CVE-2024-36960
drm/vmwgfx: Fix invalid reads in fence signaled events
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix invalid reads in fence signaled events
Correctly set the length of the drm_event to the size of the structure that's actually used.
The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.1
drm/vmwgfx: Fix invalid reads in fence signaled events
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix invalid reads in fence signaled events
Correctly set the length of the drm_event to the size of the structure that's actually used.
The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
- Record
CVE-2024-36960- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2024-36310
7.1
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix invalid reads in fence signaled events
Correctly set the length of the drm_event to the size of the structure that's actually used.
The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
- Record
EUVD-2024-36310- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-5w4f-cwfr-f344
7.1
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid...
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix invalid reads in fence signaled events
Correctly set the length of the drm_event to the size of the structure that's actually used.
The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
- Record
GHSA-5w4f-cwfr-f344- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
NVD
7.1
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix invalid reads in fence signaled events
Correctly set the length of the drm_event to the size of the structure that's actually used.
The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
- Record
CVE-2024-36960- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVBELL-CVE-2024-36960
7.1
- Record
BELL-CVE-2024-36960- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSV
7.1
drm/vmwgfx: Fix invalid reads in fence signaled events
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix invalid reads in fence signaled events
Correctly set the length of the drm_event to the size of the structure that's actually used.
The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
- Record
CVE-2024-36960- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
Show 46 moreShow less
OSVDEBIAN-CVE-2024-36960
7.1
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drm_event to the size of the structure that's actually used. The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
- Record
DEBIAN-CVE-2024-36960- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2024-1736
7.8
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
PCI: aardvark: Fix kernel panic during PIO transfer
Trying to start a new PIO transfer by writing value 0 in PIO_START register when previous transfer has not yet completed (which is indicated by value 1 in PIO_START) causes an External Abort on CPU, which results in kernel panic:
SError Interrupt on CPU0, code 0xbf000002 -- SError
Kernel panic - not syncing: Asynchronous SError Interrupt
To prevent kernel panic, it is required to reject a new PIO transfer when previous one has not finished yet.
If previous PIO transfer is not finished yet, the kernel may issue a new PIO request only if the previous PIO transfer timed out.
In the past the root cause of this issue was incorrectly identified (as it often happens during link retraining or after link down event) and special hack was implemented in Trusted Firmware to catch all SError events in EL3, to ignore errors with code 0xbf000002 and not forwarding any other errors to kernel and instead throw panic from EL3 Trusted Firmware handler.
Links to discussion and patches about this issue: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/?id=3c7dcdac5c50 https://lore.kernel.org/linux-pci/[email protected]/ https://lore.kernel.org/linux-pci/[email protected]/ https://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/1541
But the real cause was the fact that during link retraining or after link down event the PIO transfer may take longer time, up to the 1.44s until it times out. This increased probability that a new PIO transfer would be issued by kernel while previous one has not finished yet.
After applying this change into the kernel, it is possible to revert the mentioned TF-A hack and SError events do not have to be caught in TF-A EL3.(CVE-2021-47229)
In the Linux kernel, the following vulnerability has been resolved:
phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()
Use clk_disable_unprepare() in the error path of mtk_phy_init() to fix some resource leaks.(CVE-2021-47234)
In the Linux kernel, the following vulnerability has been resolved:
net: rds: fix memory leak in rds_recvmsg
Syzbot reported memory leak in rds. The problem was in unputted refcount in case of error.
int rds_recvmsg(struct socket *sock, struct msghdr *msg, size_t size, int msg_flags) { ...
if (!rds_next_incoming(rs, &inc)) {
...
}
After this "if" inc refcount incremented and
if (rds_cmsg_recv(inc, msg, rs)) {
ret = -EFAULT;
goto out;
}
... out: return ret; }
in case of rds_cmsg_recv() fail the refcount won't be decremented. And it's easy to see from ftrace log, that rds_inc_addref() don't have rds_inc_put() pair in rds_recvmsg() after rds_cmsg_recv()
-
| rds_recvmsg() { - 3.721 us | rds_inc_addref();
- 3.853 us | rds_message_inc_copy_to_user();
-
- 10.395 us | rds_cmsg_recv();
-
- 34.260 us | }(CVE-2021-47249)
In the Linux kernel, the following vulnerability has been resolved:
net: ieee802154: fix null deref in parse dev addr
Fix a logic error that could result in a null deref if the user sets the mode incorrectly for the given addr type.(CVE-2021-47257)
In the Linux kernel, the following vulnerability has been resolved:
usb: fix various gadget panics on 10gbps cabling
usb_assign_descriptors() is called with 5 parameters, the last 4 of which are the usb_descriptor_header for: full-speed (USB1.1 - 12Mbps [including USB1.0 low-speed @ 1.5Mbps), high-speed (USB2.0 - 480Mbps), super-speed (USB3.0 - 5Gbps), super-speed-plus (USB3.1 - 10Gbps).
The differences between full/high/super-speed descriptors are usually substantial (due to changes in the maximum usb block size from 64 to 512 to 1024 bytes and…
- Record
OESA-2024-1736- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-1737
7.8
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
AFS-3 has two data fetch RPC variants, FS.FetchData and FS.FetchData64, and Linux's afs client switches between them when talking to a non-YFS server if the read size, the file position or the sum of the two have the upper 32 bits set of the 64-bit value.
This is a problem, however, since the file position and length fields of FS.FetchData are signed 32-bit values.
Fix this by capturing the capability bits obtained from the fileserver when it's sent an FS.GetCapabilities RPC, rather than just discarding them, and then picking out the VICED_CAPABILITY_64BITFILES flag. This can then be used to decide whether to use FS.FetchData or FS.FetchData64 - and also FS.StoreData or FS.StoreData64 - rather than using upper_32_bits() to switch on the parameter values.
This capabilities flag could also be used to limit the maximum size of the file, but all servers must be checked for that.
Note that the issue does not exist with FS.StoreData - that uses unsigned 32-bit values. It's also not a problem with Auristor servers as its YFS.FetchData64 op uses unsigned 64-bit values.
This can be tested by cloning a git repo through an OpenAFS client to an OpenAFS server and then doing "git status" on it from a Linux afs client[1]. Provided the clone has a pack file that's in the 2G-4G range, the git status will show errors like:
error: packfile .git/objects/pack/pack-5e813c51d12b6847bbc0fcd97c2bca66da50079c.pack does not match index
error: packfile .git/objects/pack/pack-5e813c51d12b6847bbc0fcd97c2bca66da50079c.pack does not match index
This can be observed in the server's FileLog with something like the following appearing:
Sun Aug 29 19:31:39 2021 SRXAFS_FetchData, Fid = 2303380852.491776.3263114, Host 192.168.11.201:7001, Id 1001 Sun Aug 29 19:31:39 2021 CheckRights: len=0, for host=192.168.11.201:7001 Sun Aug 29 19:31:39 2021 FetchData_RXStyle: Pos 18446744071815340032, Len 3154 Sun Aug 29 19:31:39 2021 FetchData_RXStyle: file size 2400758866 ... Sun Aug 29 19:31:40 2021 SRXAFS_FetchData returns 5
Note the file position of 18446744071815340032. This is the requested file position sign-extended.(CVE-2021-47366)
In the Linux kernel, the following vulnerability has been resolved:
net/smc: Fix possible access to freed memory in link clear
After modifying the QP to the Error state, all RX WR would be completed with WC in IB_WC_WR_FLUSH_ERR status. Current implementation does not wait for it is done, but destroy the QP and free the link group directly. So there is a risk that accessing the freed memory in tasklet context.
Here is a crash example:
BUG: unable to handle page fault for address: ffffffff8f220860 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD f7300e067 P4D f7300e067 PUD f7300f063 PMD 8c4e45063 PTE 800ffff08c9df060 Oops: 0002 [#1] SMP PTI CPU: 1 PID: 0 Comm: swapper/1 Kdump: loaded Tainted: G S OE 5.10.0-0607+ #23 Hardware name: Inspur NF5280M4/YZMB-00689-101, BIOS 4.1.20 07/09/2018 RIP: 0010:native_queued_spin_lock_slowpath+0x176/0x1b0 Code: f3 90 48 8b 32 48 85 f6 74 f6 eb d5 c1 ee 12 83 e0 03 83 ee 01 48 c1 e0 05 48 63 f6 48 05 00 c8 02 00 48 03 04 f5 00 09 98 8e <48> 89 10 8b 42 08 85 c0 75 09 f3 90 8b 42 08 85 c0 74 f7 48 8b 32 RSP: 0018:ffffb3b6c001ebd8 EFLAGS: 00010086 RAX: ffffffff8f220860 RBX: 0000000000000246 RCX: 0000000000080000 RDX: ffff91db1f86c800 RSI: 000000000000173c RDI: ffff91db62bace00 RBP: ffff91db62bacc00 R08: 0000000000000000 R09: c00000010000028b R10: 0000000000055198 R11: ffffb3b6c001ea58 R12: ffff91db80e05010 R13: 000000000000000a R14: 0000000000000006 R15: 0000000000000040 FS: 0000000000000000(0000) GS:ffff91db1f840000(0000)…
- Record
OESA-2024-1737- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-1738
7.8
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
AFS-3 has two data fetch RPC variants, FS.FetchData and FS.FetchData64, and Linux's afs client switches between them when talking to a non-YFS server if the read size, the file position or the sum of the two have the upper 32 bits set of the 64-bit value.
This is a problem, however, since the file position and length fields of FS.FetchData are signed 32-bit values.
Fix this by capturing the capability bits obtained from the fileserver when it's sent an FS.GetCapabilities RPC, rather than just discarding them, and then picking out the VICED_CAPABILITY_64BITFILES flag. This can then be used to decide whether to use FS.FetchData or FS.FetchData64 - and also FS.StoreData or FS.StoreData64 - rather than using upper_32_bits() to switch on the parameter values.
This capabilities flag could also be used to limit the maximum size of the file, but all servers must be checked for that.
Note that the issue does not exist with FS.StoreData - that uses unsigned 32-bit values. It's also not a problem with Auristor servers as its YFS.FetchData64 op uses unsigned 64-bit values.
This can be tested by cloning a git repo through an OpenAFS client to an OpenAFS server and then doing "git status" on it from a Linux afs client[1]. Provided the clone has a pack file that's in the 2G-4G range, the git status will show errors like:
error: packfile .git/objects/pack/pack-5e813c51d12b6847bbc0fcd97c2bca66da50079c.pack does not match index
error: packfile .git/objects/pack/pack-5e813c51d12b6847bbc0fcd97c2bca66da50079c.pack does not match index
This can be observed in the server's FileLog with something like the following appearing:
Sun Aug 29 19:31:39 2021 SRXAFS_FetchData, Fid = 2303380852.491776.3263114, Host 192.168.11.201:7001, Id 1001 Sun Aug 29 19:31:39 2021 CheckRights: len=0, for host=192.168.11.201:7001 Sun Aug 29 19:31:39 2021 FetchData_RXStyle: Pos 18446744071815340032, Len 3154 Sun Aug 29 19:31:39 2021 FetchData_RXStyle: file size 2400758866 ... Sun Aug 29 19:31:40 2021 SRXAFS_FetchData returns 5
Note the file position of 18446744071815340032. This is the requested file position sign-extended.(CVE-2021-47366)
In the Linux kernel, the following vulnerability has been resolved:
net/smc: Fix possible access to freed memory in link clear
After modifying the QP to the Error state, all RX WR would be completed with WC in IB_WC_WR_FLUSH_ERR status. Current implementation does not wait for it is done, but destroy the QP and free the link group directly. So there is a risk that accessing the freed memory in tasklet context.
Here is a crash example:
BUG: unable to handle page fault for address: ffffffff8f220860 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD f7300e067 P4D f7300e067 PUD f7300f063 PMD 8c4e45063 PTE 800ffff08c9df060 Oops: 0002 [#1] SMP PTI CPU: 1 PID: 0 Comm: swapper/1 Kdump: loaded Tainted: G S OE 5.10.0-0607+ #23 Hardware name: Inspur NF5280M4/YZMB-00689-101, BIOS 4.1.20 07/09/2018 RIP: 0010:native_queued_spin_lock_slowpath+0x176/0x1b0 Code: f3 90 48 8b 32 48 85 f6 74 f6 eb d5 c1 ee 12 83 e0 03 83 ee 01 48 c1 e0 05 48 63 f6 48 05 00 c8 02 00 48 03 04 f5 00 09 98 8e <48> 89 10 8b 42 08 85 c0 75 09 f3 90 8b 42 08 85 c0 74 f7 48 8b 32 RSP: 0018:ffffb3b6c001ebd8 EFLAGS: 00010086 RAX: ffffffff8f220860 RBX: 0000000000000246 RCX: 0000000000080000 RDX: ffff91db1f86c800 RSI: 000000000000173c RDI: ffff91db62bace00 RBP: ffff91db62bacc00 R08: 0000000000000000 R09: c00000010000028b R10: 0000000000055198 R11: ffffb3b6c001ea58 R12: ffff91db80e05010 R13: 000000000000000a R14: 0000000000000006 R15: 0000000000000040 FS: 0000000000000000(0000) GS:ffff91db1f840000(0000)…
- Record
OESA-2024-1738- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:10771
7.8
Red Hat Security Advisory: kernel security update
- Record
RHSA-2024:10771- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:5066
7.1
Red Hat Security Advisory: kernel security update
- Record
RHSA-2024:5066- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:5067
7.1
Red Hat Security Advisory: kernel-rt security update
- Record
RHSA-2024:5067- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:5101
7.8
Red Hat Security Advisory: kernel security update
- Record
RHSA-2024:5101- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:5102
7.8
Red Hat Security Advisory: kernel-rt security update
- Record
RHSA-2024:5102- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:9315
7.8
Red Hat Security Advisory: kernel security update
- Record
RHSA-2024:9315- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-36960
4.8
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drm_event to the size of the structure that's actually used. The length of the drm_event was set to the parent structure instead of to the drm_vmw_event_fence which is supposed to be read. drm_read uses the length parameter to copy the event to the user space thus resuling in oob reads.
