Every CVE Search/ Get API key

CVE-2024-36921

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

8.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.34%Up 0.3 points since May 31, 2024
90%50%10%1%

What each source reports

CVE List Score used 8.8

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.

Record
CVE-2024-36921
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2024-36271 8.8

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.

Record
EUVD-2024-36271
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
NVD 8.8

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.

Record
CVE-2024-36921
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-129
Updated
2026-11-02
OSVAZL-57558 7.8

CVE-2024-36921 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.

Record
AZL-57558
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2024-36921 7.8
Record
BELL-CVE-2024-36921
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 8.8

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.

Record
CVE-2024-36921
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 43 moreShow less
OSVDEBIAN-CVE-2024-36921 7.8

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on removal Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.

Record
DEBIAN-CVE-2024-36921
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2296 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

apparmor: Fix null pointer deref when receiving skb during sock creation

The panic below is observed when receiving ICMP packets with secmark set while an ICMP raw socket is being created. SK_CTX(sk)->label is updated in apparmor_socket_post_create(), but the packet is delivered to the socket before that, causing the null pointer dereference. Drop the packet if label context is not set.

BUG: kernel NULL pointer dereference, address: 000000000000004c
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 407 Comm: a.out Not tainted 6.4.12-arch1-1 #1 3e6fa2753a2d75925c34ecb78e22e85a65d083df
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020
RIP: 0010:aa_label_next_confined+0xb/0x40
Code: 00 00 48 89 ef e8 d5 25 0c 00 e9 66 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 0f 1f 44 00 00 89 f0 <8b> 77 4c 39 c6 7e 1f 48 63 d0 48 8d 14 d7 eb 0b 83 c0 01 48 83 c2
RSP: 0018:ffffa92940003b08 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000000e
RDX: ffffa92940003be8 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff8b57471e7800 R08: ffff8b574c642400 R09: 0000000000000002
R10: ffffffffbd820eeb R11: ffffffffbeb7ff00 R12: ffff8b574c642400
R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
FS:  00007fb092ea7640(0000) GS:ffff8b577bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000000004c CR3: 00000001020f2005 CR4: 00000000007706f0
PKRU: 55555554
Call Trace:
 <IRQ>
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? aa_label_next_confined+0xb/0x40
 apparmor_secmark_check+0xec/0x330
 security_sock_rcv_skb+0x35/0x50
 sk_filter_trim_cap+0x47/0x250
 sock_queue_rcv_skb_reason+0x20/0x60
 raw_rcv+0x13c/0x210
 raw_local_deliver+0x1f3/0x250
 ip_protocol_deliver_rcu+0x4f/0x2f0
 ip_local_deliver_finish+0x76/0xa0
 __netif_receive_skb_one_core+0x89/0xa0
 netif_receive_skb+0x119/0x170
 ? __netdev_alloc_skb+0x3d/0x140
 vmxnet3_rq_rx_complete+0xb23/0x1010 [vmxnet3 56a84f9c97178c57a43a24ec073b45a9d6f01f3a]
 vmxnet3_poll_rx_only+0x36/0xb0 [vmxnet3 56a84f9c97178c57a43a24ec073b45a9d6f01f3a]
 __napi_poll+0x28/0x1b0
 net_rx_action+0x2a4/0x380
 __do_softirq+0xd1/0x2c8
 __irq_exit_rcu+0xbb/0xf0
 common_interrupt+0x86/0xa0
 </IRQ>
 <TASK>
 asm_common_interrupt+0x26/0x40
RIP: 0010:apparmor_socket_post_create+0xb/0x200
Code: 08 48 85 ff 75 a1 eb b1 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 41 54 <55> 48 89 fd 53 45 85 c0 0f 84 b2 00 00 00 48 8b 1d 80 56 3f 02 48
RSP: 0018:ffffa92940ce7e50 EFLAGS: 00000286
RAX: ffffffffbc756440 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000003 RSI: 0000000000000002 RDI: ffff8b574eaab740
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: ffff8b57444cec70 R11: 0000000000000000 R12: 0000000000000003
R13: 0000000000000002 R14: ffff8b574eaab740 R15: ffffffffbd8e4748
 ? __pfx_apparmor_socket_post_create+0x10/0x10
 security_socket_post_create+0x4b/0x80
 __sock_create+0x176/0x1f0
 __sys_socket+0x89/0x100
 __x64_sys_socket+0x17/0x20
 do_syscall_64+0x5d/0x90
 ? do_syscall_64+0x6c/0x90
 ? do_syscall_64+0x6c/0x90
 ? do_syscall_64+0x6c/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc(CVE-2023-52889)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: use…

Record
OESA-2024-2296
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:5101 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:5101
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:5102 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2024:5102
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:5363 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:5363
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2024-36921 7.8

CVE-2024-36921 in linux - Patched by Root

Root has patched CVE-2024-36921 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2024-36921
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2024-36921 7.8

CVE-2024-36921 in linux - Patched by Root

Root has patched CVE-2024-36921 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2024-36921
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2024-36921 5.6

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on removal Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.

Record
UBUNTU-CVE-2024-36921
CVSS 4.0
5.6 MediumCVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
  • (CVE-2023-28746)
  • (CVE-2023-52847)
  • (CVE-2021-47548)
  • (CVE-2024-36921)
  • (CVE-2024-26921)
  • (CVE-2021-47579)
  • (CVE-2024-36927)
  • (CVE-2024-39276)
  • (CVE-2024-33621)
  • (CVE-2024-27010)
  • (CVE-2024-26960)
  • (CVE-2024-38596)
  • (CVE-2022-48743)
  • (CVE-2024-26733)
  • (CVE-2024-26586)
  • (CVE-2024-26698)
  • (CVE-2023-52619)

Bug Fix(es):

  • AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
  • [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
  • [almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
  • lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
  • [Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
  • Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
  • blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
  • (JIRA:AlmaLinux-31798)
  • (JIRA:AlmaLinux-10263)
  • (JIRA:AlmaLinux-40901)
  • (JIRA:AlmaLinux-43547)
  • (JIRA:AlmaLinux-34876)

Enhancement(s):

  • [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:AlmaLinux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
ALSA-2024:5101
Updated
2026-11-02
OSVALSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
  • kernel: crash due to a missing check for leb_size (CVE-2024-25739)
  • kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
  • kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
  • kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
  • kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
  • kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
  • kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
  • kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
  • kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
  • kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
  • kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
  • kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
  • kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
  • kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
  • kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
  • kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
  • kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
  • kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
  • kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
  • kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
  • (CVE-2023-52832)
  • (CVE-2023-52803)
  • (CVE-2023-52756)
  • (CVE-2023-52834)
  • (CVE-2023-52791)
  • (CVE-2023-52764)
  • (CVE-2021-47468)
  • (CVE-2021-47284)
  • (CVE-2024-36025)
  • (CVE-2024-36941)
  • (CVE-2024-36940)
  • (CVE-2024-36904)
  • (CVE-2024-36896)
  • (CVE-2024-36954)
  • (CVE-2024-36950)
  • (CVE-2024-38575)
  • (CVE-2024-36917)
  • (CVE-2024-36016)
  • (CVE-2023-52762)
  • (CVE-2024-27025)
  • (CVE-2021-47548)
  • (CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
ALSA-2024:5102
Updated
2026-11-02
OSVALSA-2024:5363 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

