CVE-2024-38635

soundwire: cadence: fix invalid PDI offset

7.8 HighFix available

What does this mean?

: 7.8v3.1, from CVE List
: 0.24%14th percentile
Fixed in: 6.6.139.1-1kernel
Published: June 21, 2024
Modified: November 2, 2026
Weakness: CWE-125
Also known as: AZL-87128BELL-CVE-2024-38635CLSA-2025-1758796886CLSA-2025-1763722365CLSA-2025-1763731262CLSA-2025-1763734783DEBIAN-CVE-2024-38635DSA-5730-1
Show 37 moreShow less
EUVD-2024-37498GHSA-fgg4-8h2g-hcc2MGASA-2024-0263MGASA-2024-0266OESA-2024-2076OESA-2024-2321OESA-2024-2322OESA-2024-2324RHSA-2024:9315SUSE-SU-2024:2372-1SUSE-SU-2024:2394-1SUSE-SU-2024:2571-1SUSE-SU-2024:2896-1SUSE-SU-2024:2939-1SUSE-SU-2024:2973-1SUSE-SU-2025:20008-1SUSE-SU-2025:20028-1UBUNTU-CVE-2024-38635USN-6951-1USN-6951-2USN-6951-3USN-6951-4USN-6953-1USN-6979-1USN-6999-1USN-6999-2USN-7004-1USN-7005-1USN-7005-2USN-7007-1USN-7007-2USN-7007-3USN-7008-1USN-7009-1USN-7009-2USN-7019-1USN-7029-1

In the Linux kernel, the following vulnerability has been resolved:

soundwire: cadence: fix invalid PDI offset

For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT.

This code is however completely wrong and leads to an out-of-bounds access. We were just lucky so far since we used only a couple of PDIs and remained within the PDI array bounds.

A Fixes: tag is not provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problems as well.

A follow-up patch completely removes this useless offset.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.24%Up 0.2 points since Jun 22, 2024

What each source reports

CVE List Score used 7.8

soundwire: cadence: fix invalid PDI offset

In the Linux kernel, the following vulnerability has been resolved:

soundwire: cadence: fix invalid PDI offset

For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT.

This code is however completely wrong and leads to an out-of-bounds access. We were just lucky so far since we used only a couple of PDIs and remained within the PDI array bounds.

A Fixes: tag is not provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problems as well.

A follow-up patch completely removes this useless offset.

Record: CVE-2024-38635
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2024-37498 7.8

In the Linux kernel, the following vulnerability has been resolved:

soundwire: cadence: fix invalid PDI offset

For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT.

This code is however completely wrong and leads to an out-of-bounds access. We were just lucky so far since we used only a couple of PDIs and remained within the PDI array bounds.

A Fixes: tag is not provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problems as well.

A follow-up patch completely removes this useless offset.

Record: EUVD-2024-37498
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-fgg4-8h2g-hcc2 7.1

In the Linux kernel, the following vulnerability has been resolved: soundwire: cadence: fix...

In the Linux kernel, the following vulnerability has been resolved:

soundwire: cadence: fix invalid PDI offset

For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT.

This code is however completely wrong and leads to an out-of-bounds access. We were just lucky so far since we used only a couple of PDIs and remained within the PDI array bounds.

A Fixes: tag is not provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problems as well.

A follow-up patch completely removes this useless offset.

Record: GHSA-fgg4-8h2g-hcc2
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

soundwire: cadence: fix invalid PDI offset

For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT.

This code is however completely wrong and leads to an out-of-bounds access. We were just lucky so far since we used only a couple of PDIs and remained within the PDI array bounds.

A Fixes: tag is not provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problems as well.

A follow-up patch completely removes this useless offset.

Record: CVE-2024-38635
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVBELL-CVE-2024-38635 7.1

Record: BELL-CVE-2024-38635
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSV 7.8

soundwire: cadence: fix invalid PDI offset

In the Linux kernel, the following vulnerability has been resolved:

soundwire: cadence: fix invalid PDI offset

For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT.

This code is however completely wrong and leads to an out-of-bounds access. We were just lucky so far since we used only a couple of PDIs and remained within the PDI array bounds.

A Fixes: tag is not provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problems as well.

A follow-up patch completely removes this useless offset.