- Record
UBUNTU-CVE-2024-36960- CVSS 4.0
- 4.8 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-06
OSVALSA-2024:5101 No score
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
- kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
- kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
- kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
- kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
- kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
- kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
- kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
- kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
- kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
- kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
- kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
- kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
- kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
- kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
- kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
- kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
- kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
- kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
- kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
- (CVE-2023-28746)
- (CVE-2023-52847)
- (CVE-2021-47548)
- (CVE-2024-36921)
- (CVE-2024-26921)
- (CVE-2021-47579)
- (CVE-2024-36927)
- (CVE-2024-39276)
- (CVE-2024-33621)
- (CVE-2024-27010)
- (CVE-2024-26960)
- (CVE-2024-38596)
- (CVE-2022-48743)
- (CVE-2024-26733)
- (CVE-2024-26586)
- (CVE-2024-26698)
- (CVE-2023-52619)
Bug Fix(es):
- AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
- [AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
- [almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
- lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
- [Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
- Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
- blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
- (JIRA:AlmaLinux-31798)
- (JIRA:AlmaLinux-10263)
- (JIRA:AlmaLinux-40901)
- (JIRA:AlmaLinux-43547)
- (JIRA:AlmaLinux-34876)
Enhancement(s):
- [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:AlmaLinux-19723)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
- Record
ALSA-2024:5101- Updated
- 2026-11-02
OSVALSA-2024:5102 No score
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
- kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
- kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
- kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
- kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
- kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
- kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
- kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
- kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
- kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
- kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
- kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
- kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
- kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
- kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
- kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
- kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
- kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
- kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
- kernel: crash due to a missing check for leb_size (CVE-2024-25739)
- kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
- kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
- kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
- kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
- kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
- kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
- kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
- kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
- kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
- kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
- kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
- kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
- kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
- kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
- kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
- kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
- kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
- kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
- kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
- (CVE-2023-52832)
- (CVE-2023-52803)
- (CVE-2023-52756)
- (CVE-2023-52834)
- (CVE-2023-52791)
- (CVE-2023-52764)
- (CVE-2021-47468)
- (CVE-2021-47284)
- (CVE-2024-36025)
- (CVE-2024-36941)
- (CVE-2024-36940)
- (CVE-2024-36904)
- (CVE-2024-36896)
- (CVE-2024-36954)
- (CVE-2024-36950)
- (CVE-2024-38575)
- (CVE-2024-36917)
- (CVE-2024-36016)
- (CVE-2023-52762)
- (CVE-2024-27025)
- (CVE-2021-47548)
- (CVE-2023-52619)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
- Record
ALSA-2024:5102- Updated
- 2026-11-02
OSVCLSA-2024-1723806933 No score
Fix of 55 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-39467
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- CVE-url: https://ubuntu.com/security/CVE-2024-36940
- pinctrl: core: delete incorrect free in pinctrl_enable()
- CVE-url: https://ubuntu.com/security/CVE-2024-38659
- enic: Validate length of nl attributes in enic_set_vf_port
- CVE-url: https://ubuntu.com/security/CVE-2024-38560
- scsi: bfa: Ensure the copied buf is NUL terminated
- CVE-url: https://ubuntu.com/security/CVE-2024-36941
- wifi: nl80211: don't free NULL coalescing rule
- CVE-url: https://ubuntu.com/security/CVE-2024-27401
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- CVE-url: https://ubuntu.com/security/CVE-2024-39276
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- CVE-url: https://ubuntu.com/security/CVE-2024-27398
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- CVE-url: https://ubuntu.com/security/CVE-2024-36964
- fs/9p: only translate RWX permissions for plain 9P2000
- CVE-url: https://ubuntu.com/security/CVE-2024-38601
- ring-buffer: Fix a race between readers and resize checks
- CVE-url: https://ubuntu.com/security/CVE-2024-39475
- fbdev: savage: Handle err return when savagefb_check_var failed
- CVE-url: https://ubuntu.com/security/CVE-2024-38578
- ecryptfs: Fix buffer size for tag 66 packet
- CVE-url: https://ubuntu.com/security/CVE-2024-36950
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- CVE-url: https://ubuntu.com/security/CVE-2024-38589
- netrom: fix possible dead-lock in nr_rt_ioctl()
- CVE-url: https://ubuntu.com/security/CVE-2024-38627
- stm class: Fix a double free in stm_register_device()
- CVE-url: https://ubuntu.com/security/CVE-2024-38612
- ipv6: sr: fix invalid unregister error path
- CVE-url: https://ubuntu.com/security/CVE-2024-36905
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- CVE-url: https://ubuntu.com/security/CVE-2024-38559
- scsi: qedf: Ensure the copied buf is NUL terminated
- CVE-url: https://ubuntu.com/security/CVE-2024-33621
- ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
- CVE-url: https://ubuntu.com/security/CVE-2024-38637
- greybus: lights: check return of get_channel_from_mode
- CVE-url: https://ubuntu.com/security/CVE-2024-38567
- wifi: carl9170: add a proper sanity check for endpoints
- CVE-url: https://ubuntu.com/security/CVE-2024-39301
- net/9p: fix uninit-value in p9_client_rpc()
- CVE-url: https://ubuntu.com/security/CVE-2024-36919
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- CVE-url: https://ubuntu.com/security/CVE-2022-48772
- media: lgdt3306a: Add a check against null-pointer-def
- CVE-url: https://ubuntu.com/security/CVE-2024-36017
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- CVE-url: https://ubuntu.com/security/CVE-2024-36934
- bna: ensure the copied buf is NUL terminated
- CVE-url: https://ubuntu.com/security/CVE-2024-38558
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- CVE-url: https://ubuntu.com/security/CVE-2024-38565
- USB: core: Add routines for endpoint checks in old drivers
- wifi: ar5523: enable proper endpoint verification
- CVE-url: https://ubuntu.com/security/CVE-2024-38600
- ALSA: control: Add verification for kctl accesses
- ALSA: control: Track in-flight control read/write/tlv accesses
- ALSA: Fix deadlocks with kctl removals at disconnection
- CVE-url: https://ubuntu.com/security/CVE-2024-31076
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- CVE-url: https://ubuntu.com/security/CVE-2024-36015
- ida: Add new API
- ppdev: Remove usage of the deprecated…
- Record
CLSA-2024-1723806933- Updated
- 2026-11-02
OSVCLSA-2024-1723807956 No score
Fix of 55 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-39467
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- CVE-url: https://ubuntu.com/security/CVE-2024-36940
- pinctrl: core: delete incorrect free in pinctrl_enable()
- CVE-url: https://ubuntu.com/security/CVE-2024-38659
- enic: Validate length of nl attributes in enic_set_vf_port
- CVE-url: https://ubuntu.com/security/CVE-2024-38560
- scsi: bfa: Ensure the copied buf is NUL terminated
- CVE-url: https://ubuntu.com/security/CVE-2024-36941
- wifi: nl80211: don't free NULL coalescing rule
- CVE-url: https://ubuntu.com/security/CVE-2024-27401
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- CVE-url: https://ubuntu.com/security/CVE-2024-39276
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- CVE-url: https://ubuntu.com/security/CVE-2024-27398
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- CVE-url: https://ubuntu.com/security/CVE-2024-36964
- fs/9p: only translate RWX permissions for plain 9P2000
- CVE-url: https://ubuntu.com/security/CVE-2024-38601
- ring-buffer: Fix a race between readers and resize checks
- CVE-url: https://ubuntu.com/security/CVE-2024-39475
- fbdev: savage: Handle err return when savagefb_check_var failed
- CVE-url: https://ubuntu.com/security/CVE-2024-38578
- ecryptfs: Fix buffer size for tag 66 packet
- CVE-url: https://ubuntu.com/security/CVE-2024-36950
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- CVE-url: https://ubuntu.com/security/CVE-2024-38589
- netrom: fix possible dead-lock in nr_rt_ioctl()
- CVE-url: https://ubuntu.com/security/CVE-2024-38627
- stm class: Fix a double free in stm_register_device()
- CVE-url: https://ubuntu.com/security/CVE-2024-38612
- ipv6: sr: fix invalid unregister error path
- CVE-url: https://ubuntu.com/security/CVE-2024-36905
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- CVE-url: https://ubuntu.com/security/CVE-2024-38559
- scsi: qedf: Ensure the copied buf is NUL terminated
- CVE-url: https://ubuntu.com/security/CVE-2024-33621
- ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
- CVE-url: https://ubuntu.com/security/CVE-2024-38637
- greybus: lights: check return of get_channel_from_mode
- CVE-url: https://ubuntu.com/security/CVE-2024-38567
- wifi: carl9170: add a proper sanity check for endpoints
- CVE-url: https://ubuntu.com/security/CVE-2024-39301
- net/9p: fix uninit-value in p9_client_rpc()
- CVE-url: https://ubuntu.com/security/CVE-2024-36919
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- CVE-url: https://ubuntu.com/security/CVE-2022-48772
- media: lgdt3306a: Add a check against null-pointer-def
- CVE-url: https://ubuntu.com/security/CVE-2024-36017
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- CVE-url: https://ubuntu.com/security/CVE-2024-36934
- bna: ensure the copied buf is NUL terminated
- CVE-url: https://ubuntu.com/security/CVE-2024-38558
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- CVE-url: https://ubuntu.com/security/CVE-2024-38565
- USB: core: Add routines for endpoint checks in old drivers
- wifi: ar5523: enable proper endpoint verification
- CVE-url: https://ubuntu.com/security/CVE-2024-38600
- ALSA: control: Add verification for kctl accesses
- ALSA: control: Track in-flight control read/write/tlv accesses
- ALSA: Fix deadlocks with kctl removals at disconnection
- CVE-url: https://ubuntu.com/security/CVE-2024-31076
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- CVE-url: https://ubuntu.com/security/CVE-2024-36015
- ida: Add new API
- ppdev: Remove usage of the deprecated…
- Record
CLSA-2024-1723807956- Updated
- 2026-11-02
OSVCLSA-2024-1723809128 No score
Fix of 39 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-36939
- NFS: Cleanup - add nfs_clients_exit to mirror nfs_clients_init
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- nfs: make the rpc_stat per net namespace
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- CVE-url: https://ubuntu.com/security/CVE-2024-38600
- ALSA: Fix deadlocks with kctl removals at disconnection
- CVE-url: https://ubuntu.com/security/CVE-2024-36270
- netfilter: tproxy: bail out if IP has been disabled on the device
- CVE-url: https://ubuntu.com/security/CVE-2024-38659
- enic: Validate length of nl attributes in enic_set_vf_port
- CVE-url: https://ubuntu.com/security/CVE-2024-38560
- scsi: bfa: Ensure the copied buf is NUL terminated
- CVE-url: https://ubuntu.com/security/CVE-2024-36941
- wifi: nl80211: don't free NULL coalescing rule
- CVE-url: https://ubuntu.com/security/CVE-2024-27401
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- CVE-url: https://ubuntu.com/security/CVE-2024-36964
- fs/9p: only translate RWX permissions for plain 9P2000
- CVE-url: https://ubuntu.com/security/CVE-2024-38601
- ring-buffer: Fix a race between readers and resize checks
- CVE-url: https://ubuntu.com/security/CVE-2024-39475
- fbdev: savage: Handle err return when savagefb_check_var failed
- CVE-url: https://ubuntu.com/security/CVE-2024-38578
- ecryptfs: Fix buffer size for tag 66 packet
- CVE-url: https://ubuntu.com/security/CVE-2024-36950
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- CVE-url: https://ubuntu.com/security/CVE-2024-38589
- netrom: fix possible dead-lock in nr_rt_ioctl()
- CVE-url: https://ubuntu.com/security/CVE-2024-38627
- stm class: Fix a double free in stm_register_device()
- CVE-url: https://ubuntu.com/security/CVE-2024-36905
- tcp: suppress too verbose messages in tcp_send_ack()
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- CVE-url: https://ubuntu.com/security/CVE-2024-33621
- ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
- CVE-url: https://ubuntu.com/security/CVE-2024-38567
- wifi: carl9170: add a proper sanity check for endpoints
- CVE-url: https://ubuntu.com/security/CVE-2024-39301
- net/9p: fix uninit-value in p9_client_rpc()
- CVE-url: https://ubuntu.com/security/CVE-2024-36919
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- CVE-url: https://ubuntu.com/security/CVE-2024-36934
- new helper: memdup_user_nul()
- bna: ensure the copied buf is NUL terminated
- CVE-url: https://ubuntu.com/security/CVE-2024-38558
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- CVE-url: https://ubuntu.com/security/CVE-2024-38565
- USB: core: Add routines for endpoint checks in old drivers
- wifi: ar5523: enable proper endpoint verification
- CVE-url: https://ubuntu.com/security/CVE-2024-38621
- media: stk1160: fix bounds checking in stk1160_copy_video()
- CVE-url: https://ubuntu.com/security/CVE-2024-35947
- dyndbg: fix old BUG_ON in >control parser
- CVE-url: https://ubuntu.com/security/CVE-2024-27399
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- CVE-url: https://ubuntu.com/security/CVE-2024-38618
- ALSA: timer: Simplify timer hw resolution calls
- ALSA: timer: Set lower bound of start tick time
- CVE-url: https://ubuntu.com/security/CVE-2024-36286
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- CVE-url: https://ubuntu.com/security/CVE-2024-38607
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- CVE-url: https://ubuntu.com/security/CVE-2024-37356
- params: lift…
- Record
CLSA-2024-1723809128- Updated
- 2026-11-02
OSVCLSA-2024-1723809480 No score
Fix of 39 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-36939
- NFS: Cleanup - add nfs_clients_exit to mirror nfs_clients_init
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- nfs: make the rpc_stat per net namespace
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- CVE-url: https://ubuntu.com/security/CVE-2024-38600
- ALSA: Fix deadlocks with kctl removals at disconnection
- CVE-url: https://ubuntu.com/security/CVE-2024-36270
- netfilter: tproxy: bail out if IP has been disabled on the device
- CVE-url: https://ubuntu.com/security/CVE-2024-38659
- enic: Validate length of nl attributes in enic_set_vf_port
- CVE-url: https://ubuntu.com/security/CVE-2024-38560
- scsi: bfa: Ensure the copied buf is NUL terminated
- CVE-url: https://ubuntu.com/security/CVE-2024-36941
- wifi: nl80211: don't free NULL coalescing rule
- CVE-url: https://ubuntu.com/security/CVE-2024-27401
- firewire: nosy: ensure user_length is taken into account when fetching packet contents
- CVE-url: https://ubuntu.com/security/CVE-2024-36964
- fs/9p: only translate RWX permissions for plain 9P2000
- CVE-url: https://ubuntu.com/security/CVE-2024-38601
- ring-buffer: Fix a race between readers and resize checks
- CVE-url: https://ubuntu.com/security/CVE-2024-39475
- fbdev: savage: Handle err return when savagefb_check_var failed