  • kernel: phy: (CVE-2024-26600)
  • kernel: netfilter: multiple flaws (CVE-2024-26808, CVE-2024-27065, CVE-2024-35899, CVE-2024-36005)
  • kernel: cifs: (CVE-2024-26828)
  • kernel: wifi: multiple flaws (CVE-2024-26897, CVE-2024-27052, CVE-2024-27049, CVE-2023-52651, CVE-2024-35789, CVE-2024-27434, CVE-2024-35845, CVE-2024-35937, CVE-2024-36941, CVE-2024-36922, CVE-2024-36921, CVE-2024-38575)
  • kernel: nfs: (CVE-2024-26868)
  • kernel: igc: (CVE-2024-26853)
  • kernel: dmaengine/idxd: (CVE-2024-21823)
  • kernel: ipv6: multiple flaws (CVE-2024-27417, CVE-2024-35969, CVE-2024-36903, CVE-2024-40961)
  • kernel: vt: (CVE-2024-35823)
  • kernel: efi: (CVE-2024-35800)
  • kernel: mlxsw: (CVE-2024-35852)
  • kernel: eeprom: (CVE-2024-35848)
  • kernel: ice: (CVE-2024-35911)
  • kernel: platform/x86: (CVE-2023-52864)
  • kernel: i40e: (CVE-2024-36020)
  • kernel: rtnetlink: (CVE-2024-36017)
  • kernel: net: multiple flaws (CVE-2024-36929, CVE-2024-36971, CVE-2021-47606, CVE-2024-38558, CVE-2024-40928, CVE-2024-40954)
  • kernel: ipvlan: (CVE-2024-33621)
  • kernel: tcp: (CVE-2024-37356)
  • kernel: virtio: (CVE-2024-37353)
  • kernel: tls: (CVE-2024-36489)
  • kernel: cxl/region: (CVE-2024-38391)
  • kernel: bonding: (CVE-2024-39487)
  • kernel: netns: (CVE-2024-40958)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:5363
Updated
2026-11-02
OSVCLSA-2025-1744213128 No score

Fix of 55 CVEs

Record
CLSA-2025-1744213128
Updated
2026-11-02
OSVCLSA-2025-1744624441 No score

Fix of 56 CVEs

[ Ubuntu: 4.15.0-246.257 ]

Record
CLSA-2025-1744624441
Updated
2026-11-02
OSVCLSA-2025-1744713316 No score

Fix of 50 CVEs

Record
CLSA-2025-1744713316
Updated
2026-11-02
OSVCLSA-2025-1758796886 No score

kernel: Fix of 23 CVEs

  • drm/amd/amdgpu: introduce gc_*_mes_2.bin v2
  • proc: fix a dentry lock race between release_task and lookup
  • scsi: aacraid: Stop using PCI_IRQ_AFFINITY
  • scsi: aacraid: Remove useless code
  • scsi: aacraid: Remove unused aac_check_health()
  • scsi: aacraid: struct {user,}sgmap{,64,raw}: Replace 1-element arrays with flexible arrays
  • scsi: aacraid: Rearrange order of struct aac_srb_unit
  • scsi: aacraid: struct aac_ciss_phys_luns_resp: Replace 1-element array with flexible array
  • scsi: aacraid: union aac_init: Replace 1-element array with flexible array
  • scsi: aacraid: aachba: Replace snprintf() with the safer scnprintf() variant
  • Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity"
  • scsi: aacraid: Avoid -Warray-bounds warning
  • scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity
  • scsi: aacraid: Replace all non-returning strlcpy with strscpy
  • scsi: aacraid: Declare SCSI host template const
  • scsi: aacraid: Drop redundant pci_enable_pcie_error_reporting()
  • scsi: aacraid: Allocate cmd_priv with scsicmd
  • scsi: aacraid: Remove redundant "the"
  • scsi: aacraid: Fix undefined behavior due to shift overflowing the constant
  • scsi: aacraid: Clean up some inconsistent indenting
  • scsi: aacraid: Move the SCSI pointer to private command data
  • scsi: aacraid: Fix spelling of "its"
  • scsi: aacraid: Call scsi_done() directly
  • scsi: aacraid: Introduce aac_scsi_done()
  • scsi: aacraid: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
  • scsi: aacraid: Remove an unused include
  • x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler {CVE-2024-25743}
  • net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356}
  • ipv6: mcast: Delay put pmc->idev in mld_del_delrec() {CVE-2025-38550}
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • PM: hibernate: defer device probing when resuming from hibernation {CVE-2022-50202}
  • net: fix UaF in netns ops registration error path {CVE-2023-52999}
  • net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed {CVE-2023-52999}
  • usb: typec: fix potential array underflow in ucsi_ccg_sync_control() {CVE-2024-53203}
  • soundwire: cadence: fix invalid PDI offset {CVE-2024-38635}
  • drm/i915/vma: Fix UAF on destroy against retire race {CVE-2024-26939}
  • netns: Make get_net_ns() handle zero refcount net {CVE-2024-40958}
  • bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487}
  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
  • wifi: ath11k: fix gtk offload status event locking {CVE-2023-52777}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() {CVE-2022-48632}
  • net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739}
  • can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv {CVE-2021-47459}
  • net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg {CVE-2021-47596}
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • crypto: qat - fix double free during reset
  • media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
  • fs/smb/client: Reset password pointer to NULL {CVE-2023-5345}
Record
CLSA-2025-1758796886
Updated
2026-11-02
OSVCLSA-2025-1759431860 No score

kernel: Fix of 39 CVEs

  • ASoC: topology: Clean up route loading {CVE-2024-41069}
  • ASoC: topology: Fix references to freed memory {CVE-2024-41069}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
  • Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965}
  • usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966}
  • media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
  • net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
  • sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932}
  • codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798}
  • sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350}
  • sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350}
  • sch_htb: make htb_deactivate() idempotent {CVE-2025-38350}
  • sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000}
  • inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
  • scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
  • wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
  • mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
  • net: ti: fix UAF in tlan_remove_one {CVE-2021-47310}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
  • net: add atomic_long_t to net_device_stats fields {CVE-2023-52578}
  • media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
  • media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
  • xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039}
  • xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037}
  • xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
  • ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386}
  • ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
  • gfs2: Fix length of holes reported at end-of-file
  • gfs2: Only do glock put in gfs2_create_inode for free inodes
  • gfs2: Fix use-after-free in gfs2_logd after withdraw
  • gfs2: fix use-after-free in trans_drain
  • gfs2: Clean up revokes on normal withdraws
  • GFS2: gfs2_free_extlen can return an extent that is too long
  • gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe
  • GFS2: Refactor gfs2_remove_from_journal
  • GFS2: Only set PageChecked for jdata…
Record
CLSA-2025-1759431860
Updated
2026-11-02
OSVCLSA-2025-1759431869 No score

