask+0x90/0x90 [23827.505912] ret_from_fork+0x1f/0x30 [23827.506621] [23827.506987] Allocated by task 28248: [23827.507694] kasan_save_stack+0x1b/0x40 [23827.508476] __kasan_kmalloc+0x7c/0x90 [23827.509197] mlx5e_attach_encap+0xde1/0x1d40 [mlx5_core] [23827.510194] mlx5e_tc_add_fdb_flow+0x397/0xc40 [mlx5_core] [23827.511218] __mlx5e_add_fdb_flow+0x519/0xb30 [mlx5_core] [23827.512234] mlx5e_configure_flower+0x191c/0x4870 [mlx5_core] [23827.513298] tc_setup_cb_add+0x1d5/0x420 [23827.514023] fl_hw_replace_filter+0x382/0x6a0 [cls_flower] [23827.514975] fl_change+0x2ceb/0x4a51 [cls_flower] [23827.515821] tc_new_tfilter+0x89a/0x2070 [23827.516548] rtnetlink_rcv_msg+0x644/0x8c0 [23827.517300] netlink_rcv_skb+0x11d/0x340 [23827.518021] netlink_unicast+0x42b/0x700 [23827.518742] netlink_sendmsg+0x743/0xc20 [23827.519467] sock_sendmsg+0xb2/0xe0 [23827.520131] ____sys_sendmsg+0x590/0x770 [23827.520851] ___sys_sendmsg+0xd8/0x160 [23827.521552] __sys_sendmsg+0xb7/0x140 [23827.522238] do_syscall_64+0x3a/0x70 [23827.522907] entry_SYSCALL_64_after_hwframe+0x44/0xae [23827.523797] [23827.524163] Freed by task 25948: [23827.524780] kasan_save_stack+0x1b/0x40 [23827.525488] kasan_set_track+0x1c/0x30 [23827.526187] kasan_set_free_info+0x20/0x30 [23827.526968] __kasan_slab_free+0xed/0x130 [23827.527709] slab_free_freelist_hook+0xcf/0x1d0 [23827.528528] kmem_cache_free_bulk+0x33a/0x6e0 [23827.529317] kfree_rcu_work+0x55f/0xb70 [23827.530024] process_one_work+0x8ac/0x14e0 [23827.530770] worker_thread+0x53b/0x1220 [23827.531480] kthread+0x328/0x3f0 [23827.532114] ret_from_fork+0x1f/0x30 [23827.532785] [23827.533147] Last potentially related work creation: [23827.534007] kasan_save_stack+0x1b/0x40 [23827.534710] kasan_record_aux_stack+0xab/0xc0 …

Record
OESA-2024-1707
CVSS 3.1
0.0 NoneCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
Updated
2026-11-02
OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:9315
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-35905 7.8

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int representation. This should not actually happen, as there are other protections along the way, but we should protect against it anyway. One code path was missing such protections (fixed in the previous patch in the series), causing out-of-bounds array accesses in check_stack_range_initialized(). This patch causes the verification of a program with such a non-sensical access size to fail. This check used to exist in a more indirect way, but was inadvertendly removed in a833a17aeac7.

Record
UBUNTU-CVE-2024-35905
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2025-1742806909 No score