- CVE-url: https://ubuntu.com/security/CVE-2024-38578
- ecryptfs: Fix buffer size for tag 66 packet
- CVE-url: https://ubuntu.com/security/CVE-2024-36950
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- CVE-url: https://ubuntu.com/security/CVE-2024-38589
- netrom: fix possible dead-lock in nr_rt_ioctl()
- CVE-url: https://ubuntu.com/security/CVE-2024-38627
- stm class: Fix a double free in stm_register_device()
- CVE-url: https://ubuntu.com/security/CVE-2024-36905
- tcp: suppress too verbose messages in tcp_send_ack()
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- CVE-url: https://ubuntu.com/security/CVE-2024-33621
- ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
- CVE-url: https://ubuntu.com/security/CVE-2024-38567
- wifi: carl9170: add a proper sanity check for endpoints
- CVE-url: https://ubuntu.com/security/CVE-2024-39301
- net/9p: fix uninit-value in p9_client_rpc()
- CVE-url: https://ubuntu.com/security/CVE-2024-36919
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- CVE-url: https://ubuntu.com/security/CVE-2024-36934
- new helper: memdup_user_nul()
- bna: ensure the copied buf is NUL terminated
- CVE-url: https://ubuntu.com/security/CVE-2024-38558
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- CVE-url: https://ubuntu.com/security/CVE-2024-38565
- USB: core: Add routines for endpoint checks in old drivers
- wifi: ar5523: enable proper endpoint verification
- CVE-url: https://ubuntu.com/security/CVE-2024-38621
- media: stk1160: fix bounds checking in stk1160_copy_video()
- CVE-url: https://ubuntu.com/security/CVE-2024-35947
- dyndbg: fix old BUG_ON in >control parser
- CVE-url: https://ubuntu.com/security/CVE-2024-27399
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- CVE-url: https://ubuntu.com/security/CVE-2024-38618
- ALSA: timer: Simplify timer hw resolution calls
- ALSA: timer: Set lower bound of start tick time
- CVE-url: https://ubuntu.com/security/CVE-2024-36286
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- CVE-url: https://ubuntu.com/security/CVE-2024-38607
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- CVE-url: https://ubuntu.com/security/CVE-2024-37356
- params: lift…
- Record
CLSA-2024-1723809480- Updated
- 2026-11-02
OSVCLSA-2024-1724693366 No score
kernel: Fix of 15 CVEs
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855}
- tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383}
- drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
- Revert: GFS2: Skip dlm_unlock calls during unmount {CVE-2024-38570}
- Revert: GFS2: ignore unlock failures after withdraw {CVE-2024-38570}
- Revert: GFS2: fix skip unlock condition {CVE-2024-38570}
- ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
- netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}
- ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
- USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934}
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882}
- ip: validate header length on virtual device xmit
- ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775}
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469}
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020}
- af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
- md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307}
- Record
CLSA-2024-1724693366- Updated
- 2026-11-02
OSVCLSA-2024-1724774331 No score
kernel: Fix of 12 CVEs
- drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
- af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
- ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2023-6270}
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
- hdlc_ppp: add range checks in ppp_cp_parse_cr() {CVE-2020-25643}
- perf/core: Fix race in the perf_mmap_close() function {CVE-2020-14351}
- media: xirlink_cit: add missing descriptor sanity checks {CVE-2020-11668}
- vt: selection, close sel_buffer race {CVE-2020-8648}
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() {CVE-2023-4921}
- media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
- Record
CLSA-2024-1724774331- Updated
- 2026-11-02
OSVCLSA-2024-1725187614 No score
kernel: Fix of 12 CVEs
- drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
- af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
- ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2023-6270}
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
- hdlc_ppp: add range checks in ppp_cp_parse_cr() {CVE-2020-25643}
- perf/core: Fix race in the perf_mmap_close() function {CVE-2020-14351}
- media: xirlink_cit: add missing descriptor sanity checks {CVE-2020-11668}
- vt: selection, close sel_buffer race {CVE-2020-8648}
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() {CVE-2023-4921}
- media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
- Record
CLSA-2024-1725187614- Updated
- 2026-11-02
OSVCLSA-2024-1725293298 No score
kernel: Fix of 37 CVEs
- tun: add missing verification for short frame {CVE-2024-41091}
- tap: add missing verification for short frame {CVE-2024-41090}
- drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
- net: fix __dst_negative_advice() race {CVE-2024-36971}
- net: annotate data-races around sk->sk_dst_pending_confirm {CVE-2024-36971}
- net: fix out-of-bounds access in ops_init {CVE-2024-36883}
- net/sched: flower: Fix chain template offload {CVE-2024-26669}
- netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
- netfilter: nft_set_rbtree: Remove unused variable nft_net {CVE-2024-27397}
- netfilter: nft_set_rbtree: prefer sync gc to async worker {CVE-2024-27397}
- netfilter: nft_set_rbtree: rename gc deactivate+erase function {CVE-2024-27397}
- netfilter: nf_tables: de-constify set commit ops function argument {CVE-2024-27397}
- netfilter: nft_set_rbtree: .deactivate fails if element has expired {CVE-2024-27397}
- sched/membarrier: reduce the ability to hammer on sys_membarrier {CVE-2024-26602}
- drm/vmwgfx: Fix possible null pointer derefence with invalid contexts {CVE-2022-38096}
- sched/psi: Fix use-after-free in ep_remove_wait_queue() {CVE-2023-52707}
- wait: add wake_up_pollfree() {CVE-2023-52707}
- x86/sev: Check for user-space IOIO pointing to kernel space {CVE-2023-46813}
- x86/sev: Check IOBM for IOIO exceptions from user-space {CVE-2023-46813}
- x86/sev: Disable MMIO emulation from user mode {CVE-2023-46813}
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). {CVE-2024-37356}
- blk-cgroup: fix list corruption from reorder of WRITE ->lqueued {CVE-2024-38384}
- netfilter: complete validation of user input {CVE-2024-35962}
- SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885}
- PM / devfreq: Synchronize devfreq_monitor_[start/stop] {CVE-2023-52635}
- netfilter: validate user input for expected length {CVE-2024-35896}
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails {CVE-2024-37353}
- bnxt: prevent skb UAF after handing over to PTP worker {CVE-2022-48637}
- net: openvswitch: fix overwriting ct original tuple for ICMPv6 {CVE-2024-38558}
- net: core: reject skb_copy(_expand) for fraglist GSO skbs {CVE-2024-36929}
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation {CVE-2024-36017}
- ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound {CVE-2024-33621}
- drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
- gro: fix ownership transfer {CVE-2024-35890}
- mlxbf_gige: stop interface during shutdown {CVE-2024-35885}
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() {CVE-2023-52809}
- wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
- scsi: mpi3mr: Sanitise num_phys {CVE-2024-42159}
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
- drm/amdgpu/mes: fix use-after-free issue {CVE-2024-38581}
- i40e: fix vf may be used uninitialized in this function warning {CVE-2024-36020}
- vt: fix unicode buffer corruption when deleting characters {CVE-2024-35823}
- ata: libata-core: Fix double free on error {CVE-2024-41087}
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925}
- tcp_metrics: validate source addr length {CVE-2024-42154}
- Record
CLSA-2024-1725293298- Updated
- 2026-11-02
OSVCLSA-2024-1725871927 No score
kernel: Fix of 31 CVEs
- gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
- gfs2: Remove ill-placed consistency check {CVE-2024-38570}
- gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
- gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
- wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
- drm/amdgpu/mes: fix use-after-free issue {CVE-2024-38581}
- drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
- net: bridge: mst: fix suspicious rcu usage in br_mst_set_state {CVE-2024-36979}
- net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state {CVE-2024-36979}
- net: bridge: mst: fix vlan use-after-free {CVE-2024-36979}
- netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668}
- ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
- ima: define ima_max_digest_data struct without a flexible array variable
- ima: detect changes to the backing overlay file
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956}
- drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
- net/sched: flower: Fix chain template offload {CVE-2024-26669}
- userfaultfd: fix a race between writeprotect and exit_mmap() {CVE-2021-47461}
- scsi: mpi3mr: Sanitise num_phys {CVE-2024-42159}
- ata: libata-core: Fix double free on error {CVE-2024-41087}
- net/mlx5: Discard command completions in internal error {CVE-2024-38555}
- net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
- net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
- drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904}
- tipc: fix UAF in error path {CVE-2024-36886}
- net: fix out-of-bounds access in ops_init {CVE-2024-36883}
- tap: add missing verification for short frame {CVE-2024-41090}
- tun: add missing verification for short frame {CVE-2024-41091}
- netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925}
- netfilter: nf_tables: release batch on table validation from abort path {CVE-2024-26925}
- netfilter: nf_tables: discard table flag update with pending basechain deletion {CVE-2024-26925}
- netfilter: nf_tables: reject table flag and netdev basechain updates {CVE-2024-26925}
- af_unix: Fix garbage collector racing against connect() {CVE-2024-26923}
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852}
- sched/psi: Fix use-after-free in ep_remove_wait_queue() {CVE-2023-52707}
- wait: add wake_up_pollfree() {CVE-2023-52707}
- tcp_metrics: validate source addr length {CVE-2024-42154}
- Record
CLSA-2024-1725871927- Updated
- 2026-11-02
OSVCLSA-2024-1725872696 No score
kernel: Fix of 43 CVEs
- netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
- x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
- selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
- pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
- pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
- net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
- wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
- ata: libata-core: Fix double free on error {CVE-2024-41087}
- drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
- drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
- net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
- drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
- net/sched: flower: Fix chain template offload {CVE-2024-26669}
- ipv6: Remove extra counter pull before gc {CVE-2023-52340}
- ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
- net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
- net: add a route cache full diagnostic message {CVE-2023-52340}
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
- tcp_metrics: validate source addr length {CVE-2024-42154}
- net: fix out-of-bounds access in ops_init {CVE-2024-36883}
- tap: add missing verification for short frame {CVE-2024-41090}
- tun: add missing verification for short frame {CVE-2024-41091}
- iommu: Fix potential use-after-free during probe {CVE-2022-48796}
- nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
- nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
- nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
- ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
- ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
- scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
- arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
- SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
- ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
- pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
- wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
- drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
- net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
- tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
- tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
- gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
- gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
- gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
- gfs2: Wake up when sd_glock_disposal becomes zero {CVE-2024-38570}
- gfs2: Remove ill-placed consistency check {CVE-2024-38570}
- gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
- gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
- gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
- gfs2: Don't call dlm after protocol is unmounted {CVE-2024-38570}
- gfs2: Don't skip dlm unlock if glock has an lvb {CVE-2024-38570}
- netfilter: nf_tables: release mutex after nft_gc_seq_end…
- Record
CLSA-2024-1725872696- Updated
- 2026-11-02
OSVCLSA-2024-1725876080 No score
kernel: Fix of 45 CVEs
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956}
- userfaultfd: fix a race between writeprotect and exit_mmap() {CVE-2021-47461}
- netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397}
- x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742}
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161}
- selftests/bpf: Fix BPF_CORE_READ_BITFIELD() macro {CVE-2024-42161}
- pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
- pinctrl: core: fix possible memory leak in pinctrl_enable() {CVE-2024-36940}
- net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
- wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225}
- ata: libata-core: Fix double free on error {CVE-2024-41087}
- drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471}
- drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552}
- net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
- drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960}
- net/sched: flower: Fix chain template offload {CVE-2024-26669}
- ipv6: Remove extra counter pull before gc {CVE-2023-52340}
- ipv6: remove max_size check inline with ipv4 {CVE-2023-52340}
- net/dst: use a smaller percpu_counter batch for dst entries accounting {CVE-2023-52340}
- net: add a route cache full diagnostic message {CVE-2023-52340}
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
- tcp_metrics: validate source addr length {CVE-2024-42154}
- net: fix out-of-bounds access in ops_init {CVE-2024-36883}
- tap: add missing verification for short frame {CVE-2024-41090}
- tun: add missing verification for short frame {CVE-2024-41091}
- iommu: Fix potential use-after-free during probe {CVE-2022-48796}
- nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}
- nvme-tcp: fix possible use-after-free in transport error_recovery work {CVE-2022-48789}
- nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788}
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773}
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
- ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698}
- ubi: Check for too small LEB size in VTBL code {CVE-2024-25739}
- scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool {CVE-2023-52811}
- arp: Prevent overflow in arp_req_get(). {CVE-2024-26733}
- SUNRPC: Fix a suspicious RCU usage warning {CVE-2023-52623}
- ext4: avoid online resizing failures due to oversized flex bg {CVE-2023-52622}
- pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619}
- wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
- drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486}
- net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743}
- tracing: Restructure trace_clock_global() to never block {CVE-2021-46939}
- tcp: make sure init the accept_queue's spinlocks once {CVE-2024-26614}
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228}
- gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570}
- gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570}
- gfs2: Use container_of() for gfs2_glock(aspace) {CVE-2024-38570}
- gfs2: Remove ill-placed consistency check {CVE-2024-38570}
- gfs2: introduce new gfs2_glock_assert_withdraw {CVE-2024-38570}
- gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570}
- gfs2: Expect -EBUSY after canceling dlm locking requests {CVE-2024-38570}
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925} -…
- Record
CLSA-2024-1725876080- Updated
- 2026-11-02
OSVMGASA-2024-0263 No score
Updated kernel kmod-xtables-addons kmod-virtualbox dwarves packages fix security vulnerabilities
Upstream kernel version 6.6.37 fix bugs and vulnerabilities. The dwarves, kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.