kernel: Fix of 39 CVEs

  • ASoC: topology: Clean up route loading {CVE-2024-41069}
  • ASoC: topology: Fix references to freed memory {CVE-2024-41069}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
  • Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965}
  • usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966}
  • media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
  • net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
  • sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932}
  • codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798}
  • sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350}
  • sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350}
  • sch_htb: make htb_deactivate() idempotent {CVE-2025-38350}
  • sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000}
  • inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
  • scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
  • wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
  • mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
  • net: ti: fix UAF in tlan_remove_one {CVE-2021-47310}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
  • net: add atomic_long_t to net_device_stats fields {CVE-2023-52578}
  • media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
  • media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
  • xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039}
  • xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037}
  • xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
  • ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386}
  • ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
  • gfs2: Fix length of holes reported at end-of-file
  • gfs2: Only do glock put in gfs2_create_inode for free inodes
  • gfs2: Fix use-after-free in gfs2_logd after withdraw
  • gfs2: fix use-after-free in trans_drain
  • gfs2: Clean up revokes on normal withdraws
  • GFS2: gfs2_free_extlen can return an extent that is too long
  • gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe
  • GFS2: Refactor gfs2_remove_from_journal
  • GFS2: Only set PageChecked for jdata…
Record
CLSA-2025-1759431869
Updated
2026-11-02
OSVCLSA-2025-1759432250 No score

kernel: Fix of 36 CVEs

  • ASoC: topology: Clean up route loading {CVE-2024-41069}
  • ASoC: topology: Fix references to freed memory {CVE-2024-41069}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
  • Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965}
  • usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966}
  • media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
  • inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
  • scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
  • wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
  • mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
  • net: ti: fix UAF in tlan_remove_one {CVE-2021-47310}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
  • net: add atomic_long_t to net_device_stats fields {CVE-2023-52578}
  • media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
  • media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
  • xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039}
  • xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037}
  • xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
  • ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386}
  • ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
Record
CLSA-2025-1759432250
Updated
2026-11-02
OSVCLSA-2025-1763722365 No score

kernel: Fix of 63 CVEs

  • wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226} {CVE-2023-53226}
  • wifi: mac80211: check S1G action frame size {CVE-2023-53257} {CVE-2023-53257}
  • wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864} {CVE-2025-39864}
  • partitions: mac: fix handling of bogus partition table {CVE-2025-21772} {CVE-2025-21772}
  • wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} {CVE-2024-58014}
  • wifi: at76c50x: fix use after free access in at76_disconnect {CVE-2025-37796} {CVE-2025-37796}
  • dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} {CVE-2024-35939}
  • Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} {CVE-2022-50386}
  • efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} {CVE-2025-39817}
  • wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937} {CVE-2024-35937}
  • nfs: fix UAF in direct writes {CVE-2024-26958} {CVE-2024-26958}
  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} {CVE-2024-36921}
  • net/smc: avoid data corruption caused by decline {CVE-2023-52775} {CVE-2023-52775}
  • bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} {CVE-2024-39487}
  • scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} {CVE-2024-40978}
  • mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961} {CVE-2024-26961}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864} {CVE-2023-52864}
  • net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739} {CVE-2024-26739}
  • drm/dp_mst: Fix resetting msg rx state after topology removal {CVE-2024-57876} {CVE-2024-57876}
  • net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556} {CVE-2024-38556}
  • of: Fix double free in of_parse_phandle_with_args_map {CVE-2023-52679} {CVE-2023-52679}
  • xhci: Handle TD clearing for multiple streams case {CVE-2024-40927} {CVE-2024-40927}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} {CVE-2023-52530}
  • net: openvswitch: Fix Use-After-Free in ovs_ct_exit {CVE-2024-27395} {CVE-2024-27395}
  • r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586} {CVE-2024-38586}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} {CVE-2023-52764}
  • media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847} {CVE-2023-52847}
  • vsock: Fix transport_* TOCTOU {CVE-2025-38461} {CVE-2025-38461}
  • ppdev: Add an error check in register_device {CVE-2024-36015} {CVE-2024-36015}
  • HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} {CVE-2025-38556}
  • iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904} {CVE-2024-57904}
  • perf/aux: Fix AUX buffer serialization {CVE-2024-46713} {CVE-2024-46713}
  • net_sched: hfsc: Fix a UAF vulnerability in class handling {CVE-2025-37797} {CVE-2025-37797}
  • wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072} {CVE-2024-58072}
  • wifi: rtlwifi: remove unused dualmac control leftovers {CVE-2024-58072} {CVE-2024-58072}
  • wifi: rtlwifi: remove unused timer and related code {CVE-2024-58072} {CVE-2024-58072}
  • ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() {CVE-2025-22121} {CVE-2025-22121}
  • ext4: move where set the MAY_INLINE_DATA flag is set {CVE-2025-22121} {CVE-2025-22121}
  • ext4: introduce ITAIL helper {CVE-2025-22121} {CVE-2025-22121}
  • ext4: improve xattr consistency checking and error reporting {CVE-2025-22121} {CVE-2025-22121}
  • mm: fix zswap writeback race condition {CVE-2023-53178} {CVE-2023-53178}
  • fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367} {CVE-2022-50367}
  • ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  • ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} {CVE-2025-39757}
  • smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527} {CVE-2025-38527} -…
Record
CLSA-2025-1763722365
Updated
2026-11-02
OSVCLSA-2026-1771078945 No score

kernel: Fix of 131 CVEs

  • net/ieee802154: don't warn zero-sized raw_sendmsg() {CVE-2022-50706}
  • scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}
  • ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
  • ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
  • smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
  • wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
  • xfrm: Duplicate SPI Handling {CVE-2025-39797}
  • scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input {CVE-2022-50030}
  • net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent {CVE-2022-48883}
  • net/mlx5e: Move representor neigh cleanup to profile cleanup_tx {CVE-2023-54148}
  • dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085}
  • ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() {CVE-2022-50050}
  • nfs: fix UAF in direct writes {CVE-2024-26958}
  • iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406}
  • drm/amdkfd: Fix an illegal memory access {CVE-2023-53090}
  • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • ALSA: pcm: Fix potential data race at PCM memory allocation helpers {CVE-2023-54072}
  • drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes {CVE-2023-53077}
  • net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
  • loop: Fix use-after-free issues {CVE-2023-53111}
  • media: rc: fix races with imon_disconnect() {CVE-2025-39993}
  • fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198}
  • vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}
  • Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673}
  • ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}
  • libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285}
  • firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432}
  • tracing: Fix wild-memory-access in register_synth_event() {CVE-2022-49799}
  • iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093}
  • drm/shmem-helper: Remove another errant put in error path {CVE-2023-53084}
  • wifi: mac80211: Fix UAF in ieee80211_scan_rx() {CVE-2022-49934}
  • drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() {CVE-2022-50185}
  • ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403}
  • wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279}
  • nbd: fix incomplete validation of ioctl arg {CVE-2023-53513}
  • r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586}
  • sctp: handle the error returned from sctp_auth_asoc_init_active_key {CVE-2022-50243}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-39493}
  • i40e: fix idx validation in config queues msg {CVE-2025-39971}
  • netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
  • netfilter: validate user input for expected length {CVE-2024-35962}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • wifi: iwlwifi: fix a memory corruption {CVE-2024-26610}
  • pid: take a reference when initializing cad_pid {CVE-2021-47118}
  • wifi: cfg80211: check A-MSDU format more carefully…
Record
CLSA-2026-1771078945
Updated
2026-11-02
OSVCLSA-2026-1773047921 No score