Record: CVE-2024-38635
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 41 moreShow less

OSVDEBIAN-CVE-2024-38635 7.1

In the Linux kernel, the following vulnerability has been resolved: soundwire: cadence: fix invalid PDI offset For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT. This code is however completely wrong and leads to an out-of-bounds access. We were just lucky so far since we used only a couple of PDIs and remained within the PDI array bounds. A Fixes: tag is not provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problems as well. A follow-up patch completely removes this useless offset.

Record: DEBIAN-CVE-2024-38635
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2076 8.2

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound

Raw packet from PF_PACKET socket ontop of an IPv6-backed ipvlan device will hit WARN_ON_ONCE() in sk_mc_loop() through sch_direct_xmit() path.

WARNING: CPU: 2 PID: 0 at net/core/sock.c:775 sk_mc_loop+0x2d/0x70 Modules linked in: sch_netem ipvlan rfkill cirrus drm_shmem_helper sg drm_kms_helper CPU: 2 PID: 0 Comm: swapper/2 Kdump: loaded Not tainted 6.9.0+ #279 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 RIP: 0010:sk_mc_loop+0x2d/0x70 Code: fa 0f 1f 44 00 00 65 0f b7 15 f7 96 a3 4f 31 c0 66 85 d2 75 26 48 85 ff 74 1c RSP: 0018:ffffa9584015cd78 EFLAGS: 00010212 RAX: 0000000000000011 RBX: ffff91e585793e00 RCX: 0000000002c6a001 RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffff91e589c0f000 RBP: ffff91e5855bd100 R08: 0000000000000000 R09: 3d00545216f43d00 R10: ffff91e584fdcc50 R11: 00000060dd8616f4 R12: ffff91e58132d000 R13: ffff91e584fdcc68 R14: ffff91e5869ce800 R15: ffff91e589c0f000 FS: 0000000000000000(0000) GS:ffff91e898100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f788f7c44c0 CR3: 0000000008e1a000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <IRQ> ? __warn (kernel/panic.c:693) ? sk_mc_loop (net/core/sock.c:760) ? report_bug (lib/bug.c:201 lib/bug.c:219) ? handle_bug (arch/x86/kernel/traps.c:239) ? exc_invalid_op (arch/x86/kernel/traps.c:260 (discriminator 1)) ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) ? sk_mc_loop (net/core/sock.c:760) ip6_finish_output2 (net/ipv6/ip6_output.c:83 (discriminator 1)) ? nf_hook_slow (net/netfilter/core.c:626) ip6_finish_output (net/ipv6/ip6_output.c:222) ? __pfx_ip6_finish_output (net/ipv6/ip6_output.c:215) ipvlan_xmit_mode_l3 (drivers/net/ipvlan/ipvlan_core.c:602) ipvlan ipvlan_start_xmit (drivers/net/ipvlan/ipvlan_main.c:226) ipvlan dev_hard_start_xmit (net/core/dev.c:3594) sch_direct_xmit (net/sched/sch_generic.c:343) __qdisc_run (net/sched/sch_generic.c:416) net_tx_action (net/core/dev.c:5286) handle_softirqs (kernel/softirq.c:555) __irq_exit_rcu (kernel/softirq.c:589) sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1043)

The warning triggers as this: packet_sendmsg packet_snd //skb->sk is packet sk __dev_queue_xmit __dev_xmit_skb //q->enqueue is not NULL __qdisc_run sch_direct_xmit dev_hard_start_xmit ipvlan_start_xmit ipvlan_xmit_mode_l3 //l3 mode ipvlan_process_outbound //vepa flag ipvlan_process_v6_outbound ip6_local_out __ip6_finish_output ip6_finish_output2 //multicast packet sk_mc_loop //sk->sk_family is AF_PACKET

Call ip{6}_local_out() with NULL sk in ipvlan as other tunnels to fix this.(CVE-2024-33621)

In the Linux kernel, the following vulnerability has been resolved:

f2fs: compress: don't allow unaligned truncation on released compress inode

f2fs image may be corrupted after below testcase:

mkfs.f2fs -O extra_attr,compression -f /dev/vdb
mount /dev/vdb /mnt/f2fs
touch /mnt/f2fs/file
f2fs_io setflags compression /mnt/f2fs/file
dd if=/dev/zero of=/mnt/f2fs/file bs=4k count=4
f2fs_io release_cblocks /mnt/f2fs/file
truncate -s 8192 /mnt/f2fs/file
umount /mnt/f2fs
fsck.f2fs /dev/vdb