- Record
MGASA-2024-0263- Updated
- 2026-11-02
OSVMGASA-2024-0266 No score
Updated kernel-linus packages fix security vulnerabilities
Vanilla upstream kernel version 6.6.37 fix bugs and vulnerabilities. For information about the vulnerabilities see the links.
- Record
MGASA-2024-0266- Updated
- 2026-11-02
OSVRLSA-2024:5101 No score
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
-
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
-
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
-
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
-
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
-
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
-
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
-
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
-
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
-
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
-
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
-
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
-
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
-
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
-
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
-
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
-
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
-
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
-
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
-
(CVE-2023-28746)
-
(CVE-2023-52847)
-
(CVE-2021-47548)
-
(CVE-2024-36921)
-
(CVE-2024-26921)
-
(CVE-2021-47579)
-
(CVE-2024-36927)
-
(CVE-2024-39276)
-
(CVE-2024-33621)
-
(CVE-2024-27010)
-
(CVE-2024-26960)
-
(CVE-2024-38596)
-
(CVE-2022-48743)
-
(CVE-2024-26733)
-
(CVE-2024-26586)
-
(CVE-2024-26698)
-
(CVE-2023-52619)
Bug Fix(es):
-
Rocky Linux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux-17678)
-
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux-23841)
-
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux-32941)
-
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux-33437)
-
[Hyper-V][Rocky Linux-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux-39074)
-
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux-40167)
-
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux-40939)
-
(JIRA:Rocky Linux-31798)
-
(JIRA:Rocky Linux-10263)
-
(JIRA:Rocky Linux-40901)
-
(JIRA:Rocky Linux-43547)
-
(JIRA:Rocky Linux-34876)
Enhancement(s):
- [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux-19723)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
- Record
RLSA-2024:5101- Updated
- 2026-11-02
OSVRLSA-2024:5102 No score
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
-
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
-
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
-
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
-
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
-
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
-
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
-
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
-
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
-
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
-
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
-
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
-
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
-
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
-
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
-
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
-
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
-
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
-
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
-
kernel: crash due to a missing check for leb_size (CVE-2024-25739)
-
kernel: tcp: make sure init the accept_queue's spinlocks once (CVE-2024-26614)
-
kernel: tcp: add sanity checks to rx zerocopy (CVE-2024-26640)
-
kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (CVE-2024-26870)
-
kernel: nfs: fix UAF in direct writes (CVE-2024-26958)
-
kernel: SUNRPC: fix some memleaks in gssx_dec_option_array (CVE-2024-27388)
-
kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (CVE-2024-27434)
-
kernel: of: Fix double free in of_parse_phandle_with_args_map (CVE-2023-52679)
-
kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (CVE-2024-35930)
-
kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks (CVE-2024-35912)
-
kernel: block: prevent division by zero in blk_rq_stat_sum() (CVE-2024-35925)
-
kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB (CVE-2024-35938)
-
kernel: wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937)
-
kernel: wifi: rtw89: fix null pointer access when abort scan (CVE-2024-35946)
-
kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path (CVE-2024-36005)
-
kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (CVE-2024-36000)
-
kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (CVE-2024-36006)
-
kernel: net: ieee802154: fix null deref in parse dev addr (CVE-2021-47257)
-
kernel: mmc: sdio: fix possible resource leaks in some error paths (CVE-2023-52730)
-
kernel: wifi: ath11k: fix gtk offload status event locking (CVE-2023-52777)
-
(CVE-2023-52832)
-
(CVE-2023-52803)
-
(CVE-2023-52756)
-
(CVE-2023-52834)
-
(CVE-2023-52791)
-
(CVE-2023-52764)
-
(CVE-2021-47468)
-
(CVE-2021-47284)
-
(CVE-2024-36025)
-
(CVE-2024-36941)
-
(CVE-2024-36940)
-
(CVE-2024-36904)
-
(CVE-2024-36896)
-
(CVE-2024-36954)
-
(CVE-2024-36950)
-
(CVE-2024-38575)
-
(CVE-2024-36917)
-
(CVE-2024-36016)
-
(CVE-2023-52762)
-
(CVE-2024-27025)
-
(CVE-2021-47548)
-
(CVE-2023-52619)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
- Record
RLSA-2024:5102- Updated
- 2026-11-02
OSVRXSA-2024:5101 No score
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
-
kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
-
kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
-
kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
-
kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
-
kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
-
kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
-
kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
-
kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
-
kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
-
kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
-
kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
-
kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
-
kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
-
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
-
kernel: dyndbg: fix old BUG_ON in >control parser (CVE-2024-35947)
-
kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
-
kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
-
kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
-
kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
-
(CVE-2023-28746)
-
(CVE-2023-52847)
-
(CVE-2021-47548)
-
(CVE-2024-36921)
-
(CVE-2024-26921)
-
(CVE-2021-47579)
-
(CVE-2024-36927)
-
(CVE-2024-39276)
-
(CVE-2024-33621)
-
(CVE-2024-27010)
-
(CVE-2024-26960)
-
(CVE-2024-38596)
-
(CVE-2022-48743)
-
(CVE-2024-26733)
-
(CVE-2024-26586)
-
(CVE-2024-26698)
-
(CVE-2023-52619)
Bug Fix(es):
-
Rocky Linux SIG Cloud8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:Rocky Linux SIG Cloud-17678)
-
[AWS][8.9]There are call traces found when booting debug-kernel for Amazon EC2 r8g.metal-24xl instance (JIRA:Rocky Linux SIG Cloud-23841)
-
[rhel8] gfs2: Fix glock shrinker (JIRA:Rocky Linux SIG Cloud-32941)
-
lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:Rocky Linux SIG Cloud-33437)
-
[Hyper-V][Rocky Linux SIG Cloud-8.10.z] Update hv_netvsc driver to TOT (JIRA:Rocky Linux SIG Cloud-39074)
-
Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:Rocky Linux SIG Cloud-40167)
-
blk-cgroup: Properly propagate the iostat update up the hierarchy [rhel-8.10.z] (JIRA:Rocky Linux SIG Cloud-40939)
-
(JIRA:Rocky Linux SIG Cloud-31798)
-
(JIRA:Rocky Linux SIG Cloud-10263)
-
(JIRA:Rocky Linux SIG Cloud-40901)
-
(JIRA:Rocky Linux SIG Cloud-43547)
-
(JIRA:Rocky Linux SIG Cloud-34876)
Enhancement(s):
- [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:Rocky Linux SIG Cloud-19723)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.
- Record
RXSA-2024:5101- Updated
- 2026-11-02
OSVSUSE-SU-2024:2360-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
- CVE-2021-47191: Fix out-of-bound read in resp_readcap16() (bsc#1222866).
- CVE-2021-47267: usb: fix various gadget panics on 10gbps cabling (bsc#1224993).
- CVE-2021-47270: usb: fix various gadgets null ptr deref on 10gbps cabling (bsc#1224997).
- CVE-2021-47293: net/sched: act_skbmod: Skip non-Ethernet packets (bsc#1224978).
- CVE-2021-47294: netrom: Decrease sock refcount when sock timers expire (bsc#1224977).
- CVE-2021-47297: net: fix uninit-value in caif_seqpkt_sendmsg (bsc#1224976).
- CVE-2021-47309: net: validate lwtstate->data before returning from skb_tunnel_info() (bsc#1224967).
- CVE-2021-47354: drm/sched: Avoid data corruptions (bsc#1225140)
- CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
- CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
- CVE-2021-47407: KVM: x86: Handle SRCU initialization failure during page track init (bsc#1225306).
- CVE-2021-47418: net_sched: fix NULL deref in fifo_set_limit() (bsc#1225337).
- CVE-2021-47434: xhci: Fix commad ring abort, write all 64 bits to CRCR register (bsc#1225232).
- CVE-2021-47445: drm/msm: Fix null pointer dereference on pointer edp (bsc#1225261)
- CVE-2021-47518: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (bsc#1225372).
- CVE-2021-47544: tcp: fix page frag corruption on page fault (bsc#1225463).
- CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
- CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
- CVE-2021-47587: net: systemport: Add global locking for descriptor lifecycle (bsc#1226567).
- CVE-2021-47602: mac80211: track only QoS data frames for admission control (bsc#1226554).
- CVE-2021-47609: firmware: arm_scpi: Fix string overflow in SCPI genpd driver (bsc#1226562)
- CVE-2022-48732: drm/nouveau: fix off by one in BIOS boundary checking (bsc#1226716)
- CVE-2022-48733: btrfs: fix use-after-free after failure to create a snapshot (bsc#1226718).
- CVE-2022-48740: selinux: fix double free of cond_list on error paths (bsc#1226699).
- CVE-2022-48743: net: amd-xgbe: Fix skb data length underflow (bsc#1226705).
- CVE-2022-48756: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (bsc#1226698)
- CVE-2022-48759: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (bsc#1226711).
- CVE-2022-48761: usb: xhci-plat: fix crash when suspend if remote wake enable (bsc#1226701).
- CVE-2022-48772: media: lgdt3306a: Add a check against null-pointer-def (bsc#1226976).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
- CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52754: media: imon: fix access to invalid resource for the second interface (bsc#1225490).
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
- CVE-2023-52764: media: gspca: cpia1: shift-out-of-bounds in set_flicker (bsc#1225571).
- CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
- CVE-2023-52832: wifi: mac80211: do not return unset power in ieee80211_get_tx_power() (bsc#1225577).
- CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
- CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
- CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
- CVE-2023-52845: tipc: Change nla_policy…
- Record
SUSE-SU-2024:2360-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2372-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
- CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
- CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
- CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
- CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
- CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
- CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
- CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
- CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
- CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
- CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
- CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
- CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
- CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
- CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
- CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
- CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
- CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
- CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
- CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
- CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
- CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
- CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
- CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
- CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
- CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282bsc#1222072).
- CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
- CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
- CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (git-fixesbsc#1223641).
- CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
- CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
- CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
- CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
- CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
- CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
- CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
- CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
- CVE-2024-35861:…
- Record
SUSE-SU-2024:2372-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2381-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
- CVE-2021-47191: Fix out-of-bound read in resp_readcap16() (bsc#1222866).
- CVE-2021-47267: usb: fix various gadget panics on 10gbps cabling (bsc#1224993).
- CVE-2021-47270: usb: fix various gadgets null ptr deref on 10gbps cabling (bsc#1224997).
- CVE-2021-47293: net/sched: act_skbmod: Skip non-Ethernet packets (bsc#1224978).
- CVE-2021-47294: netrom: Decrease sock refcount when sock timers expire (bsc#1224977).
- CVE-2021-47297: net: fix uninit-value in caif_seqpkt_sendmsg (bsc#1224976).
- CVE-2021-47309: net: validate lwtstate->data before returning from skb_tunnel_info() (bsc#1224967).
- CVE-2021-47354: drm/sched: Avoid data corruptions (bsc#1225140)
- CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
- CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
- CVE-2021-47407: KVM: x86: Handle SRCU initialization failure during page track init (bsc#1225306).
- CVE-2021-47418: net_sched: fix NULL deref in fifo_set_limit() (bsc#1225337).
- CVE-2021-47434: xhci: Fix commad ring abort, write all 64 bits to CRCR register (bsc#1225232).
- CVE-2021-47445: drm/msm: Fix null pointer dereference on pointer edp (bsc#1225261)
- CVE-2021-47518: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (bsc#1225372).
- CVE-2021-47544: tcp: fix page frag corruption on page fault (bsc#1225463).
- CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
- CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
- CVE-2021-47587: net: systemport: Add global locking for descriptor lifecycle (bsc#1226567).
- CVE-2021-47602: mac80211: track only QoS data frames for admission control (bsc#1226554).
- CVE-2021-47609: firmware: arm_scpi: Fix string overflow in SCPI genpd driver (bsc#1226562)
- CVE-2022-48732: drm/nouveau: fix off by one in BIOS boundary checking (bsc#1226716)
- CVE-2022-48733: btrfs: fix use-after-free after failure to create a snapshot (bsc#1226718).
- CVE-2022-48740: selinux: fix double free of cond_list on error paths (bsc#1226699).