kernel: Fix of 70 CVEs

  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
  • ASoC: topology: Fix references to freed memory {CVE-2024-41069}
  • net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739}
  • drivers: base: Free devm resources when unregistering a device {CVE-2023-53596}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}
  • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673}
  • xfrm: fix slab-use-after-free in decode_session6 {CVE-2023-53500}
  • net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
  • NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680}
  • perf/core: Exit early on perf_mmap() fail {CVE-2025-38565}
  • i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911}
  • fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271}
  • virtio_net: fix xdp_rxq_info bug after suspend/resume {CVE-2022-49687}
  • NFSD: Fix the behavior of READ near OFFSET_MAX {CVE-2022-48827}
  • usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
  • Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967}
  • netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042}
  • netfilter: validate user input for expected length {CVE-2024-35896}
  • erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053}
  • scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
  • i40e: remove read access to debugfs files {CVE-2025-39901}
  • wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
  • Bluetooth: hci_sock: Prevent race in socket write iter and sock bind {CVE-2025-68305}
  • RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022}
  • netfilter: allow exp not to be removed in nf_ct_find_expectation {CVE-2023-52927}
  • dm-bufio: don't schedule in atomic context {CVE-2025-37928}
  • HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020}
  • netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201}
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560}
  • netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() {CVE-2024-35791}
  • scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521}
  • dm cache: Fix UAF in destroy() {CVE-2022-50496}
  • xhci: Remove device endpoints from bandwidth list when freeing the device {CVE-2022-50470}
  • Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386}
  • mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800}
  • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
  • igb: Do not bring the device up after non-fatal error {CVE-2024-50040}
  • wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
  • HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824}
  • fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304}
  • HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454}
  • udf: Do not bother merging very long extents {CVE-2023-53506}
  • wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551}
  • ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
  • dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path…
Record
CLSA-2026-1773047921
Updated
2026-11-02
OSVMGASA-2024-0263 No score

Updated kernel kmod-xtables-addons kmod-virtualbox dwarves packages fix security vulnerabilities

Upstream kernel version 6.6.37 fix bugs and vulnerabilities. The dwarves, kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record
MGASA-2024-0263
Updated
2026-11-02
OSVMGASA-2024-0266 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.37 fix bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2024-0266
Updated
2026-11-02
OSVopenSUSE-SU-2024:14314-1 No score

klp-build-0~20240902.c95cc9e-1.1 on GA media

These are all security issues fixed in the klp-build-0~20240902.c95cc9e-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14314-1
Updated
2026-11-02
OSVRLSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)

  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)

  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)

  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)

  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)

  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)

  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)

  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)

  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)

  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)

  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)

  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)

  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)

  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)

  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)

  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)

  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)

  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)

  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)

  • (CVE-2023-28746)

  • (CVE-2023-52847)

  • (CVE-2021-47548)

  • (CVE-2024-36921)

  • (CVE-2024-26921)

  • (CVE-2021-47579)

  • (CVE-2024-36927)

  • (CVE-2024-39276)

  • (CVE-2024-33621)

  • (CVE-2024-27010)

  • (CVE-2024-26960)

  • (CVE-2024-38596)

  • (CVE-2022-48743)

  • (CVE-2024-26733)

  • (CVE-2024-26586)

  • (CVE-2024-26698)

  • (CVE-2023-52619)

Bug Fix(es):

  • Rocky Linux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux-17678)

  • [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux-23841)

  • [rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux-32941)

  • lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux-33437)

  • [Hyper-V][Rocky Linux-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux-39074)

  • Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux-40167)

  • blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux-40939)

  • (JIRA:Rocky Linux-31798)

  • (JIRA:Rocky Linux-10263)

  • (JIRA:Rocky Linux-40901)

  • (JIRA:Rocky Linux-43547)

  • (JIRA:Rocky Linux-34876)

Enhancement(s):

  • [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
RLSA-2024:5101
Updated
2026-11-02
OSVRLSA-2024:5102 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)

  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)

  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)

  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)

  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)

  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)

  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)

  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)

  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)

  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)

  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)

  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)

  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)

  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)

  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)

  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)

  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)

  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)

  • kernel: crash due to a missing check for leb_size (CVE-2024-25739)

  • kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)

  • kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)

  • kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)

  • kernel: nfs: fix UAF in direct writes (CVE-2024-26958)

  • kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)

  • kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)

  • kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)

  • kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)

  • kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)

  • kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)

  • kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)

  • kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)

  • kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)

  • kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)

  • kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)

  • kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)

  • kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)

  • kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)

  • kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)

  • (CVE-2023-52832)

  • (CVE-2023-52803)

  • (CVE-2023-52756)

  • (CVE-2023-52834)

  • (CVE-2023-52791)

  • (CVE-2023-52764)

  • (CVE-2021-47468)

  • (CVE-2021-47284)

  • (CVE-2024-36025)

  • (CVE-2024-36941)

  • (CVE-2024-36940)

  • (CVE-2024-36904)

  • (CVE-2024-36896)

  • (CVE-2024-36954)

  • (CVE-2024-36950)

  • (CVE-2024-38575)

  • (CVE-2024-36917)

  • (CVE-2024-36016)

  • (CVE-2023-52762)

  • (CVE-2024-27025)

  • (CVE-2021-47548)

  • (CVE-2023-52619)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
RLSA-2024:5102
Updated
2026-11-02
OSVRLSA-2024:5363 No score

Important: kernel security update

Errata Tool Automation could not update the description because it is longer (4803) than ET limit of 4000 characters. (OSCI-6058) Please update the description manually.

Record
RLSA-2024:5363
Updated
2026-11-02
OSVRXSA-2024:5101 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)

  • kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)

  • kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)

  • kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)

  • kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)

  • kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)

  • kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)

  • kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)

  • kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)

  • kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)

  • kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)

  • kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)

  • kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)

  • kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)

  • kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)

  • kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)

  • kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)

  • kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)

  • kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)

  • (CVE-2023-28746)

  • (CVE-2023-52847)

  • (CVE-2021-47548)

  • (CVE-2024-36921)

  • (CVE-2024-26921)

  • (CVE-2021-47579)

  • (CVE-2024-36927)

  • (CVE-2024-39276)

  • (CVE-2024-33621)

  • (CVE-2024-27010)

  • (CVE-2024-26960)

  • (CVE-2024-38596)

  • (CVE-2022-48743)

  • (CVE-2024-26733)

  • (CVE-2024-26586)

  • (CVE-2024-26698)

  • (CVE-2023-52619)

Bug Fix(es):

  • Rocky Linux SIG Cloud8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux SIG Cloud-17678)

  • [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux SIG Cloud-23841)

  • [rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux SIG Cloud-32941)

  • lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux SIG Cloud-33437)

  • [Hyper-V][Rocky Linux SIG Cloud-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux SIG Cloud-39074)

  • Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux SIG Cloud-40167)

  • blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-40939)

  • (JIRA:Rocky Linux SIG Cloud-31798)

  • (JIRA:Rocky Linux SIG Cloud-10263)

  • (JIRA:Rocky Linux SIG Cloud-40901)

  • (JIRA:Rocky Linux SIG Cloud-43547)

  • (JIRA:Rocky Linux SIG Cloud-34876)

Enhancement(s):

  • [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux SIG Cloud-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