kernel: Fix of 37 CVEs

  • HID: core: zero-initialize the report buffer {CVE-2024-50302}
  • net: defer final 'struct net' free in netns dismantle {CVE-2024-56658}
  • bus: mhi: host: Add alignment check for event ring read pointer {CVE-2023-52494}
  • net: sched: fix ets qdisc OOB Indexing {CVE-2025-21692}
  • parport: Proper fix for array out-of-bounds access {CVE-2024-50074}
  • udf: fix uninit-value use in udf_get_fileshortad {CVE-2024-50143}
  • security/keys: fix slab-out-of-bounds in key_task_permission {CVE-2024-50301}
  • usb: typec: altmode should keep reference to parent {CVE-2024-50150}
  • dm cache: fix potential out-of-bounds access on the first resume {CVE-2024-50278}
  • dm cache: optimize dirty bit checking with find_next_bit when resizing {CVE-2024-50278}
  • dm cache: fix out-of-bounds access to the dirty bitset when resizing {CVE-2024-50279}
  • spi: nxp-fspi: fix the KASAN report out-of-bounds bug {CVE-2024-46853}
  • smb: client: fix OOBs when building SMB2_IOCTL request {CVE-2024-50151}
  • net: sched: fix use-after-free in taprio_change() {CVE-2024-50127}
  • USB: serial: io_edgeport: fix use after free in debug printk {CVE-2024-50267}
  • wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() {CVE-2024-53059}
  • wifi: iwlwifi: mvm: disconnect station vifs if recovery failed {CVE-2024-53059}
  • tracing: Consider the NULL character when validating the event length {CVE-2024-50131}
  • crypto: scomp - fix req->dst buffer overflow {CVE-2023-52612}
  • NFSD: fix hang in nfsd4_shutdown_callback {CVE-2025-21795}
  • NFSD: add courteous server support for thread with only delegation {CVE-2025-21795}
  • mptcp: refactor passive socket initialization {CVE-2024-26782}
  • mptcp: implement delayed seq generation for passive fastopen {CVE-2024-26782}
  • smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864}
  • smb: client: fix potential UAF in cifs_dump_full_key() {CVE-2024-35866}
  • cifs: fix session state check in reconnect to avoid use-after-free issue {CVE-2024-35866}
  • smb: client: fix potential UAF in smb2_is_network_name_deleted() {CVE-2024-35862}
  • smb: client: fix potential UAF in is_valid_oplock_break() {CVE-2024-35863}
  • smb: client: fix potential UAF in cifs_stats_proc_show() {CVE-2024-35867}
  • bpf: Protect against int overflow for stack access size {CVE-2024-35905}
  • bpf: Fix verification of indirect var-off stack access {CVE-2024-35905}
  • devlink: fix possible use-after-free and memory leaks in devlink_init() {CVE-2024-26734}
  • leds: trigger: Unregister sysfs attributes before calling deactivate() {CVE-2024-43830}
  • ionic: fix use after netif_napi_del() {CVE-2024-39502}
  • ionic: clean interrupt before enabling queue to avoid credit race {CVE-2024-39502}
  • net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970}
  • vt_ioctl: fix array_index_nospec in vt_setactivate {CVE-2022-48804}
  • hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() {CVE-2022-49011}
  • raid1: fix use-after-free for original bio in raid1_write_request() {CVE-2024-35979}
  • md/raid1: free the r1bio before waiting for blocked rdev {CVE-2024-35979}
  • drm/amdgpu: fix usage slab after free {CVE-2024-56551}
  • drm/amd: Use amdgpu_ucode_* helpers for GPU info bin {CVE-2024-56551}
  • drm/amd: Add a new helper for loading/validating microcode {CVE-2024-56551}
  • drm/amd: check num of link levels when update pcie param {CVE-2023-52812}
  • drm/amd: Update update_pcie_parameters functions to use uint8_t arguments {CVE-2023-52812}
  • drm/amd: Disable PP_PCIE_DPM_MASK when dynamic speed switching not supported {CVE-2023-52812}
  • drm/amd: Fix logic error in sienna_cichlid_update_pcie_parameters() {CVE-2023-52812}
  • drm/amd: Use amdgpu_device_pcie_dynamic_switching_supported() for SMU7 {CVE-2023-52812}
  • drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with SMU13 {CVE-2023-52812}
  • drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs {CVE-2023-52812}
  • drm/amd: Move helper for dynamic speed switch check out…
Record
CLSA-2025-1742806909
Updated
2026-11-02
OSVSUSE-SU-2024:2008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
  • CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
  • CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
  • CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
  • CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
  • CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
  • CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
  • CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
  • CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
  • CVE-2024-27042: Fixed potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (bsc#1223823).
  • CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
  • CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
  • CVE-2024-27417: Fixed potential 'struct net' leak in inet6_rtm_getaddr() (bsc#1224721)
  • CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
  • CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
  • CVE-2024-35791: Flush pages under…
Record
SUSE-SU-2024:2008-1
Updated
2026-11-02
OSVSUSE-SU-2024:2011-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
  • CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
  • CVE-2024-35904: Fixed dereference of garbage after mount failure (bsc#1224494).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
  • CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).