- CVE-2022-48743: net: amd-xgbe: Fix skb data length underflow (bsc#1226705).
- CVE-2022-48756: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (bsc#1226698)
- CVE-2022-48759: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (bsc#1226711).
- CVE-2022-48761: usb: xhci-plat: fix crash when suspend if remote wake enable (bsc#1226701).
- CVE-2022-48772: media: lgdt3306a: Add a check against null-pointer-def (bsc#1226976).
- CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
- CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52754: media: imon: fix access to invalid resource for the second interface (bsc#1225490).
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
- CVE-2023-52764: media: gspca: cpia1: shift-out-of-bounds in set_flicker (bsc#1225571).
- CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
- CVE-2023-52832: wifi: mac80211: do not return unset power in ieee80211_get_tx_power() (bsc#1225577).
- CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
- CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
- CVE-2023-52843: llc: verify mac len before…
- Record
SUSE-SU-2024:2381-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2394-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
- CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
- CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
- CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
- CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
- CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
- CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
- CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
- CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
- CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
- CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
- CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
- CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
- CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
- CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
- CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
- CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
- CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
- CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
- CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
- CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
- CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
- CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
- CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
- CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
- CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282, bsc#1222072).
- CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
- CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
- CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
- CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (bsc#1223641).
- CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
- CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
- CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
- CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
- CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
- CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
- CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
- CVE-2024-35857: icmp: prevent possible…
- Record
SUSE-SU-2024:2394-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2561-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
- CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
- CVE-2021-47145: btrfs: do not BUG_ON in link_to_fixup_dir (bsc#1222005).
- CVE-2021-47191: Fix out-of-bound read in resp_readcap16() (bsc#1222866).
- CVE-2021-47201: iavf: free q_vectors before queues in iavf_disable_vf (bsc#1222792).
- CVE-2021-47267: usb: fix various gadget panics on 10gbps cabling (bsc#1224993).
- CVE-2021-47270: usb: fix various gadgets null ptr deref on 10gbps cabling (bsc#1224997).
- CVE-2021-47275: bcache: avoid oversized read request in cache missing code path (bsc#1224965).
- CVE-2021-47293: net/sched: act_skbmod: Skip non-Ethernet packets (bsc#1224978).
- CVE-2021-47294: netrom: Decrease sock refcount when sock timers expire (bsc#1224977).
- CVE-2021-47297: net: fix uninit-value in caif_seqpkt_sendmsg (bsc#1224976).
- CVE-2021-47309: net: validate lwtstate->data before returning from skb_tunnel_info() (bsc#1224967).
- CVE-2021-47328: blacklist.conf: bsc#1225047 CVE-2021-47328: breaks kABI Also, does not apply.
- CVE-2021-47354: drm/sched: Avoid data corruptions (bsc#1225140)
- CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
- CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
- CVE-2021-47407: KVM: x86: Handle SRCU initialization failure during page track init (bsc#1225306).
- CVE-2021-47418: net_sched: fix NULL deref in fifo_set_limit() (bsc#1225337).
- CVE-2021-47434: xhci: Fix commad ring abort, write all 64 bits to CRCR register (bsc#1225232).
- CVE-2021-47438: net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (bsc#1225229)
- CVE-2021-47445: drm/msm: Fix null pointer dereference on pointer edp (bsc#1225261)
- CVE-2021-47498: dm rq: do not queue request to blk-mq during DM suspend (bsc#1225357).
- CVE-2021-47518: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (bsc#1225372).
- CVE-2021-47520: can: pch_can: pch_can_rx_normal: fix use after free (bsc#1225431).
- CVE-2021-47544: tcp: fix page frag corruption on page fault (bsc#1225463).
- CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
- CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
- CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
- CVE-2021-47587: net: systemport: Add global locking for descriptor lifecycle (bsc#1226567).
- CVE-2021-47602: mac80211: track only QoS data frames for admission control (bsc#1226554).
- CVE-2021-47609: firmware: arm_scpi: Fix string overflow in SCPI genpd driver (bsc#1226562)
- CVE-2022-48732: drm/nouveau: fix off by one in BIOS boundary checking (bsc#1226716)
- CVE-2022-48733: btrfs: fix use-after-free after failure to create a snapshot (bsc#1226718).
- CVE-2022-48740: selinux: fix double free of cond_list on error paths (bsc#1226699).
- CVE-2022-48743: net: amd-xgbe: Fix skb data length underflow (bsc#1226705).
- CVE-2022-48756: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (bsc#1226698)
- CVE-2022-48759: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (bsc#1226711).
- CVE-2022-48761: usb: xhci-plat: fix crash when suspend if remote wake enable (bsc#1226701).
- CVE-2022-48772: media: lgdt3306a: Add a check against null-pointer-def (bsc#1226976).
- CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
- CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
- CVE-2023-52507: Fixed possible shift-out-of-bounds in nfc/nci…
- Record
SUSE-SU-2024:2561-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2571-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
- CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
- CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758).
- CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
- CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
- CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
- CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
- CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
- CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
- CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
- CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
- CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
- CVE-2023-52865: Add check for mtk_alloc_clk_data (bsc#1225086).
- CVE-2023-52821: Fixed a possible null pointer dereference (bsc#1225022).
- CVE-2023-52867: Fixed possible buffer overflow (bsc#1225009).
- CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,).
- CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
- CVE-2023-52759: Ignore negated quota changes (bsc#1225560).
- CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
- CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
- CVE-2023-52864: Fixed opening of char device (bsc#1225132).
- CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
- CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
- CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
- CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
- CVE-2024-35843: iommu/vt-d: Use device rbtree in iopf reporting path (bsc#1224751).
- CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
- CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
- CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
- CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
- CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799).
- CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
- CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841).
- CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879).
- CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
- CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789).
- CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
- CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
- CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
- CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
- CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
- CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
- CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
- CVE-2024-38556:…
- Record
SUSE-SU-2024:2571-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2896-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
- CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
- CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). -…
- Record
SUSE-SU-2024:2896-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2939-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
- CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958).
- CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
- CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
- CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
- CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
- CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
- CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
- CVE-2021-47546: ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
- CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
- CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
- CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
- CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
- CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
- CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
- CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
- CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
- CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
- CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
- CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571).
- CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len. (bsc#1226555).
- CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
- CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
- CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
- CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
- CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071).
- CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
- CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
- CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
- CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869).
- CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
- CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
- CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
- CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
- CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
- CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
- CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
- CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
- CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
- CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
- CVE-2023-52787: blk-mq: make…
- Record
SUSE-SU-2024:2939-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2973-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
- CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
- CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
- CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
- CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
- CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
- CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
- CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
- CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
- CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
- CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
- CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
- CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
- CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
- CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
- CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
- CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
- CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
- CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
- CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
- CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
- CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
- CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
- CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
- CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
- CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
- CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
- CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…
- Record
SUSE-SU-2024:2973-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20008-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
- CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
- CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
- CVE-2024-35890:…
- Record
SUSE-SU-2025:20008-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20028-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
- CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…
- Record
SUSE-SU-2025:20028-1- Updated
- 2026-11-02
OSVUSN-6949-1 No score
linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-nvidia, linux-nvidia-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- M68K architecture;
- OpenRISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- x86 architecture;
- Block layer subsystem;
- Accessibility subsystem;
- Bluetooth drivers;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DMA engine subsystem;
- DPLL subsystem;
- FireWire subsystem;
- EFI core;
- Qualcomm firmware drivers;
- GPIO subsystem;
- GPU drivers;
- Microsoft Hyper-V drivers;
- InfiniBand drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Macintosh device drivers;
- Multiple devices driver;
- Media drivers;
- EEPROM drivers;
- MMC subsystem;
- Network drivers;
- STMicroelectronics network drivers;
- Device tree and open firmware driver;
- HiSilicon SoC PMU drivers;
- PHY drivers;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- SPI subsystem;
- Media staging drivers;
- Thermal drivers;
- Userspace I/O drivers;
- USB subsystem;
- DesignWare USB3 driver;
- ACRN Hypervisor Service Module driver;
- Virtio drivers;
- 9P distributed file system;
- BTRFS file system;
- eCrypt file system;
- EROFS file system;
- File systems infrastructure;
- GFS2 file system;
- JFFS2 file system;
- Network file systems library;
- Network file system client;
- Network file system server daemon;
- NILFS2 file system;
- Proc file system;
- SMB network file system;
- Tracing file system;
- Mellanox drivers;
- Memory management;
- Socket messages infrastructure;
- Slab allocator;
- Tracing infrastructure;
- User-space API (UAPI);
- Core kernel;
- BPF subsystem;
- DMA mapping infrastructure;
- RCU subsystem;
- Dynamic debug library;
- KUnit library;
- Maple Tree data structure library;
- Heterogeneous memory management;
- Amateur Radio drivers;
- Bluetooth subsystem;
- Ethernet bridge;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Multipath TCP;
- Netfilter;
- NET/ROM layer;
- NFC subsystem;
- NSH protocol;
- Open vSwitch;
- Phonet protocol;
- SMC sockets;
- TIPC protocol;
- Unix domain sockets;
- Wireless networking;
- Key management;
- ALSA framework;
- HD-audio driver;
- Kirkwood ASoC drivers;
- MediaTek ASoC drivers; (CVE-2024-36006, CVE-2024-36922, CVE-2024-38567, CVE-2024-38584, CVE-2024-36923, CVE-2024-36892, CVE-2024-35855, CVE-2024-35853, CVE-2024-38562, CVE-2024-36920, CVE-2024-38543, CVE-2024-38576, CVE-2024-38572, CVE-2024-36898, CVE-2024-38560, CVE-2024-36004, CVE-2024-36956, CVE-2024-36881, CVE-2024-36977, CVE-2024-36955, CVE-2024-36906, CVE-2024-36013, CVE-2024-36884, CVE-2024-38563, CVE-2024-36966, CVE-2024-38547, CVE-2024-38594, CVE-2024-36926, CVE-2024-38587, CVE-2024-38566, CVE-2024-27400, CVE-2024-36941, CVE-2024-36017, CVE-2024-38544, CVE-2024-36899, CVE-2024-35851, CVE-2024-38577, CVE-2024-38590, CVE-2024-38568, CVE-2024-38559, CVE-2024-38611, CVE-2024-36887, CVE-2024-36886, CVE-2024-35996, CVE-2024-38612, CVE-2024-36925, CVE-2024-38586, CVE-2024-38596, CVE-2024-36932, CVE-2024-39482, CVE-2024-38585, CVE-2024-36033, CVE-2024-38614, CVE-2024-35852, CVE-2024-36908, CVE-2024-36939, CVE-2024-36963, CVE-2024-27401, CVE-2024-36029, CVE-2024-38540, CVE-2024-38565, CVE-2024-36927, CVE-2024-36910, CVE-2024-42134, CVE-2024-36888, CVE-2024-35859, CVE-2024-36911, CVE-2024-35947, CVE-2024-36940, CVE-2024-36921, CVE-2024-36913, CVE-2024-36943, CVE-2024-35986, CVE-2024-38616, CVE-2024-36900, CVE-2024-36954, CVE-2024-36915, CVE-2024-38602, CVE-2024-41011, CVE-2024-35991, CVE-2024-36909, CVE-2024-38603, CVE-2023-52882, CVE-2024-36953, CVE-2024-38599, CVE-2024-38574, CVE-2024-36967, CVE-2024-36895, CVE-2024-36003,…
- Record
USN-6949-1- Updated
- 2026-11-02
OSVUSN-6949-2 No score
linux-lowlatency, linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- M68K architecture;
- OpenRISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- x86 architecture;
- Block layer subsystem;
- Accessibility subsystem;