Record
RXSA-2024:5101
Updated
2026-11-02
OSVSUSE-SU-2024:2135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
  • CVE-2024-26764: Fixed IOCB_AIO_RW check in fs/aio before the struct aio_kiocb conversion (bsc#1222721).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
  • CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
  • CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
  • CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
  • CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
  • CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
  • CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
  • CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
  • CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
  • CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
  • CVE-2024-26906: Disallowed vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26816: Ignore relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
  • CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
  • CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
  • CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
  • CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
  • CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
  • CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
  • CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
  • CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
  • CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
  • CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
  • CVE-2023-52591: Fixed a possible reiserfs filesystem corruption via directory renaming (bsc#1221044).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2023-6270: Fixed a use-after-free issue in…
Record
SUSE-SU-2024:2135-1
Updated
2026-11-02
OSVSUSE-SU-2024:2203-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
  • CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
  • CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
  • CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
  • CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
  • CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
  • CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
  • CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
  • CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-26632: Fixed iterating over an empty bio with bio_for_each_folio_all (bsc#1221635).
  • CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
  • CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-26654: Fixed use after free in ALSA/sh/aica (bsc#1222304).
  • CVE-2024-26656: Fixed drm/amdgpu use-after-free bug (bsc#1222307).
  • CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
  • CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
  • CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
  • CVE-2024-26679: Fixed read sk->sk_family once in inet_recv_error() (bsc#1222385).
  • CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
  • CVE-2024-26685: Fixed nilfs2 potential bug in end_buffer_async_write (bsc#1222437).
  • CVE-2024-26692: Fixed regression in writes when non-standard maximum write size negotiated (bsc#1222464).
  • CVE-2024-26704: Fixed a…
Record
SUSE-SU-2024:2203-1
Updated
2026-11-02
OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
  • CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
  • CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
  • CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
  • CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
  • CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
  • CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
  • CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
  • CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
  • CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
  • CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
  • CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
  • CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
  • CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
  • CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
  • CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
  • CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
  • CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
  • CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
  • CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
  • CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
  • CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
  • CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
  • CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
  • CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
  • CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
  • CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
  • CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
  • CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
  • CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
  • CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
  • CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
  • CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
  • CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
  • CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
  • CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
  • CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
  • CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
  • CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
  • CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
  • CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
  • CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
  • CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
  • CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…
Record
SUSE-SU-2024:2973-1
Updated
2026-11-02
OSVSUSE-SU-2024:3032-1 No score

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_21 fixes several issues.

The following security issues were fixed:

  • CVE-2024-36921: wifi: iwlwifi: mvm: guard against invalid STA ID removal (bsc#1225850).
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224991).
Record
SUSE-SU-2024:3032-1
Updated
2026-11-02
OSVSUSE-SU-2024:3060-1 No score

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_8 fixes several issues.

The following security issues were fixed:

  • CVE-2024-36921: wifi: iwlwifi: mvm: guard against invalid STA ID removal (bsc#1225850).
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224991).
Record
SUSE-SU-2024:3060-1
Updated
2026-11-02
OSVSUSE-SU-2024:3370-1 No score

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_21 fixes several issues.

The following security issues were fixed:

  • CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1225313).
  • CVE-2024-36921: Guard against invalid STA ID on removal. (bsc#1225769)
  • CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224991).
  • CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013).
  • CVE-2024-35950: Fully protect modes with dev->mode_config.mutex (bsc#1225310).
Record
SUSE-SU-2024:3370-1
Updated
2026-11-02
OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
  • CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
  • CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
  • CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
  • CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
  • CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
  • CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
  • CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
  • CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
  • CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
  • CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
  • CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
  • CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
  • CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
  • CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
  • CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
  • CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
  • CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
  • CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
  • CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
  • CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
  • CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
  • CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
  • CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
  • CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
  • CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
  • CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
  • CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
  • CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
  • CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
  • CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
  • CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
  • CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
  • CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
  • CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
  • CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
  • CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
  • CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
  • CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
  • CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
  • CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
  • CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
  • CVE-2024-35890:…
Record
SUSE-SU-2025:20008-1
Updated
2026-11-02
OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
  • CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
  • CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
  • CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
  • CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
  • CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
  • CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
  • CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
  • CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
  • CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
  • CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
  • CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
  • CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
  • CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
  • CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
  • CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
  • CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
  • CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
  • CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
  • CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
  • CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
  • CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
  • CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
  • CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
  • CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
  • CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
  • CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
  • CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
  • CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
  • CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
  • CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
  • CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
  • CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
  • CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
  • CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
  • CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
  • CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
  • CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
  • CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
  • CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
  • CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
  • CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…
Record
SUSE-SU-2025:20028-1
Updated
2026-11-02
OSVSUSE-SU-2025:20166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161:…
Record
SUSE-SU-2025:20166-1
Updated
2026-11-02
OSVSUSE-SU-2025:20249-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
  • CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
  • CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
  • CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
  • CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
  • CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
  • CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
  • CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
  • CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
  • CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
  • CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
  • CVE-2024-53161:…
Record
SUSE-SU-2025:20249-1
Updated
2026-11-02
OSVUSN-6949-1 No score

linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-nvidia, linux-nvidia-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • M68K architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • DPLL subsystem;
  • FireWire subsystem;
  • EFI core;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • Microsoft Hyper-V drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Macintosh device drivers;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • MMC subsystem;
  • Network drivers;
  • STMicroelectronics network drivers;
  • Device tree and open firmware driver;
  • HiSilicon SoC PMU drivers;
  • PHY drivers;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • Userspace I/O drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • ACRN Hypervisor Service Module driver;
  • Virtio drivers;
  • 9P distributed file system;
  • BTRFS file system;
  • eCrypt file system;
  • EROFS file system;
  • File systems infrastructure;
  • GFS2 file system;
  • JFFS2 file system;
  • Network file systems library;
  • Network file system client;
  • Network file system server daemon;
  • NILFS2 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • Mellanox drivers;
  • Memory management;
  • Socket messages infrastructure;
  • Slab allocator;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • Core kernel;
  • BPF subsystem;
  • DMA mapping infrastructure;
  • RCU subsystem;
  • Dynamic debug library;
  • KUnit library;
  • Maple Tree data structure library;
  • Heterogeneous memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • NSH protocol;
  • Open vSwitch;
  • Phonet protocol;
  • SMC sockets;
  • TIPC protocol;
  • Unix domain sockets;
  • Wireless networking;
  • Key management;
  • ALSA framework;
  • HD-audio driver;
  • Kirkwood ASoC drivers;
  • MediaTek ASoC drivers; (CVE-2024-36006, CVE-2024-36922, CVE-2024-38567, CVE-2024-38584, CVE-2024-36923, CVE-2024-36892, CVE-2024-35855, CVE-2024-35853, CVE-2024-38562, CVE-2024-36920, CVE-2024-38543, CVE-2024-38576, CVE-2024-38572, CVE-2024-36898, CVE-2024-38560, CVE-2024-36004, CVE-2024-36956, CVE-2024-36881, CVE-2024-36977, CVE-2024-36955, CVE-2024-36906, CVE-2024-36013, CVE-2024-36884, CVE-2024-38563, CVE-2024-36966, CVE-2024-38547, CVE-2024-38594, CVE-2024-36926, CVE-2024-38587, CVE-2024-38566, CVE-2024-27400, CVE-2024-36941, CVE-2024-36017, CVE-2024-38544, CVE-2024-36899, CVE-2024-35851, CVE-2024-38577, CVE-2024-38590, CVE-2024-38568, CVE-2024-38559, CVE-2024-38611, CVE-2024-36887, CVE-2024-36886, CVE-2024-35996, CVE-2024-38612, CVE-2024-36925, CVE-2024-38586, CVE-2024-38596, CVE-2024-36932, CVE-2024-39482, CVE-2024-38585, CVE-2024-36033, CVE-2024-38614, CVE-2024-35852, CVE-2024-36908, CVE-2024-36939, CVE-2024-36963, CVE-2024-27401, CVE-2024-36029, CVE-2024-38540, CVE-2024-38565, CVE-2024-36927, CVE-2024-36910, CVE-2024-42134, CVE-2024-36888, CVE-2024-35859, CVE-2024-36911, CVE-2024-35947, CVE-2024-36940, CVE-2024-36921, CVE-2024-36913, CVE-2024-36943, CVE-2024-35986, CVE-2024-38616, CVE-2024-36900, CVE-2024-36954, CVE-2024-36915, CVE-2024-38602, CVE-2024-41011, CVE-2024-35991, CVE-2024-36909, CVE-2024-38603, CVE-2023-52882, CVE-2024-36953, CVE-2024-38599, CVE-2024-38574, CVE-2024-36967, CVE-2024-36895, CVE-2024-36003,…
Record
USN-6949-1
Updated
2026-11-02
OSVUSN-6949-2 No score