The following non-security bugs were fixed:

  • af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
  • af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
  • af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
  • filemap: remove use of wait bookmarks (bsc#1224085).
  • idpf: extend tx watchdog timeout (bsc#1224137).
  • ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
  • powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
  • powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
  • powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
  • powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
  • powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
  • powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
  • powerpc: Refactor verification of MSR_RI (bsc#1223191).
  • supported.conf: support tcp_dctcp module (jsc#PED-8111)
Record
SUSE-SU-2024:2011-1
Updated
2026-11-02
OSVSUSE-SU-2024:2019-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-35924: Limit read size on v1.2 (bsc#1224657).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
  • CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
  • CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
  • CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key() (bsc#1224667).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-35869: Guarantee refcounted children from parent session (bsc#1224679).
  • CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2024-35964: Fixed not validating setsockopt user input (bsc#1224581).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running XDP program (bsc#1224718).
  • CVE-2024-35860: struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2024-35799: Prevent crash when disable stream (bsc#1224740).
  • CVE-2024-35951: Fixed the error path in panfrost_mmu_map_fault_addr() (bsc#1224701).
  • CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
  • CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
  • CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios (bsc#1224530).
  • CVE-2024-35852: Fixed memory leak when canceling rehash work (bsc#1224502).
  • CVE-2024-36006: Fixed incorrect list API usage (bsc#1224541).
  • CVE-2024-36007: Fixed warning during rehash (bsc#1224543).
  • CVE-2024-35885: Stop interface during shutdown (bsc#1224519).
  • CVE-2024-35907: Call request_irq() after NAPI initialized (bsc#1224492).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure…
Record
SUSE-SU-2024:2019-1
Updated
2026-11-02
OSVSUSE-SU-2024:2135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
  • CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
  • CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
  • CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
  • CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
  • CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
  • CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
  • CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
  • CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
  • CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
  • CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
  • CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
  • CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
  • CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
  • CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
  • CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
  • CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
  • CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
  • CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
  • CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
  • CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
  • CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
  • CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2023-6270: Fixed a use-after-free issue in…
Record
SUSE-SU-2024:2135-1
Updated
2026-11-02
OSVSUSE-SU-2024:2189-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
  • CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-35863: Fix potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-35867: Fix potential UAF in cifs_stats_proc_show() (bsc#1224664).
  • CVE-2024-35868: Fix potential UAF in cifs_stats_proc_write() (bsc#1224678).
  • CVE-2024-26928: Fix potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
  • CVE-2024-35904: Avoid dereference of garbage after mount failure (bsc#1224494).
  • CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
  • CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).

The following non-security bugs were fixed:

  • af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
  • af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
  • af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
  • filemap: remove use of wait bookmarks (bsc#1224085).
  • idpf: extend tx watchdog timeout (bsc#1224137).
  • ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
  • powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
  • powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
  • powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
  • powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
  • powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
  • powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
  • powerpc: Refactor verification of MSR_RI (bsc#1223191).
Record
SUSE-SU-2024:2189-1
Updated
2026-11-02
OSVSUSE-SU-2024:2190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506)
  • CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959)
  • CVE-2022-48691: Fixed memory leak in netfilter (bsc#1223961)
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-42755: Check user supplied offsets (bsc#1215702).
  • CVE-2023-52586: Fixed mutex lock in control vblank irq (bsc#1221081).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52660: Fiedx IRQ handling due to shared interrupts (bsc#1224443).
  • CVE-2023-52664: Eliminate double free in error handling logic (bsc#1224747).
  • CVE-2023-52671: Fixed hang/underflow when transitioning to ODM4:1 (bsc#1224729).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
  • CVE-2023-52746: Prevent potential spectre v1 gadget in xfrm_xlate32_attr() (bsc#1225114)
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
  • CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
  • CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic()on the socket that the SKB is queued on (bsc#1218447).
  • CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26700: Fixed drm/amd/display: Fix MST Null Ptr for RV (bsc#1222870)
  • CVE-2024-26715: Fixed NULL pointer dereference in dwc3_gadget_suspend (bsc#1222561).
  • CVE-2024-26742: Fixed disable_managed_interrupts (git-fixes bsc#1222608).
  • CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
  • CVE-2024-26777: Error out if pixclock equals zero in fbdev/sis (bsc#1222765)
  • CVE-2024-26778: Error out if pixclock equals zero in fbdev/savage (bsc#1222770)
  • CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
  • CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26839: Fixed a memleak in init_credit_return() (bsc#1222975)
  • CVE-2024-26876: Fixed crash on irq during probe (bsc#1223119).
  • CVE-2024-26900: Fixed kmemleak of rdev->serial (bsc#1223046).
  • CVE-2024-26907: Fixed a fortify source warning while accessing Eth segment in mlx5 (bsc#1223203).
  • CVE-2024-26915: Reset IH OVERFLOW_CLEAR bit (bsc#1223207)
  • CVE-2024-26919: Fixed debugfs directory leak (bsc#1223847).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
  • CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
  • CVE-2024-27042: Fixed potential out-of-bounds access in…
Record
SUSE-SU-2024:2190-1
Updated
2026-11-02
OSVSUSE-SU-2024:2203-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
  • CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
  • CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
  • CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
  • CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
  • CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
  • CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
  • CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
  • CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-26632: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635).
  • CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
  • CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
  • CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
  • CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
  • CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
  • CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
  • CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26704: Fixed a…
Record
SUSE-SU-2024:2203-1
Updated
2026-11-02
OSVSUSE-SU-2024:2372-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
  • CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
  • CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
  • CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
  • CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
  • CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
  • CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
  • CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
  • CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
  • CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
  • CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
  • CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
  • CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
  • CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
  • CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
  • CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
  • CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
  • CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
  • CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
  • CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
  • CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
  • CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
  • CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
  • CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
  • CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282bsc#1222072).
  • CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
  • CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (git-fixesbsc#1223641).
  • CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
  • CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
  • CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
  • CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
  • CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
  • CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
  • CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
  • CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
  • CVE-2024-35861:…
Record
SUSE-SU-2024:2372-1
Updated
2026-11-02
OSVSUSE-SU-2024:2394-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
  • CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
  • CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
  • CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
  • CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
  • CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
  • CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
  • CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
  • CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
  • CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
  • CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
  • CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
  • CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
  • CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
  • CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
  • CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
  • CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
  • CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
  • CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
  • CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
  • CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
  • CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
  • CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
  • CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
  • CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282, bsc#1222072).
  • CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
  • CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
  • CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (bsc#1223641).
  • CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
  • CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
  • CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
  • CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
  • CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
  • CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
  • CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
  • CVE-2024-35857: icmp: prevent possible…
Record
SUSE-SU-2024:2394-1
Updated
2026-11-02
OSVSUSE-SU-2024:2929-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
  • CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743)
  • CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829).
  • CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
  • CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
  • CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823).
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
  • CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
  • CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
  • CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
  • CVE-2024-39463: 9p: add missing locking around taking dentry fid list (bsc#1227090).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
  • CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
  • CVE-2024-35901: net: mana: Fix Rx DMA datasize and skb_over_panic (bsc#1224495).
  • CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
  • CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
  • CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).

The following non-security bugs were fixed:

  • NFS: Do not re-read the entire page cache to find the next cookie (bsc#1226662).
  • NFS: Reduce use of uncached readdir (bsc#1226662).
  • NFSv4.x: by default serialize open/close operations (bsc#1226226 bsc#1223863).
  • X.509: Fix the parser of extended key usage for length (bsc#1218820).
  • btrfs: sysfs: update fs features directory asynchronously (bsc#1226168).
  • cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801).
  • jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383).
  • kABI: rtas: Workaround false positive due to lost definition (bsc#1227487).
  • kernel-binary: vdso: Own module_dir
  • net/dcb: check for detached device before executing callbacks (bsc#1215587).
  • ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
  • powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
  • powerpc/rtas: clean up includes (bsc#1227487).
  • workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454).
  • workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454).
Record
SUSE-SU-2024:2929-1
Updated
2026-11-02
OSVSUSE-SU-2024:2939-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
  • CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958).
  • CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
  • CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
  • CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
  • CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
  • CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
  • CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
  • CVE-2021-47546: ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
  • CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
  • CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
  • CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
  • CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
  • CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
  • CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
  • CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
  • CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
  • CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
  • CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571).
  • CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len. (bsc#1226555).
  • CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
  • CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
  • CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
  • CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
  • CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071).
  • CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
  • CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
  • CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
  • CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869).
  • CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
  • CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
  • CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
  • CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
  • CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
  • CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
  • CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
  • CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
  • CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
  • CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
  • CVE-2023-52787: blk-mq: make…
Record
SUSE-SU-2024:2939-1
Updated
2026-11-02
OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
  • CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
  • CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
  • CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
  • CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
  • CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
  • CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
  • CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
  • CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
  • CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
  • CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
  • CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
  • CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
  • CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
  • CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
  • CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
  • CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
  • CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
  • CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
  • CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…
Record
SUSE-SU-2024:2973-1
Updated
2026-11-02
OSVSUSE-SU-2024:3806-1 No score

Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353)
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
Record
SUSE-SU-2024:3806-1
Updated
2026-11-02
OSVSUSE-SU-2024:3815-1 No score

Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353)
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
Record
SUSE-SU-2024:3815-1
Updated
2026-11-02
OSVSUSE-SU-2024:3824-1 No score

Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_21 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
Record
SUSE-SU-2024:3824-1
Updated
2026-11-02
OSVSUSE-SU-2024:3829-1 No score

Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828).
  • CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296).
Record
SUSE-SU-2024:3829-1
Updated
2026-11-02
OSVSUSE-SU-2024:3830-1 No score

Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
Record
SUSE-SU-2024:3830-1
Updated
2026-11-02
OSVSUSE-SU-2024:3831-1 No score

Security update for the Linux Kernel RT (Live Patch 14 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_52 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
Record
SUSE-SU-2024:3831-1
Updated
2026-11-02
OSVSUSE-SU-2024:3834-1 No score

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_8 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (bsc#1231419)
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
Record
SUSE-SU-2024:3834-1
Updated
2026-11-02
OSVSUSE-SU-2024:3837-1 No score

Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
Record
SUSE-SU-2024:3837-1
Updated
2026-11-02
OSVSUSE-SU-2024:3838-1 No score

Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
Record
SUSE-SU-2024:3838-1
Updated
2026-11-02
OSVSUSE-SU-2024:3842-1 No score

Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
Record
SUSE-SU-2024:3842-1
Updated
2026-11-02
OSVSUSE-SU-2024:3851-1 No score

Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • Intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353)
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882).
Record
SUSE-SU-2024:3851-1
Updated
2026-11-02
OSVSUSE-SU-2024:3852-1 No score

Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828).
  • CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296).
Record
SUSE-SU-2024:3852-1
Updated
2026-11-02
OSVSUSE-SU-2024:3855-1 No score

Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
Record
SUSE-SU-2024:3855-1
Updated
2026-11-02
OSVSUSE-SU-2024:3857-1 No score

Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
Record
SUSE-SU-2024:3857-1
Updated
2026-11-02
OSVSUSE-SU-2024:3859-1 No score

Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_36 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
Record
SUSE-SU-2024:3859-1
Updated
2026-11-02
OSVSUSE-SU-2024:3860-1 No score

Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
Record
SUSE-SU-2024:3860-1
Updated
2026-11-02
OSVSUSE-SU-2024:3880-1 No score

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_21 fixes several issues.

The following security issues were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (bsc#1231419)
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
Record
SUSE-SU-2024:3880-1
Updated
2026-11-02
OSVSUSE-SU-2024:4122-1 No score

Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2022-48662: Update for 'really move i915_gem_context.link under ref protection' (bsc#1223521)
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828).
  • CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296).
Record
SUSE-SU-2024:4122-1
Updated
2026-11-02
OSVSUSE-SU-2024:4123-1 No score

Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2022-48662: Update for 'really move i915_gem_context.link under ref protection' (bsc#1223521)
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
Record
SUSE-SU-2024:4123-1
Updated
2026-11-02
OSVSUSE-SU-2024:4124-1 No score

Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2022-48662: Update for 'really move i915_gem_context.link under ref protection' (bsc#1223521)
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
Record
SUSE-SU-2024:4124-1
Updated
2026-11-02
OSVSUSE-SU-2024:4125-1 No score

Security update for the Linux Kernel RT (Live Patch 14 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_13_52 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
Record
SUSE-SU-2024:4125-1
Updated
2026-11-02
OSVSUSE-SU-2024:4207-1 No score

Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
Record
SUSE-SU-2024:4207-1
Updated
2026-11-02
OSVSUSE-SU-2024:4214-1 No score

Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2022-48662: Update for 'really move i915_gem_context.link under ref protection' (bsc#1223521)
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
Record
SUSE-SU-2024:4214-1
Updated
2026-11-02
OSVSUSE-SU-2024:4216-1 No score

Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2022-48662: Update for 'really move i915_gem_context.link under ref protection' (bsc#1223521)
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
Record
SUSE-SU-2024:4216-1
Updated
2026-11-02
OSVSUSE-SU-2024:4218-1 No score

Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2022-48662: Update for 'really move i915_gem_context.link under ref protection' (bsc#1223521)
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220211).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
  • CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828).
  • CVE-2023-52340: Fixed a denial of service related to ICMPv6 'Packet Too Big' packets (bsc#1219296).
Record
SUSE-SU-2024:4218-1
Updated
2026-11-02
OSVSUSE-SU-2024:4235-1 No score

Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues.