- Bluetooth drivers;
- Clock framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- DMA engine subsystem;
- DPLL subsystem;
- FireWire subsystem;
- EFI core;
- Qualcomm firmware drivers;
- GPIO subsystem;
- GPU drivers;
- Microsoft Hyper-V drivers;
- InfiniBand drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Macintosh device drivers;
- Multiple devices driver;
- Media drivers;
- EEPROM drivers;
- MMC subsystem;
- Network drivers;
- STMicroelectronics network drivers;
- Device tree and open firmware driver;
- HiSilicon SoC PMU drivers;
- PHY drivers;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- SPI subsystem;
- Media staging drivers;
- Thermal drivers;
- Userspace I/O drivers;
- USB subsystem;
- DesignWare USB3 driver;
- ACRN Hypervisor Service Module driver;
- Virtio drivers;
- 9P distributed file system;
- BTRFS file system;
- eCrypt file system;
- EROFS file system;
- File systems infrastructure;
- GFS2 file system;
- JFFS2 file system;
- Network file systems library;
- Network file system client;
- Network file system server daemon;
- NILFS2 file system;
- Proc file system;
- SMB network file system;
- Tracing file system;
- Mellanox drivers;
- Memory management;
- Socket messages infrastructure;
- Slab allocator;
- Tracing infrastructure;
- User-space API (UAPI);
- Core kernel;
- BPF subsystem;
- DMA mapping infrastructure;
- RCU subsystem;
- Dynamic debug library;
- KUnit library;
- Maple Tree data structure library;
- Heterogeneous memory management;
- Amateur Radio drivers;
- Bluetooth subsystem;
- Ethernet bridge;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Multipath TCP;
- Netfilter;
- NET/ROM layer;
- NFC subsystem;
- NSH protocol;
- Open vSwitch;
- Phonet protocol;
- SMC sockets;
- TIPC protocol;
- Unix domain sockets;
- Wireless networking;
- Key management;
- ALSA framework;
- HD-audio driver;
- Kirkwood ASoC drivers;
- MediaTek ASoC drivers; (CVE-2024-36006, CVE-2024-36922, CVE-2024-38567, CVE-2024-38584, CVE-2024-36923, CVE-2024-36892, CVE-2024-35855, CVE-2024-35853, CVE-2024-38562, CVE-2024-36920, CVE-2024-38543, CVE-2024-38576, CVE-2024-38572, CVE-2024-36898, CVE-2024-38560, CVE-2024-36004, CVE-2024-36956, CVE-2024-36881, CVE-2024-36977, CVE-2024-36955, CVE-2024-36906, CVE-2024-36013, CVE-2024-36884, CVE-2024-38563, CVE-2024-36966, CVE-2024-38547, CVE-2024-38594, CVE-2024-36926, CVE-2024-38587, CVE-2024-38566, CVE-2024-27400, CVE-2024-36941, CVE-2024-36017, CVE-2024-38544, CVE-2024-36899, CVE-2024-35851, CVE-2024-38577, CVE-2024-38590, CVE-2024-38568, CVE-2024-38559, CVE-2024-38611, CVE-2024-36887, CVE-2024-36886, CVE-2024-35996, CVE-2024-38612, CVE-2024-36925, CVE-2024-38586, CVE-2024-38596, CVE-2024-36932, CVE-2024-39482, CVE-2024-38585, CVE-2024-36033, CVE-2024-38614, CVE-2024-35852, CVE-2024-36908, CVE-2024-36939, CVE-2024-36963, CVE-2024-27401, CVE-2024-36029, CVE-2024-38540, CVE-2024-38565, CVE-2024-36927, CVE-2024-36910, CVE-2024-42134, CVE-2024-36888, CVE-2024-35859, CVE-2024-36911, CVE-2024-35947, CVE-2024-36940, CVE-2024-36921, CVE-2024-36913, CVE-2024-36943, CVE-2024-35986, CVE-2024-38616, CVE-2024-36900, CVE-2024-36954, CVE-2024-36915, CVE-2024-38602, CVE-2024-41011, CVE-2024-35991, CVE-2024-36909, CVE-2024-38603, CVE-2023-52882, CVE-2024-36953, CVE-2024-38599, CVE-2024-38574, CVE-2024-36967, CVE-2024-36895, CVE-2024-36003,…
- Record
USN-6949-2- Updated
- 2026-11-02
OSVUSN-6950-1 No score
linux, linux-aws, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- Block layer subsystem;
- Bluetooth drivers;
- Clock framework and drivers;
- FireWire subsystem;
- GPU drivers;
- InfiniBand drivers;
- Multiple devices driver;
- EEPROM drivers;
- Network drivers;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- 9P distributed file system;
- Network file system client;
- SMB network file system;
- Socket messages infrastructure;
- Dynamic debug library;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Multipath TCP;
- NSH protocol;
- Phonet protocol;
- TIPC protocol;
- Wireless networking;
- Key management;
- ALSA framework;
- HD-audio driver; (CVE-2024-36883, CVE-2024-36940, CVE-2024-36902, CVE-2024-36975, CVE-2024-36964, CVE-2024-36938, CVE-2024-36931, CVE-2024-35848, CVE-2024-26900, CVE-2024-36967, CVE-2024-36904, CVE-2024-27398, CVE-2024-36031, CVE-2023-52585, CVE-2024-36886, CVE-2024-36937, CVE-2024-36954, CVE-2024-36916, CVE-2024-36905, CVE-2024-36959, CVE-2024-26980, CVE-2024-26936, CVE-2024-36928, CVE-2024-36889, CVE-2024-36929, CVE-2024-36933, CVE-2024-27399, CVE-2024-36946, CVE-2024-36906, CVE-2024-36965, CVE-2024-36957, CVE-2024-36941, CVE-2024-36897, CVE-2024-36952, CVE-2024-36947, CVE-2024-36950, CVE-2024-36880, CVE-2024-36017, CVE-2023-52882, CVE-2024-36969, CVE-2024-38600, CVE-2024-36955, CVE-2024-36960, CVE-2024-27401, CVE-2024-36919, CVE-2024-36934, CVE-2024-35947, CVE-2024-36953, CVE-2024-36944, CVE-2024-36939)
- Record
USN-6950-1- Updated
- 2026-11-02
OSVUSN-6950-2 No score
linux-aws-5.15, linux-gkeop-5.15, linux-ibm, linux-ibm-5.15, linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- Block layer subsystem;
- Bluetooth drivers;
- Clock framework and drivers;
- FireWire subsystem;
- GPU drivers;
- InfiniBand drivers;
- Multiple devices driver;
- EEPROM drivers;
- Network drivers;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- 9P distributed file system;
- Network file system client;
- SMB network file system;
- Socket messages infrastructure;
- Dynamic debug library;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Multipath TCP;
- NSH protocol;
- Phonet protocol;
- TIPC protocol;
- Wireless networking;
- Key management;
- ALSA framework;
- HD-audio driver; (CVE-2024-36883, CVE-2024-36940, CVE-2024-36902, CVE-2024-36975, CVE-2024-36964, CVE-2024-36938, CVE-2024-36931, CVE-2024-35848, CVE-2024-26900, CVE-2024-36967, CVE-2024-36904, CVE-2024-27398, CVE-2024-36031, CVE-2023-52585, CVE-2024-36886, CVE-2024-36937, CVE-2024-36954, CVE-2024-36916, CVE-2024-36905, CVE-2024-36959, CVE-2024-26980, CVE-2024-26936, CVE-2024-36928, CVE-2024-36889, CVE-2024-36929, CVE-2024-36933, CVE-2024-27399, CVE-2024-36946, CVE-2024-36906, CVE-2024-36965, CVE-2024-36957, CVE-2024-36941, CVE-2024-36897, CVE-2024-36952, CVE-2024-36947, CVE-2024-36950, CVE-2024-36880, CVE-2024-36017, CVE-2023-52882, CVE-2024-36969, CVE-2024-38600, CVE-2024-36955, CVE-2024-36960, CVE-2024-27401, CVE-2024-36919, CVE-2024-36934, CVE-2024-35947, CVE-2024-36953, CVE-2024-36944, CVE-2024-36939)
- Record
USN-6950-2- Updated
- 2026-11-02
OSVUSN-6950-3 No score
linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- Block layer subsystem;
- Bluetooth drivers;
- Clock framework and drivers;
- FireWire subsystem;
- GPU drivers;
- InfiniBand drivers;
- Multiple devices driver;
- EEPROM drivers;
- Network drivers;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- 9P distributed file system;
- Network file system client;
- SMB network file system;
- Socket messages infrastructure;
- Dynamic debug library;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Multipath TCP;
- NSH protocol;
- Phonet protocol;
- TIPC protocol;
- Wireless networking;
- Key management;
- ALSA framework;
- HD-audio driver; (CVE-2024-36883, CVE-2024-36940, CVE-2024-36902, CVE-2024-36975, CVE-2024-36964, CVE-2024-36938, CVE-2024-36931, CVE-2024-35848, CVE-2024-26900, CVE-2024-36967, CVE-2024-36904, CVE-2024-27398, CVE-2024-36031, CVE-2023-52585, CVE-2024-36886, CVE-2024-36937, CVE-2024-36954, CVE-2024-36916, CVE-2024-36905, CVE-2024-36959, CVE-2024-26980, CVE-2024-26936, CVE-2024-36928, CVE-2024-36889, CVE-2024-36929, CVE-2024-36933, CVE-2024-27399, CVE-2024-36946, CVE-2024-36906, CVE-2024-36965, CVE-2024-36957, CVE-2024-36941, CVE-2024-36897, CVE-2024-36952, CVE-2024-36947, CVE-2024-36950, CVE-2024-36880, CVE-2024-36017, CVE-2023-52882, CVE-2024-36969, CVE-2024-38600, CVE-2024-36955, CVE-2024-36960, CVE-2024-27401, CVE-2024-36919, CVE-2024-36934, CVE-2024-35947, CVE-2024-36953, CVE-2024-36944, CVE-2024-36939)
- Record
USN-6950-3- Updated
- 2026-11-02
OSVUSN-6950-4 No score
linux-hwe-5.15 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- Block layer subsystem;
- Bluetooth drivers;
- Clock framework and drivers;
- FireWire subsystem;
- GPU drivers;
- InfiniBand drivers;
- Multiple devices driver;
- EEPROM drivers;
- Network drivers;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- 9P distributed file system;
- Network file system client;
- SMB network file system;
- Socket messages infrastructure;
- Dynamic debug library;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Multipath TCP;
- NSH protocol;
- Phonet protocol;
- TIPC protocol;
- Wireless networking;
- Key management;
- ALSA framework;
- HD-audio driver; (CVE-2024-36883, CVE-2024-36940, CVE-2024-36902, CVE-2024-36975, CVE-2024-36964, CVE-2024-36938, CVE-2024-36931, CVE-2024-35848, CVE-2024-26900, CVE-2024-36967, CVE-2024-36904, CVE-2024-27398, CVE-2024-36031, CVE-2023-52585, CVE-2024-36886, CVE-2024-36937, CVE-2024-36954, CVE-2024-36916, CVE-2024-36905, CVE-2024-36959, CVE-2024-26980, CVE-2024-26936, CVE-2024-36928, CVE-2024-36889, CVE-2024-36929, CVE-2024-36933, CVE-2024-27399, CVE-2024-36946, CVE-2024-36906, CVE-2024-36965, CVE-2024-36957, CVE-2024-36941, CVE-2024-36897, CVE-2024-36952, CVE-2024-36947, CVE-2024-36950, CVE-2024-36880, CVE-2024-36017, CVE-2023-52882, CVE-2024-36969, CVE-2024-38600, CVE-2024-36955, CVE-2024-36960, CVE-2024-27401, CVE-2024-36919, CVE-2024-36934, CVE-2024-35947, CVE-2024-36953, CVE-2024-36944, CVE-2024-36939)
- Record
USN-6950-4- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bpftoolAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernelAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-abi-stablelistsAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-coreAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-cross-headersAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-debugAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-debug-coreAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-debug-develAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-debug-modulesAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-debug-modules-extraAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-docAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-headersAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-modulesAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-modules-extraAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-toolsAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-tools-libsAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-tools-libs-develAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-zfcpdumpAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-coreAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-develAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-modulesAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-zfcpdump-modules-extraAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
perfAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
python3-perfAlmaLinux:8 From an advisory covering 160 CVEs |
before 4.18.0-553.16.1.el8_10 | 4.18.0-553.16.1.el8_10 |
kernel-rtAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-coreAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debugAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-coreAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-develAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-kvmAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-modulesAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-debug-modules-extraAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-develAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-kvmAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-modulesAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
kernel-rt-modules-extraAlmaLinux:8 From an advisory covering 149 CVEs |
before 4.18.0-553.16.1.rt7.357.el8_10 | 4.18.0-553.16.1.rt7.357.el8_10 |
linux-ltsAlpaquita:23 |
6.1.89-r0 up to 6.1.91-r0 | 6.1.91-r0 |
linux-ltsAlpaquita:25 |
6.6.89-r0 up to 6.12.41-r0 | 6.12.41-r0 |
linux-ltsAlpaquita:stream |
6.6.100-r0 up to 6.12.41-r0 | 6.12.41-r0 |
linux-buildinfo-4.15.0-235-tuxcare.els23-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-buildinfo-4.15.0-235-tuxcare.els23-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-cloud-tools-4.15.0-235-tuxcare.els23TuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-cloud-tools-4.15.0-235-tuxcare.els23-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-cloud-tools-4.15.0-235-tuxcare.els23-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-cloud-tools-commonTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-cloud-tools-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-cloud-tools-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-crashdumpTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-docTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-headers-4.15.0-235-tuxcare.els23TuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-headers-4.15.0-235-tuxcare.els23-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-headers-4.15.0-235-tuxcare.els23-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-headers-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-headers-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-image-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-image-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-image-unsigned-4.15.0-235-tuxcare.els23-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-image-unsigned-4.15.0-235-tuxcare.els23-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-libc-devTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-modules-4.15.0-235-tuxcare.els23-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-modules-4.15.0-235-tuxcare.els23-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-modules-extra-4.15.0-235-tuxcare.els23-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-sourceTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-source-4.15.0TuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-tools-4.15.0-235-tuxcare.els23TuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-tools-4.15.0-235-tuxcare.els23-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-tools-4.15.0-235-tuxcare.els23-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-tools-commonTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-tools-genericTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-tools-hostTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0-235.246 | 4.15.0-235.246 |
linux-tools-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 55 CVEs |
before 4.15.0.235.246 | 4.15.0.235.246 |
linux-buildinfo-4.4.0-263-tuxcare.els34-genericTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0-263.297 | 4.4.0-263.297 |
linux-buildinfo-4.4.0-263-tuxcare.els34-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0-263.297 | 4.4.0-263.297 |
linux-cloud-tools-4.4.0-263-tuxcare.els34TuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0-263.297 | 4.4.0-263.297 |
linux-cloud-tools-4.4.0-263-tuxcare.els34-genericTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0-263.297 | 4.4.0-263.297 |
linux-cloud-tools-4.4.0-263-tuxcare.els34-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0-263.297 | 4.4.0-263.297 |
linux-cloud-tools-commonTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0-263.297 | 4.4.0-263.297 |
linux-cloud-tools-genericTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0.263.297 | 4.4.0.263.297 |
linux-cloud-tools-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0.263.297 | 4.4.0.263.297 |
linux-crashdumpTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0.263.297 | 4.4.0.263.297 |
linux-docTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0-263.297 | 4.4.0-263.297 |
linux-genericTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0.263.297 | 4.4.0.263.297 |
linux-headers-4.4.0-263-tuxcare.els34TuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0-263.297 | 4.4.0-263.297 |
linux-headers-4.4.0-263-tuxcare.els34-genericTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0-263.297 | 4.4.0-263.297 |
linux-headers-4.4.0-263-tuxcare.els34-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0-263.297 | 4.4.0-263.297 |
linux-headers-genericTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0.263.297 | 4.4.0.263.297 |
linux-headers-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0.263.297 | 4.4.0.263.297 |
linux-image-genericTuxCare:Ubuntu:16.04 From an advisory covering 39 CVEs |
before 4.4.0.263.297 | 4.4.0.263.297 |
KernelLinux |
3.4.0 up to 4.19.314, 4.20.0 up to 5.4.276, 5.5.0 up to 5.10.217, 5.11.0 up to 5.15.159, 5.16.0 up to 6.1.91, 6.2.0 up to 6.6.31, 6.7.0 up to 6.8.10 | 4.19.3145.4.2765.10.2175.15.1596.1.916.6.316.8.10 |
linuxDebian:12 |
before 6.1.94-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 18 moreShow less6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1~bpo11+1 |
6.1.94-1 |
linuxDebian:13 |
before 6.8.11-1 | 6.8.11-1 |
linuxDebian:14 |
before 6.8.11-1 | 6.8.11-1 |
linuxDebian:10 From an advisory covering 258 CVEs |
before 4.19.316-1, plus listed versions 4.19.118-14.19.118-24.19.118-2+deb10u14.19.118-2+deb10u1~bpo9+14.19.118-2~bpo9+1 Show 41 moreShow less4.19.131-14.19.131-24.19.132-14.19.146-14.19.152-14.19.160-14.19.160-24.19.171-14.19.171-24.19.177-14.19.181-14.19.194-14.19.194-24.19.194-34.19.208-14.19.232-14.19.235-14.19.249-14.19.249-24.19.260-14.19.269-14.19.282-14.19.289-14.19.289-24.19.304-14.19.37-54.19.37-5+deb10u14.19.37-5+deb10u24.19.37-5+deb10u2~bpo9+14.19.37-64.19.67-14.19.67-24.19.67-2+deb10u14.19.67-2+deb10u1~bpo9+14.19.67-2+deb10u24.19.67-2+deb10u2~bpo9+14.19.67-2~bpo9+14.19.87-14.19.98-14.19.98-1+deb10u14.19.98-1~bpo9+1 |
4.19.316-1 |
linux-5.10Debian:10 From an advisory covering 32 CVEs |
before 5.10.218-1~deb10u1, plus listed versions 5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1 Show 9 moreShow less5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u15.10.197-1~deb10u15.10.205-2~deb10u15.10.209-2~deb10u15.10.216-1~deb10u1 |
5.10.218-1~deb10u1 |
kernelMageia:9 From an advisory covering 320 CVEs |
before 6.6.37-1.mga9 | 6.6.37-1.mga9 |
kmod-xtables-addonsMageia:9 From an advisory covering 320 CVEs |