linux-lowlatency, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • M68K architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • DPLL subsystem;
  • FireWire subsystem;
  • EFI core;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • Microsoft Hyper-V drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Macintosh device drivers;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • MMC subsystem;
  • Network drivers;
  • STMicroelectronics network drivers;
  • Device tree and open firmware driver;
  • HiSilicon SoC PMU drivers;
  • PHY drivers;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • Userspace I/O drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • ACRN Hypervisor Service Module driver;
  • Virtio drivers;
  • 9P distributed file system;
  • BTRFS file system;
  • eCrypt file system;
  • EROFS file system;
  • File systems infrastructure;
  • GFS2 file system;
  • JFFS2 file system;
  • Network file systems library;
  • Network file system client;
  • Network file system server daemon;
  • NILFS2 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • Mellanox drivers;
  • Memory management;
  • Socket messages infrastructure;
  • Slab allocator;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • Core kernel;
  • BPF subsystem;
  • DMA mapping infrastructure;
  • RCU subsystem;
  • Dynamic debug library;
  • KUnit library;
  • Maple Tree data structure library;
  • Heterogeneous memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • NSH protocol;
  • Open vSwitch;
  • Phonet protocol;
  • SMC sockets;
  • TIPC protocol;
  • Unix domain sockets;
  • Wireless networking;
  • Key management;
  • ALSA framework;
  • HD-audio driver;
  • Kirkwood ASoC drivers;
  • MediaTek ASoC drivers; (CVE-2024-36006, CVE-2024-36922, CVE-2024-38567, CVE-2024-38584, CVE-2024-36923, CVE-2024-36892, CVE-2024-35855, CVE-2024-35853, CVE-2024-38562, CVE-2024-36920, CVE-2024-38543, CVE-2024-38576, CVE-2024-38572, CVE-2024-36898, CVE-2024-38560, CVE-2024-36004, CVE-2024-36956, CVE-2024-36881, CVE-2024-36977, CVE-2024-36955, CVE-2024-36906, CVE-2024-36013, CVE-2024-36884, CVE-2024-38563, CVE-2024-36966, CVE-2024-38547, CVE-2024-38594, CVE-2024-36926, CVE-2024-38587, CVE-2024-38566, CVE-2024-27400, CVE-2024-36941, CVE-2024-36017, CVE-2024-38544, CVE-2024-36899, CVE-2024-35851, CVE-2024-38577, CVE-2024-38590, CVE-2024-38568, CVE-2024-38559, CVE-2024-38611, CVE-2024-36887, CVE-2024-36886, CVE-2024-35996, CVE-2024-38612, CVE-2024-36925, CVE-2024-38586, CVE-2024-38596, CVE-2024-36932, CVE-2024-39482, CVE-2024-38585, CVE-2024-36033, CVE-2024-38614, CVE-2024-35852, CVE-2024-36908, CVE-2024-36939, CVE-2024-36963, CVE-2024-27401, CVE-2024-36029, CVE-2024-38540, CVE-2024-38565, CVE-2024-36927, CVE-2024-36910, CVE-2024-42134, CVE-2024-36888, CVE-2024-35859, CVE-2024-36911, CVE-2024-35947, CVE-2024-36940, CVE-2024-36921, CVE-2024-36913, CVE-2024-36943, CVE-2024-35986, CVE-2024-38616, CVE-2024-36900, CVE-2024-36954, CVE-2024-36915, CVE-2024-38602, CVE-2024-41011, CVE-2024-35991, CVE-2024-36909, CVE-2024-38603, CVE-2023-52882, CVE-2024-36953, CVE-2024-38599, CVE-2024-38574, CVE-2024-36967, CVE-2024-36895, CVE-2024-36003,…
Record
USN-6949-2
Updated
2026-11-02
OSVUSN-6952-1 No score

linux-nvidia-lowlatency, linux-oracle vulnerabilities

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • M68K architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • DPLL subsystem;
  • FireWire subsystem;
  • EFI core;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I2C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Macintosh device drivers;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • MMC subsystem;
  • Network drivers;
  • STMicroelectronics network drivers;
  • Device tree and open firmware driver;
  • HiSilicon SoC PMU drivers;
  • PHY drivers;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • ACRN Hypervisor Service Module driver;
  • Virtio drivers;
  • 9P distributed file system;
  • BTRFS file system;
  • eCrypt file system;
  • EROFS file system;
  • File systems infrastructure;
  • GFS2 file system;
  • JFFS2 file system;
  • Network file systems library;
  • Network file system client;
  • Network file system server daemon;
  • NILFS2 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • Mellanox drivers;
  • Memory management;
  • Socket messages infrastructure;
  • Slab allocator;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • Core kernel;
  • BPF subsystem;
  • DMA mapping infrastructure;
  • RCU subsystem;
  • Dynamic debug library;
  • KUnit library;
  • Maple Tree data structure library;
  • Heterogeneous memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • NSH protocol;
  • Open vSwitch;
  • Phonet protocol;
  • SMC sockets;
  • TIPC protocol;
  • Unix domain sockets;
  • Wireless networking;
  • Key management;
  • ALSA framework;
  • HD-audio driver;
  • Kirkwood ASoC drivers;
  • MediaTek ASoC drivers; (CVE-2024-38601, CVE-2024-36935, CVE-2024-35991, CVE-2024-36032, CVE-2024-35988, CVE-2024-36886, CVE-2024-36913, CVE-2024-36928, CVE-2024-38553, CVE-2024-36927, CVE-2024-38615, CVE-2024-36958, CVE-2024-36977, CVE-2024-36889, CVE-2024-38554, CVE-2024-38590, CVE-2024-42134, CVE-2024-35857, CVE-2024-35850, CVE-2024-35986, CVE-2024-36921, CVE-2024-38569, CVE-2024-36966, CVE-2024-38542, CVE-2024-38585, CVE-2024-36884, CVE-2024-36006, CVE-2024-38577, CVE-2024-36016, CVE-2024-38584, CVE-2024-36887, CVE-2024-38598, CVE-2024-35994, CVE-2024-38603, CVE-2024-35998, CVE-2024-27401, CVE-2024-35852, CVE-2024-36944, CVE-2024-38572, CVE-2024-36917, CVE-2024-36943, CVE-2024-36009, CVE-2024-38587, CVE-2024-35949, CVE-2024-36945, CVE-2024-36004, CVE-2024-36919, CVE-2024-27398, CVE-2024-38582, CVE-2024-35847, CVE-2024-38580, CVE-2024-38602, CVE-2024-36916, CVE-2024-36903, CVE-2024-38555, CVE-2024-36952, CVE-2024-38589, CVE-2024-27394, CVE-2024-36933,…
Record
USN-6952-1
Updated
2026-11-02
OSVUSN-6952-2 No score