The following security issues were fixed:

  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • Fixed intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353)
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882).
Record
SUSE-SU-2024:4235-1
Updated
2026-11-02
OSVSUSE-SU-2024:4236-1 No score

Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues.

The following security issues were fixed:

  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • Fixed intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353)
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
Record
SUSE-SU-2024:4236-1
Updated
2026-11-02
OSVSUSE-SU-2024:4243-1 No score

Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues.

The following security issues were fixed:

  • CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429).
  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
Record
SUSE-SU-2024:4243-1
Updated
2026-11-02
OSVSUSE-SU-2024:4266-1 No score

Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues.

The following security issues were fixed:

  • CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327).
  • CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
  • CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012).
  • CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309).
  • Fixed intermittent nfs mount failures (may be due to SUNRPC over UDP) (bsc#1231353)
  • CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353).
  • CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739).
  • CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
  • CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573).
  • CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325).
  • CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223681).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363).
  • CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1220145).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
  • CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302).
  • CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514).
  • CVE-2024-26766: Fixed SDMA off-by-one error in _pad_sdma_tx_descs() (bsc#1222882).
  • CVE-2023-52502: Fixed a race condition in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (bsc#1220832).
  • CVE-2023-6546: Fixed a race condition in the GSM 0710 tty multiplexor via the GSMIOC_SETCONF ioctl that could lead to local privilege escalation (bsc#1222685).
Record
SUSE-SU-2024:4266-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-lts
Alpaquita:23
 6.1.82-r0 up to 6.1.89-r0
6.1.89-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 7.0.0-284.30.1.el9_2.tuxcare.els12
7.0.0-284.30.1.el9_2.tuxcare.els12
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 37 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els12
5.14.0-284.30.1.el9_2.tuxcare.els12
Kernel
Linux
 before 5.10.215, 5.11.0 up to 5.15.154, 5.16.0 up to 6.1.85, 6.2.0 up to 6.6.26, 6.7.0 up to 6.8.5
5.10.2155.15.1546.1.856.6.266.8.5
linux
Debian:12
 before 6.1.85-1, plus listed versions
6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1
Show 14 moreShow less
6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-1
6.1.85-1
linux
Debian:13
 before 6.8.9-1
6.8.9-1
linux
Debian:14
 before 6.8.9-1
6.8.9-1
linux-5.10
Debian:10
From an advisory covering 344 CVEs
 before 5.10.216-1~deb10u1, plus listed versions
5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1
Show 8 moreShow less
5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u1
5.10.216-1~deb10u1
kernel
openEuler:22.03-LTS-SP1
From an advisory covering 61 CVEs
 before 5.10.0-136.79.0.159.oe2203sp1
5.10.0-136.79.0.159.oe2203sp1
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 55 CVEs
 before 5.10.0-207.0.0.116.oe2203sp3
5.10.0-207.0.0.116.oe2203sp3
bpftool-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:7.4.0-503.11.1.el9_5
0:7.4.0-503.11.1.el9_5
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
bpftool
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:7.4.0-503.11.1.el9_5
0:7.4.0-503.11.1.el9_5
bpftool-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:7.4.0-503.11.1.el9_5
0:7.4.0-503.11.1.el9_5
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-tools
Red Hat:enterprise_linux:9::baseos
From an advisory covering 594 CVEs
 before 0:5.14.0-503.11.1.el9_5
0:5.14.0-503.11.1.el9_5
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-livepatch-SLE15-SP5-RT_Update_16
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 561 CVEs
 before 1-150500.11.3.1
1-150500.11.3.1
kernel-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt_debug
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-syms-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 561 CVEs
 before 5.14.21-150500.13.58.1
5.14.21-150500.13.58.1
kernel-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-rt
openSUSE:Leap Micro 5.3
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-rt
openSUSE:Leap Micro 5.4
From an advisory covering 308 CVEs
 before 5.14.21-150400.15.82.1
5.14.21-150400.15.82.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 541 CVEs
 before 5.14.21-150500.33.57.1
5.14.21-150500.33.57.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-default
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
kernel-default
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-livepatch-SLE15-SP4_Update_27
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 320 CVEs
 before 1-150400.9.3.2
1-150400.9.3.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-default
SUSE:Manager Proxy 4.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
SUSE:Manager Proxy 4.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
kernel-source
SUSE:Manager Proxy 4.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-syms
SUSE:Manager Proxy 4.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-default
SUSE:Manager Server 4.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
SUSE:Manager Server 4.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
kernel-source
SUSE:Manager Server 4.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-syms
SUSE:Manager Server 4.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.1
5.14.21-150400.24.122.1
kernel-zfcpdump
SUSE:Manager Server 4.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default
openSUSE:Leap Micro 5.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
openSUSE:Leap Micro 5.3
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
kernel-default