before 3.24-59.mga9 | 3.24-59.mga9 |
kmod-virtualboxMageia:9 From an advisory covering 320 CVEs |
before 7.0.18-50.mga9 | 7.0.18-50.mga9 |
dwarvesMageia:9 From an advisory covering 320 CVEs |
before 1.27-1.mga9 | 1.27-1.mga9 |
kernel-linusMageia:9 From an advisory covering 320 CVEs |
before 6.6.37-1.mga9 | 6.6.37-1.mga9 |
kernelopenEuler:20.03-LTS-SP4 From an advisory covering 54 CVEs |
before 4.19.90-2406.3.0.0282.oe2003sp4 | 4.19.90-2406.3.0.0282.oe2003sp4 |
kernelopenEuler:22.03-LTS-SP1 From an advisory covering 48 CVEs |
before 5.10.0-136.80.0.160.oe2203sp1 | 5.10.0-136.80.0.160.oe2203sp1 |
kernelopenEuler:22.03-LTS-SP3 From an advisory covering 42 CVEs |
before 5.10.0-209.0.0.117.oe2203sp3 | 5.10.0-209.0.0.117.oe2203sp3 |
bpftool-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:7.3.0-427.47.1.el9_4 | 0:7.3.0-427.47.1.el9_4 |
kernel-64k-debug-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-debug-develRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-debug-devel-matchedRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-develRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-devel-matchedRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debug-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debug-develRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debug-devel-matchedRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debuginfo-common-aarch64Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debuginfo-common-ppc64leRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debuginfo-common-s390xRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debuginfo-common-x86_64Red Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-develRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-devel-matchedRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-docRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-rt-debug-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-rt-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-tools-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-zfcpdump-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-zfcpdump-develRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-zfcpdump-devel-matchedRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
libperf-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
perfRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
perf-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
python3-perf-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
rtlaRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
rvRed Hat:rhel_eus:9.4::appstream From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
bpftoolRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:7.3.0-427.47.1.el9_4 | 0:7.3.0-427.47.1.el9_4 |
bpftool-debuginfoRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:7.3.0-427.47.1.el9_4 | 0:7.3.0-427.47.1.el9_4 |
kernelRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64kRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-coreRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-debugRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-debug-coreRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-debug-debuginfoRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-debug-modulesRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-debug-modules-coreRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-debug-modules-extraRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-debuginfoRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-modulesRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-modules-coreRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-64k-modules-extraRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-abi-stablelistsRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-coreRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debugRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debug-coreRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debug-debuginfoRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernel-debug-modulesRed Hat:rhel_eus:9.4::baseos From an advisory covering 36 CVEs |
before 0:5.14.0-427.47.1.el9_4 | 0:5.14.0-427.47.1.el9_4 |
kernelRocky Linux:8 From an advisory covering 160 CVEs |
before 0:4.18.0-553.16.1.el8_10 | 0:4.18.0-553.16.1.el8_10 |
kernel-rtRocky Linux:8 From an advisory covering 149 CVEs |
before 0:4.18.0-553.16.1.rt7.357.el8_10 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
kernelRocky Linux:8 From an advisory covering 160 CVEs |
before 0:4.18.0-553.16.1.el8_10.cloud.0.1 | 0:4.18.0-553.16.1.el8_10.cloud.0.1 |
kernel-azureSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 148 CVEs |
before 4.12.14-16.191.1 | 4.12.14-16.191.1 |
kernel-source-azureSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 148 CVEs |
before 4.12.14-16.191.1 | 4.12.14-16.191.1 |
kernel-syms-azureSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 148 CVEs |
before 4.12.14-16.191.1 | 4.12.14-16.191.1 |
kernel-azureSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 148 CVEs |
before 4.12.14-16.191.1 | 4.12.14-16.191.1 |
kernel-source-azureSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 148 CVEs |
before 4.12.14-16.191.1 | 4.12.14-16.191.1 |
kernel-syms-azureSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 148 CVEs |
before 4.12.14-16.191.1 | 4.12.14-16.191.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs |
before 5.14.21-150500.33.60.1 | 5.14.21-150500.33.60.1 |
kernel-source-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs |
before 5.14.21-150500.33.60.1 | 5.14.21-150500.33.60.1 |
kernel-syms-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs |
before 5.14.21-150500.33.60.1 | 5.14.21-150500.33.60.1 |
kernel-azureopenSUSE:Leap 15.5 From an advisory covering 249 CVEs |
before 5.14.21-150500.33.60.1 | 5.14.21-150500.33.60.1 |
kernel-source-azureopenSUSE:Leap 15.5 From an advisory covering 249 CVEs |
before 5.14.21-150500.33.60.1 | 5.14.21-150500.33.60.1 |
kernel-syms-azureopenSUSE:Leap 15.5 From an advisory covering 249 CVEs |
before 5.14.21-150500.33.60.1 | 5.14.21-150500.33.60.1 |
kernel-rtSUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 143 CVEs |
before 4.12.14-10.191.1 | 4.12.14-10.191.1 |
kernel-rt_debugSUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 143 CVEs |
before 4.12.14-10.191.1 | 4.12.14-10.191.1 |
kernel-source-rtSUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 143 CVEs |
before 4.12.14-10.191.1 | 4.12.14-10.191.1 |
kernel-syms-rtSUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 143 CVEs |
before 4.12.14-10.191.1 | 4.12.14-10.191.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 249 CVEs |
before 5.14.21-150500.13.61.1 | 5.14.21-150500.13.61.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 249 CVEs |
before 5.14.21-150500.13.61.1 | 5.14.21-150500.13.61.1 |
kernel-livepatch-SLE15-SP5-RT_Update_17SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 249 CVEs |
before 1-150500.11.3.1 | 1-150500.11.3.1 |
kernel-rtSUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs |
before 5.14.21-150500.13.61.1 | 5.14.21-150500.13.61.1 |
kernel-rt_debugSUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs |
before 5.14.21-150500.13.61.1 | 5.14.21-150500.13.61.1 |
kernel-source-rtSUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs |
before 5.14.21-150500.13.61.1 | 5.14.21-150500.13.61.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs |
before 5.14.21-150500.13.61.1 | 5.14.21-150500.13.61.1 |
kernel-rtopenSUSE:Leap 15.5 From an advisory covering 249 CVEs |
before 5.14.21-150500.13.61.1 | 5.14.21-150500.13.61.1 |
kernel-rt_debugopenSUSE:Leap 15.5 From an advisory covering 249 CVEs |
before 5.14.21-150500.13.61.1 | 5.14.21-150500.13.61.1 |
kernel-source-rtopenSUSE:Leap 15.5 From an advisory covering 249 CVEs |
before 5.14.21-150500.13.61.1 | 5.14.21-150500.13.61.1 |
kernel-syms-rtopenSUSE:Leap 15.5 From an advisory covering 249 CVEs |
before 5.14.21-150500.13.61.1 | 5.14.21-150500.13.61.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 12 SP5 From an advisory covering 176 CVEs |
before 4.12.14-122.222.1 | 4.12.14-122.222.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 176 CVEs |
before 4.12.14-122.222.1 | 4.12.14-122.222.1 |
kgraft-patch-SLE12-SP5_Update_58SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 176 CVEs |
before 1-8.3.1 | 1-8.3.1 |
kernel-docsSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 176 CVEs |
before 4.12.14-122.222.1 | 4.12.14-122.222.1 |
kernel-obs-buildSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 176 CVEs |
before 4.12.14-122.222.1 | 4.12.14-122.222.1 |
kernel-defaultSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 176 CVEs |
before 4.12.14-122.222.1 | 4.12.14-122.222.1 |
kernel-sourceSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 176 CVEs |
before 4.12.14-122.222.1 | 4.12.14-122.222.1 |
kernel-symsSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 176 CVEs |
before 4.12.14-122.222.1 | 4.12.14-122.222.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 176 CVEs |
before 4.12.14-122.222.1 | 4.12.14-122.222.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 176 CVEs |
before 4.12.14-122.222.1 | 4.12.14-122.222.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 176 CVEs |
before 4.12.14-122.222.1 | 4.12.14-122.222.1 |
kernel-defaultSUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 176 CVEs |
before 4.12.14-122.222.1 | 4.12.14-122.222.1 |
kernel-64kbSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.1 | 6.4.0-150600.23.14.1 |
kernel-defaultSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-default-baseSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2.150600.12.4.3 | 6.4.0-150600.23.14.2.150600.12.4.3 |
kernel-sourceSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-zfcpdumpSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-docsSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-obs-buildSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-sourceSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-symsSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-defaultSUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-livepatch-SLE15-SP6_Update_2SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 285 CVEs |
before 1-150600.13.3.2 | 1-150600.13.3.2 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-defaultSUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
dtb-aarch64openSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.1 | 6.4.0-150600.23.14.1 |
kernel-64kbopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.1 | 6.4.0-150600.23.14.1 |
kernel-debugopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-defaultopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-default-baseopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2.150600.12.4.3 | 6.4.0-150600.23.14.2.150600.12.4.3 |
kernel-docsopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-kvmsmallopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-obs-buildopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-obs-qaopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-sourceopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-symsopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-zfcpdumpopenSUSE:Leap 15.6 From an advisory covering 285 CVEs |
before 6.4.0-150600.23.14.2 | 6.4.0-150600.23.14.2 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs |
before 6.4.0-150600.8.8.2 | 6.4.0-150600.8.8.2 |
kernel-source-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs |
before 6.4.0-150600.8.8.2 | 6.4.0-150600.8.8.2 |
kernel-syms-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs |
before 6.4.0-150600.8.8.1 | 6.4.0-150600.8.8.1 |
kernel-azureopenSUSE:Leap 15.6 From an advisory covering 402 CVEs |
before 6.4.0-150600.8.8.2 | 6.4.0-150600.8.8.2 |
kernel-source-azureopenSUSE:Leap 15.6 From an advisory covering 402 CVEs |
before 6.4.0-150600.8.8.2 | 6.4.0-150600.8.8.2 |
kernel-syms-azureopenSUSE:Leap 15.6 From an advisory covering 402 CVEs |
before 6.4.0-150600.8.8.1 | 6.4.0-150600.8.8.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1.150500.6.33.8 | 5.14.21-150500.55.73.1.150500.6.33.8 |
kernel-defaultopenSUSE:Leap Micro 5.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-default-baseopenSUSE:Leap Micro 5.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1.150500.6.33.8 | 5.14.21-150500.55.73.1.150500.6.33.8 |
dtb-aarch64openSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-64kbopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-debugopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-defaultopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-default-baseopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1.150500.6.33.8 | 5.14.21-150500.55.73.1.150500.6.33.8 |
kernel-docsopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.2 | 5.14.21-150500.55.73.2 |
kernel-kvmsmallopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-obs-buildopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-obs-qaopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-sourceopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-symsopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-zfcpdumpopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-rtopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
kernel-rt_debugopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
kernel-source-rtopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
kernel-syms-rtopenSUSE:Leap 15.6 From an advisory covering 783 CVEs |
before 6.4.0-150600.10.5.1 | 6.4.0-150600.10.5.1 |
linuxUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70 |
None known |
linux-awsUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80 |
None known |
linux-azureUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1 |
None known |
linux-lts-xenialUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1 |
None known |
linuxUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96 |
None known |
linux-awsUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93 |
None known |
linux-aws-hweUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1 |
None known |
linux-azureUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71 |
None known |
linux-gcpUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1 |
None known |
linux-hweUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1 |
None known |
linux-hwe-edgeUbuntu:16.04:LTS |
All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 |
None known |
linux-kvmUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84 |
None known |
linux-oracleUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1 |
None known |
linux-fipsUbuntu:Pro:FIPS-updates:16.04:LTS |
All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78 |
None known |
linux-fipsUbuntu:Pro:FIPS:16.04:LTS |
All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2 |
None known |
linuxUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107 |
None known |
linux-awsUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87 |
None known |
linux-aws-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 |
None known |
linux-aws-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 |
None known |
linux-aws-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1130.140~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2 |
5.4.0-1130.140~18.04.1 |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-azure-4.15Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176 |
None known |
linux-azure-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 |
None known |
linux-azure-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1135.142~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1 |
5.4.0-1135.142~18.04.1 |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-gcp-4.15Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161 |
None known |
linux-gcp-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 |
None known |
linux-gcp-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1134.143~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2 |
5.4.0-1134.143~18.04.1 |
linux-gke-4.15Ubuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 |
None known |
linux-gke-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 |
None known |
linux-gkeop-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-hwe-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-192.212~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1 |
5.4.0-192.212~18.04.1 |
linux-hwe-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 |
None known |
linux-ibm-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1077.82~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1 |
5.4.0-1077.82~18.04.1 |
linux-kvmUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83 |
None known |
linux-oemUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 |
None known |
linux-oracleUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88 |
None known |
linux-oracle-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 |
None known |
linux-oracle-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 |
None known |
linux-oracle-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1129.138~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1 |
5.4.0-1129.138~18.04.1 |
linux-raspi-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1114.126~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1 |
5.4.0-1114.126~18.04.1 |
linux-aws-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93 |
None known |
linux-azure-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80 |
None known |
linux-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110 |
None known |
linux-gcp-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83 |
None known |
linux-aws-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-2000.4 |
None known |
linux-azure-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.2 |
None known |
linux-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1011.12 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | ||
| facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-36960 is a high vulnerability (CVSS 7.1) in Debian Linux, published June 3, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. Fixed in linux-lts 6.1.91-r0.