linux-azure vulnerabilities

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • M68K architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • DPLL subsystem;
  • FireWire subsystem;
  • EFI core;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • I2C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Macintosh device drivers;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • MMC subsystem;
  • Network drivers;
  • STMicroelectronics network drivers;
  • Device tree and open firmware driver;
  • HiSilicon SoC PMU drivers;
  • PHY drivers;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • ACRN Hypervisor Service Module driver;
  • Virtio drivers;
  • 9P distributed file system;
  • BTRFS file system;
  • eCrypt file system;
  • EROFS file system;
  • File systems infrastructure;
  • GFS2 file system;
  • JFFS2 file system;
  • Network file systems library;
  • Network file system client;
  • Network file system server daemon;
  • NILFS2 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • Mellanox drivers;
  • Memory management;
  • Socket messages infrastructure;
  • Slab allocator;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • Core kernel;
  • BPF subsystem;
  • DMA mapping infrastructure;
  • RCU subsystem;
  • Dynamic debug library;
  • KUnit library;
  • Maple Tree data structure library;
  • Heterogeneous memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • NSH protocol;
  • Open vSwitch;
  • Phonet protocol;
  • SMC sockets;
  • TIPC protocol;
  • Unix domain sockets;
  • Wireless networking;
  • Key management;
  • ALSA framework;
  • HD-audio driver;
  • Kirkwood ASoC drivers;
  • MediaTek ASoC drivers; (CVE-2024-38601, CVE-2024-36935, CVE-2024-35991, CVE-2024-36032, CVE-2024-35988, CVE-2024-36886, CVE-2024-36913, CVE-2024-36928, CVE-2024-38553, CVE-2024-36927, CVE-2024-38615, CVE-2024-36958, CVE-2024-36977, CVE-2024-36889, CVE-2024-38554, CVE-2024-38590, CVE-2024-42134, CVE-2024-35857, CVE-2024-35850, CVE-2024-35986, CVE-2024-36921, CVE-2024-38569, CVE-2024-36966, CVE-2024-38542, CVE-2024-38585, CVE-2024-36884, CVE-2024-36006, CVE-2024-38577, CVE-2024-36016, CVE-2024-38584, CVE-2024-36887, CVE-2024-38598, CVE-2024-35994, CVE-2024-38603, CVE-2024-35998, CVE-2024-27401, CVE-2024-35852, CVE-2024-36944, CVE-2024-38572, CVE-2024-36917, CVE-2024-36943, CVE-2024-36009, CVE-2024-38587, CVE-2024-35949, CVE-2024-36945, CVE-2024-36004, CVE-2024-36919, CVE-2024-27398, CVE-2024-38582, CVE-2024-35847, CVE-2024-38580, CVE-2024-38602, CVE-2024-36916, CVE-2024-36903, CVE-2024-38555, CVE-2024-36952, CVE-2024-38589, CVE-2024-27394, CVE-2024-36933,…
Record
USN-6952-2
Updated
2026-11-02
OSVUSN-6955-1 No score