openSUSE:Leap Micro 5.4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2
5.14.21-150400.24.122.2
kernel-default-base
openSUSE:Leap Micro 5.4
From an advisory covering 320 CVEs
 before 5.14.21-150400.24.122.2.150400.24.58.2
5.14.21-150400.24.122.2.150400.24.58.2
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1.150500.6.31.1
5.14.21-150500.55.68.1.150500.6.31.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
dtb-aarch64
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-64kb
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-debug
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-default-base
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1.150500.6.31.1
5.14.21-150500.55.68.1.150500.6.31.1
kernel-docs
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-kvmsmall
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-obs-build
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-obs-qa
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-source
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-syms
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
kernel-zfcpdump
openSUSE:Leap 15.5
From an advisory covering 557 CVEs
 before 5.14.21-150500.55.68.1
5.14.21-150500.55.68.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3.150600.12.2.7
6.4.0-150600.23.7.3.150600.12.2.7
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.4
6.4.0-150600.23.7.4
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.33.60.1
5.14.21-150500.33.60.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.33.60.1
5.14.21-150500.33.60.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.33.60.1
5.14.21-150500.33.60.1
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 249 CVEs
 before 5.14.21-150500.13.61.1
5.14.21-150500.13.61.1
kernel-default
openSUSE:Leap Micro 5.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-default-base
openSUSE:Leap Micro 5.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1.150500.6.33.8
5.14.21-150500.55.73.1.150500.6.33.8
dtb-aarch64
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-64kb
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-debug
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-default
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-default-base
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1.150500.6.33.8
5.14.21-150500.55.73.1.150500.6.33.8
kernel-docs
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.2
5.14.21-150500.55.73.2
kernel-kvmsmall
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-obs-build
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-obs-qa
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-source
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-syms
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-zfcpdump
openSUSE:Leap 15.5
From an advisory covering 531 CVEs
 before 5.14.21-150500.55.73.1
5.14.21-150500.55.73.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1065.71~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 35 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.1
5.15.0-1065.71~20.04.1
linux-azure-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1068.77~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 38 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.1
5.15.0-1068.77~20.04.1
linux-azure-fde-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1068.77~20.04.1.1, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 30 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.1
5.15.0-1068.77~20.04.1.1
linux-gcp-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1065.73~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 35 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.1
5.15.0-1065.73~20.04.1
linux-gkeop-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1048.55~20.04.1, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 32 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.1
5.15.0-1048.55~20.04.1
linux-hwe-5.15
Ubuntu:20.04:LTS
 before 5.15.0-116.126~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 35 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.1
5.15.0-116.126~20.04.1
linux-ibm-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1058.61~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 16 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.1
5.15.0-1058.61~20.04.1
linux-intel-iotg-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1060.66~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 26 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.1
5.15.0-1060.66~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:20.04:LTS
 before 5.15.0-116.126~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 35 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.1
5.15.0-116.126~20.04.1
linux-oracle-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1063.69~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 34 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.1
5.15.0-1063.69~20.04.1
linux-riscv-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1061.65~20.04.1, plus listed versions
5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1
Show 33 moreShow less
5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.1
5.15.0-1061.65~20.04.1
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux
Ubuntu:22.04:LTS
 before 5.15.0-116.126, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-116.126
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws
Ubuntu:22.04:LTS
 before 5.15.0-1065.71, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 44 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1065.71
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1011.12~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.2
6.8.0-1011.12~22.04.1
linux-azure
Ubuntu:22.04:LTS
 before 5.15.0-1068.77, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 45 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75
5.15.0-1068.77
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known

History

History
RecordedChangedSources
affected
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-35905 is a high vulnerability (CVSS 7.8) in Debian Linux, published May 19, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 13th percentile. Fixed in linux-lts 6.1.89-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 332 package rows, 6 versions, 6,824 references and the rest of 12 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 29 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open