References
git.kernel.org/stable/c/2f527e3efd37c7c5e85e8aa86308856b619fa59f
git.kernel.org/stable/c/cef0962f2d3e5fd0660c8efb72321083a1b531a9
git.kernel.org/stable/c/3cd682357c6167f636aec8ac0efaa8ba61144d36
git.kernel.org/stable/c/b7bab33c4623c66e3398d5253870d4e88c52dfc0
git.kernel.org/stable/c/0dbfc73670b357456196130551e586345ca48e1b
git.kernel.org/stable/c/7b5fd3af4a250dd0a2a558e07b43478748eb5d22
Show 194 moreShow less
git.kernel.org/stable/c/deab66596dfad14f1c54eeefdb72428340d72a77
git.kernel.org/stable/c/a37ef7613c00f2d72c8fc08bd83fb6cc76926c8c
lists.debian.org/debian-lts-announce/2024/06/msg00020.html
lists.debian.org/debian-lts-announce/2024/06/msg00019.html
nvd.nist.gov/vuln/detail/CVE-2024-36960
github.com/advisories/GHSA-5w4f-cwfr-f344
access.redhat.com/errata/RHSA-2024:5101
access.redhat.com/security/cve/CVE-2021-46939
access.redhat.com/security/cve/CVE-2021-47018
access.redhat.com/security/cve/CVE-2021-47257
access.redhat.com/security/cve/CVE-2021-47284
access.redhat.com/security/cve/CVE-2021-47304
access.redhat.com/security/cve/CVE-2021-47373
access.redhat.com/security/cve/CVE-2021-47408
access.redhat.com/security/cve/CVE-2021-47461
access.redhat.com/security/cve/CVE-2021-47468
access.redhat.com/security/cve/CVE-2021-47491
access.redhat.com/security/cve/CVE-2021-47548
access.redhat.com/security/cve/CVE-2021-47579
access.redhat.com/security/cve/CVE-2021-47624
access.redhat.com/security/cve/CVE-2022-48632
bugzilla.redhat.com/2263879
bugzilla.redhat.com/2265645
bugzilla.redhat.com/2265650
bugzilla.redhat.com/2265797
bugzilla.redhat.com/2266341
bugzilla.redhat.com/2266347
bugzilla.redhat.com/2266497
bugzilla.redhat.com/2266594
bugzilla.redhat.com/2267787
bugzilla.redhat.com/2268118
bugzilla.redhat.com/2269070
bugzilla.redhat.com/2269211
bugzilla.redhat.com/2270084
bugzilla.redhat.com/2270100
bugzilla.redhat.com/2270700
errata.almalinux.org/8/ALSA-2024-5101.html
errata.almalinux.org/8/ALSA-2024-5102.html
docs.bell-sw.com/security/cves/CVE-2024-36960
errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1723806933.html
errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1723807956.html
errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1723809128.html
errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1723809480.html
errata.tuxcare.com/centos7-els/CLSA-2024-1724693366.html
errata.tuxcare.com/els_os/centos6els/CLSA-2024-1724774331.html
nvd.nist.gov/vuln/detail/CVE-2020-11668
nvd.nist.gov/vuln/detail/CVE-2020-14351
nvd.nist.gov/vuln/detail/CVE-2020-25643
nvd.nist.gov/vuln/detail/CVE-2020-8648
nvd.nist.gov/vuln/detail/CVE-2023-4921
nvd.nist.gov/vuln/detail/CVE-2023-52340
nvd.nist.gov/vuln/detail/CVE-2023-52445
nvd.nist.gov/vuln/detail/CVE-2023-52752
nvd.nist.gov/vuln/detail/CVE-2023-6270
nvd.nist.gov/vuln/detail/CVE-2024-26898
nvd.nist.gov/vuln/detail/CVE-2024-26923
errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2024-1725187614.html
errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1725293298.html
errata.tuxcare.com/els_os/centos-stream8els/CLSA-2024-1725871927.html
nvd.nist.gov/vuln/detail/CVE-2021-47461
nvd.nist.gov/vuln/detail/CVE-2023-52707
nvd.nist.gov/vuln/detail/CVE-2024-26668
errata.tuxcare.com/els_os/centos8.4els/CLSA-2024-1725872696.html
errata.tuxcare.com/els_os/centos8.5els/CLSA-2024-1725876080.html
github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36960.json
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
security-tracker.debian.org/tracker/CVE-2024-36960
advisories.mageia.org/MGASA-2024-0263.html
bugs.mageia.org/show_bug.cgi?id=33373
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.37
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.36
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.35
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.34
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.33
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.32
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.31
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.30
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.29
advisories.mageia.org/MGASA-2024-0266.html
bugs.mageia.org/show_bug.cgi?id=33374
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1736
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1737
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1738
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10771.json
cve.org/CVERecord?id=CVE-2022-48804
lore.kernel.org/linux-cve-announce/2024071645-CVE-2022-48804-f191@gregkh/T
cve.org/CVERecord?id=CVE-2023-52619
lore.kernel.org/linux-cve-announce/[email protected]/T
cve.org/CVERecord?id=CVE-2023-52635
lore.kernel.org/linux-cve-announce/2024040219-CVE-2023-52635-8b18@gregkh/T
cve.org/CVERecord?id=CVE-2023-52775
lore.kernel.org/linux-cve-announce/2024052151-CVE-2023-52775-38a8@gregkh/T
cve.org/CVERecord?id=CVE-2023-52811
lore.kernel.org/linux-cve-announce/2024052102-CVE-2023-52811-2a5f@gregkh/T
cve.org/CVERecord?id=CVE-2023-53503
lore.kernel.org/linux-cve-announce/2025100127-CVE-2023-53503-d86c@gregkh/T
cve.org/CVERecord?id=CVE-2023-53861
lore.kernel.org/linux-cve-announce/2025120905-CVE-2023-53861-22c6@gregkh/T
cve.org/CVERecord?id=CVE-2024-26601
lore.kernel.org/linux-cve-announce/2024022411-CVE-2024-26601-b6ac@gregkh/T
cve.org/CVERecord?id=CVE-2024-26615
lore.kernel.org/linux-cve-announce/[email protected]/T
cve.org/CVERecord?id=CVE-2024-26686
lore.kernel.org/linux-cve-announce/2024040335-CVE-2024-26686-b22f@gregkh/T
cve.org/CVERecord?id=CVE-2024-26704
lore.kernel.org/linux-cve-announce/2024040340-CVE-2024-26704-a082@gregkh/T
cve.org/CVERecord?id=CVE-2024-27399
lore.kernel.org/linux-cve-announce/2024051300-CVE-2024-27399-afa8@gregkh/T
cve.org/CVERecord?id=CVE-2024-36928
lore.kernel.org/linux-cve-announce/2024053041-CVE-2024-36928-845b@gregkh/T
cve.org/CVERecord?id=CVE-2024-36960
lore.kernel.org/linux-cve-announce/2024060341-CVE-2024-36960-d1bf@gregkh/T
cve.org/CVERecord?id=CVE-2024-38384
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5066.json
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5067.json
issues.redhat.com/browse/RHEL-36222
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5101.json
git.kernel.org/stable/c/4b9fb2c9039a206d37f215936a4d5bee7b1bf9cd
git.kernel.org/stable/c/9ccba66d4d2aff9a3909aa77d57ea8b7cc166f3c
git.kernel.org/stable/c/a84df7c80bdac598d6ac9268ae578da6928883e8
git.kernel.org/stable/c/abb07dc5e8b61ab7b1dde20dd73aa01a3aeb183f
intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
git.kernel.org/stable/c/28dd788382c43b330480f57cd34cde0840896743
git.kernel.org/stable/c/3426f059eacc33ecc676b0d66539297e1cfafd02
download.vusec.net/papers/inspectre_sec24.pdf
intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/branch-history-injection.html
openwall.com/lists/oss-security/2024/04/09/15
vusec.net/projects/native-bhi
cisa.gov/known-exploited-vulnerabilities-catalog
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5102.json
docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
issues.redhat.com/browse/RHEL-17714
issues.redhat.com/browse/RHEL-23575
issues.redhat.com/browse/RHEL-26081
issues.redhat.com/browse/RHEL-29437
issues.redhat.com/browse/RHEL-31876
issues.redhat.com/browse/RHEL-32199
issues.redhat.com/browse/RHEL-35853
issues.redhat.com/browse/RHEL-36182
issues.redhat.com/browse/RHEL-36224
issues.redhat.com/browse/RHEL-45158
issues.redhat.com/browse/RHEL-7990
issues.redhat.com/browse/RHEL-9096
issues.redhat.com/browse/RHEL-9148
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9315.json
francozappa.github.io/about-bias
kb.cert.org/vuls/id/647177
bugzilla.openanolis.cn/show_bug.cgi?id=7975
patchwork.kernel.org/project/linux-raid/patch/[email protected]
errata.rockylinux.org/RLSA-2024:5101
errata.rockylinux.org/RLSA-2024:5102
errata.rockylinux.org/RXSA-2024:5101
suse.com/support/update/announcement/2024/suse-su-20242360-1
bugzilla.suse.com/1119113
bugzilla.suse.com/1171988
bugzilla.suse.com/1191958
bugzilla.suse.com/1195065
bugzilla.suse.com/1195254
bugzilla.suse.com/1195775
bugzilla.suse.com/1204514
bugzilla.suse.com/1216062
bugzilla.suse.com/1217912
bugzilla.suse.com/1218148
bugzilla.suse.com/1219224
bugzilla.suse.com/1221010
bugzilla.suse.com/1221647
bugzilla.suse.com/1221654
suse.com/security/cve/CVE-2020-10135
suse.com/security/cve/CVE-2021-43389
suse.com/security/cve/CVE-2021-4439
suse.com/security/cve/CVE-2021-47103
suse.com/security/cve/CVE-2021-47191
suse.com/security/cve/CVE-2021-47193
suse.com/security/cve/CVE-2021-47267
suse.com/security/cve/CVE-2021-47270
suse.com/security/cve/CVE-2021-47293
suse.com/security/cve/CVE-2021-47294
suse.com/security/cve/CVE-2021-47297
suse.com/security/cve/CVE-2021-47309
suse.com/security/cve/CVE-2021-47328
ubuntu.com/security/CVE-2024-36960
ubuntu.com/security/notices/USN-6949-1
ubuntu.com/security/notices/USN-6950-1
ubuntu.com/security/notices/USN-6951-1
ubuntu.com/security/notices/USN-6952-1
ubuntu.com/security/notices/USN-6953-1
ubuntu.com/security/notices/USN-6955-1
ubuntu.com/security/notices/USN-6956-1
ubuntu.com/security/notices/USN-6957-1
ubuntu.com/security/notices/USN-6950-2
ubuntu.com/security/notices/USN-6950-3
ubuntu.com/security/notices/USN-6949-2
ubuntu.com/security/notices/USN-6952-2
ubuntu.com/security/notices/USN-6951-2
Left out here: 794 package rows, 2,026 versions, 6,902 references and the rest of 22 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 12 source records.