linux-oem-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • M68K architecture;
  • OpenRISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Accessibility subsystem;
  • Bluetooth drivers;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • DMA engine subsystem;
  • DPLL subsystem;
  • FireWire subsystem;
  • EFI core;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • Microsoft Hyper-V drivers;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Macintosh device drivers;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • MMC subsystem;
  • Network drivers;
  • STMicroelectronics network drivers;
  • Device tree and open firmware driver;
  • HiSilicon SoC PMU drivers;
  • PHY drivers;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Thermal drivers;
  • Userspace I/O drivers;
  • USB subsystem;
  • DesignWare USB3 driver;
  • ACRN Hypervisor Service Module driver;
  • Virtio drivers;
  • 9P distributed file system;
  • BTRFS file system;
  • eCrypt file system;
  • EROFS file system;
  • File systems infrastructure;
  • GFS2 file system;
  • JFFS2 file system;
  • Network file systems library;
  • Network file system client;
  • Network file system server daemon;
  • NILFS2 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • Mellanox drivers;
  • Memory management;
  • Socket messages infrastructure;
  • Slab allocator;
  • Tracing infrastructure;
  • User-space API (UAPI);
  • Core kernel;
  • BPF subsystem;
  • DMA mapping infrastructure;
  • RCU subsystem;
  • Dynamic debug library;
  • KUnit library;
  • Maple Tree data structure library;
  • Heterogeneous memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • NSH protocol;
  • Open vSwitch;
  • Phonet protocol;
  • SMC sockets;
  • TIPC protocol;
  • Unix domain sockets;
  • Wireless networking;
  • Key management;
  • ALSA framework;
  • HD-audio driver;
  • Kirkwood ASoC drivers;
  • MediaTek ASoC drivers; (CVE-2024-35987, CVE-2024-36931, CVE-2024-38614, CVE-2024-35857, CVE-2024-36949, CVE-2024-38599, CVE-2024-35994, CVE-2024-35849, CVE-2024-36916, CVE-2024-38590, CVE-2024-36944, CVE-2024-38561, CVE-2024-38538, CVE-2024-36017, CVE-2024-38593, CVE-2024-36028, CVE-2024-36960, CVE-2024-36002, CVE-2024-36967, CVE-2024-36898, CVE-2024-35989, CVE-2024-36975, CVE-2024-38578, CVE-2024-38582, CVE-2024-38588, CVE-2024-38579, CVE-2024-38617, CVE-2024-36901, CVE-2024-38550, CVE-2023-52882, CVE-2024-38603, CVE-2024-38620, CVE-2024-36956, CVE-2024-36880, CVE-2024-36895, CVE-2024-36979, CVE-2024-36887, CVE-2024-27396, CVE-2024-27400, CVE-2024-36952, CVE-2024-36886, CVE-2024-36905, CVE-2024-36883, CVE-2024-38540, CVE-2024-38605, CVE-2024-36029, CVE-2024-36934, CVE-2024-27395, CVE-2024-36000, CVE-2024-38549, CVE-2024-35999, CVE-2024-38585, CVE-2024-38589, CVE-2024-38565, CVE-2024-36917, CVE-2024-36930, CVE-2024-36940, CVE-2024-36900, CVE-2024-35850, CVE-2024-38592, CVE-2024-38553, CVE-2024-36929, CVE-2024-36915, CVE-2024-36004, CVE-2024-38573, CVE-2024-36941, CVE-2024-38607, CVE-2024-36009, CVE-2024-27398, CVE-2024-36909, CVE-2024-35848, CVE-2024-36950, CVE-2024-38564, CVE-2024-36947, CVE-2024-38613, CVE-2024-38570, CVE-2024-38612, CVE-2024-38580, CVE-2024-38557, CVE-2024-36959, CVE-2024-27399, CVE-2024-41011, CVE-2024-36928, CVE-2024-38543, CVE-2024-38541, CVE-2024-38583, CVE-2024-35855, CVE-2024-38611, CVE-2024-36891,…
Record
USN-6955-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
perf
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 160 CVEs
 before 4.18.0-553.16.1.el8_10
4.18.0-553.16.1.el8_10
kernel-rt
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-kvm
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-kvm
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 149 CVEs
 before 4.18.0-553.16.1.rt7.357.el8_10
4.18.0-553.16.1.rt7.357.el8_10
bpftool
AlmaLinux:9
From an advisory covering 46 CVEs
 before 7.3.0-427.31.1.el9_4
7.3.0-427.31.1.el9_4
kernel
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-devel
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-modules
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-core
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel-cross-headers
AlmaLinux:9
From an advisory covering 46 CVEs
 before 5.14.0-427.31.1.el9_4
5.14.0-427.31.1.el9_4
kernel
Azure Linux:2
 through 5.15.200.1-1 None known
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
linux-buildinfo-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-buildinfo-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-cloud-tools-4.15.0-246-tuxcare.els34
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-cloud-tools-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-cloud-tools-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-cloud-tools-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-crashdump
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-headers-4.15.0-246-tuxcare.els34
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-headers-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-headers-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-headers-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-headers-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-image-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-image-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-image-unsigned-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-image-unsigned-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-modules-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-modules-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-modules-extra-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-source
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-tools-4.15.0-246-tuxcare.els34
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-tools-4.15.0-246-tuxcare.els34-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-tools-4.15.0-246-tuxcare.els34-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-tools-generic
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-tools-host
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257
4.15.0-246.257
linux-tools-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 55 CVEs
 before 4.15.0.246.257
4.15.0.246.257
linux-buildinfo-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-buildinfo-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-cloud-tools-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-cloud-tools-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-headers-4.15.0-246-tuxcare.els44
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-headers-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-headers-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-hwe-cloud-tools-4.15.0-246-tuxcare.els44
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-hwe-tools-4.15.0-246-tuxcare.els44
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-image-unsigned-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-image-unsigned-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-modules-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-modules-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-modules-extra-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-source-4.15.0
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-tools-4.15.0-246-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-tools-4.15.0-246-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 55 CVEs
 before 4.15.0-246.257~16.04.1
4.15.0-246.257~16.04.1
linux-buildinfo-4.4.0-273-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.4.0-273.307
4.4.0-273.307
linux-buildinfo-4.4.0-273-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.4.0-273.307
4.4.0-273.307
linux-cloud-tools-4.4.0-273-tuxcare.els44
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.4.0-273.307
4.4.0-273.307
linux-cloud-tools-4.4.0-273-tuxcare.els44-generic
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.4.0-273.307
4.4.0-273.307
linux-cloud-tools-4.4.0-273-tuxcare.els44-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.4.0-273.307
4.4.0-273.307
Kernel
Linux
 6.4.0 up to 6.6.31, 6.7.0 up to 6.8.10
6.6.316.8.10
linux
Debian:13
 before 6.8.11-1
6.8.11-1
linux
Debian:14
 before 6.8.11-1
6.8.11-1
kernel
Mageia:9
From an advisory covering 320 CVEs
 before 6.6.37-1.mga9
6.6.37-1.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 320 CVEs
 before 3.24-59.mga9
3.24-59.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 320 CVEs
 before 7.0.18-50.mga9
7.0.18-50.mga9
dwarves
Mageia:9
From an advisory covering 320 CVEs
 before 1.27-1.mga9
1.27-1.mga9
kernel-linus
Mageia:9
From an advisory covering 320 CVEs
 before 6.6.37-1.mga9
6.6.37-1.mga9
kernel
openEuler:24.03-LTS
From an advisory covering 96 CVEs
 before 6.6.0-47.0.0.52.oe2403
6.6.0-47.0.0.52.oe2403
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 170 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel
Rocky Linux:8
From an advisory covering 160 CVEs
 before 0:4.18.0-553.16.1.el8_10
0:4.18.0-553.16.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 149 CVEs
 before 0:4.18.0-553.16.1.rt7.357.el8_10
0:4.18.0-553.16.1.rt7.357.el8_10
kernel
Rocky Linux:9
From an advisory covering 46 CVEs
 before 0:5.14.0-427.31.1.el9_4
0:5.14.0-427.31.1.el9_4
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
kernel
Rocky Linux:8
From an advisory covering 160 CVEs
 before 0:4.18.0-553.16.1.el8_10.cloud.0.1
0:4.18.0-553.16.1.el8_10.cloud.0.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.4
6.4.0-150600.8.5.4
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 428 CVEs
 before 6.4.0-150600.8.5.1
6.4.0-150600.8.5.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3.150600.12.2.7
6.4.0-150600.23.7.3.150600.12.2.7
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.4
6.4.0-150600.23.7.4
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-livepatch-SLE15-SP6_Update_1
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 408 CVEs
 before 1-150600.13.3.7
1-150600.13.3.7
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3.150600.12.2.7
6.4.0-150600.23.7.3.150600.12.2.7
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.4
6.4.0-150600.23.7.4
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.2
6.4.0-150600.23.7.2
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.1
6.4.0-150600.23.7.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 408 CVEs
 before 6.4.0-150600.23.7.3
6.4.0-150600.23.7.3
kernel-livepatch-SLE15-SP6-RT_Update_1
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 783 CVEs
 before 1-150600.1.5.1
1-150600.1.5.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 783 CVEs
 before 6.4.0-150600.10.5.1
6.4.0-150600.10.5.1
kernel-livepatch-SLE15-SP6_Update_0
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 2 CVEs
 before 3-150600.4.7.1
3-150600.4.7.1
kernel-livepatch-SLE15-SP6-RT_Update_0
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 2 CVEs
 before 2-150600.3.3.2
2-150600.3.3.2
kernel-livepatch-SLE15-SP6_Update_0
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 7 CVEs
 before 4-150600.1.1
4-150600.1.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-18.1
6.4.0-18.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-17.1.1.51
6.4.0-17.1.1.51
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-18.1
6.4.0-18.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 848 CVEs
 before 6.4.0-18.1
6.4.0-18.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 826 CVEs
 before 6.4.0-9.1
6.4.0-9.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 826 CVEs
 before 6.4.0-9.1
6.4.0-9.1
kernel-livepatch-MICRO-6-0-RT_Update_5
SUSE:Linux Micro 6.0
From an advisory covering 610 CVEs
 before 1-1.1
1-1.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 610 CVEs
 before 6.4.0-25.1
6.4.0-25.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 610 CVEs
 before 6.4.0-25.1
6.4.0-25.1
kernel-livepatch-MICRO-6-0-RT_Update_5
SUSE:Linux Micro 6.1
From an advisory covering 610 CVEs
 before 1-1.1
1-1.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 610 CVEs
 before 6.4.0-25.1
6.4.0-25.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 610 CVEs
 before 6.4.0-25.1
6.4.0-25.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1013.14~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.1
6.8.0-1013.14~22.04.1
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1012.14~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.1
6.8.0-1012.14~22.04.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
klp-build
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 0~20240902.c95cc9e-1.1
0~20240902.c95cc9e-1.1

History

History
RecordedChangedSources
affectedOSV
affected
facts
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-36921 is a high vulnerability (CVSS 8.8) in Linux, published May 30, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in linux-lts 6.12.41-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 444 package rows, 29 versions, 4,270 references and the rest of 21 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open