[ASSERT] (fsck_chk_inode_blk:1256) --> ino: 0x5 has i_blocks: 0x00000002, but has 0x3 blocks [FSCK] valid_block_count matching with CP [Fail] [0x4, 0x5] [FSCK] other corrupted bugs …

Record: OESA-2024-2076
CVSS 3.1: 8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-02

OSVOESA-2024-2321 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix double list_add when enabling VMD in scalable mode

When enabling VMD and IOMMU scalable mode, the following kernel panic call trace/kernel log is shown in Eagle Stream platform (Sapphire Rapids CPU) during booting:

pci 0000:59:00.5: Adding to iommu group 42 ... vmd 0000:59:00.5: PCI host bridge to bus 10000:80 pci 10000:80:01.0: [8086:352a] type 01 class 0x060400 pci 10000:80:01.0: reg 0x10: [mem 0x00000000-0x0001ffff 64bit] pci 10000:80:01.0: enabling Extended Tags pci 10000:80:01.0: PME# supported from D0 D3hot D3cold pci 10000:80:01.0: DMAR: Setup RID2PASID failed pci 10000:80:01.0: Failed to add to iommu group 42: -16 pci 10000:80:03.0: [8086:352b] type 01 class 0x060400 pci 10000:80:03.0: reg 0x10: [mem 0x00000000-0x0001ffff 64bit] pci 10000:80:03.0: enabling Extended Tags pci 10000:80:03.0: PME# supported from D0 D3hot D3cold ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:29! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.17.0-rc3+ #7 Hardware name: Lenovo ThinkSystem SR650V3/SB27A86647, BIOS ESE101Y-1.00 01/13/2022 Workqueue: events work_for_cpu_fn RIP: 0010:__list_add_valid.cold+0x26/0x3f Code: 9a 4a ab ff 4c 89 c1 48 c7 c7 40 0c d9 9e e8 b9 b1 fe ff 0f 0b 48 89 f2 4c 89 c1 48 89 fe 48 c7 c7 f0 0c d9 9e e8 a2 b1 fe ff <0f> 0b 48 89 d1 4c 89 c6 4c 89 ca 48 c7 c7 98 0c d9 9e e8 8b b1 fe RSP: 0000:ff5ad434865b3a40 EFLAGS: 00010246 RAX: 0000000000000058 RBX: ff4d61160b74b880 RCX: ff4d61255e1fffa8 RDX: 0000000000000000 RSI: 00000000fffeffff RDI: ffffffff9fd34f20 RBP: ff4d611d8e245c00 R08: 0000000000000000 R09: ff5ad434865b3888 R10: ff5ad434865b3880 R11: ff4d61257fdc6fe8 R12: ff4d61160b74b8a0 R13: ff4d61160b74b8a0 R14: ff4d611d8e245c10 R15: ff4d611d8001ba70 FS: 0000000000000000(0000) GS:ff4d611d5ea00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ff4d611fa1401000 CR3: 0000000aa0210001 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> intel_pasid_alloc_table+0x9c/0x1d0 dmar_insert_one_dev_info+0x423/0x540 ? device_to_iommu+0x12d/0x2f0 intel_iommu_attach_device+0x116/0x290 __iommu_attach_device+0x1a/0x90 iommu_group_add_device+0x190/0x2c0 __iommu_probe_device+0x13e/0x250 iommu_probe_device+0x24/0x150 iommu_bus_notifier+0x69/0x90 blocking_notifier_call_chain+0x5a/0x80 device_add+0x3db/0x7b0 ? arch_memremap_can_ram_remap+0x19/0x50 ? memremap+0x75/0x140 pci_device_add+0x193/0x1d0 pci_scan_single_device+0xb9/0xf0 pci_scan_slot+0x4c/0x110 pci_scan_child_bus_extend+0x3a/0x290 vmd_enable_domain.constprop.0+0x63e/0x820 vmd_probe+0x163/0x190 local_pci_probe+0x42/0x80 work_for_cpu_fn+0x13/0x20 process_one_work+0x1e2/0x3b0 worker_thread+0x1c4/0x3a0 ? rescuer_thread+0x370/0x370 kthread+0xc7/0xf0 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- ... Kernel panic - not syncing: Fatal exception Kernel Offset: 0x1ca00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) ---[ end Kernel panic - not syncing: Fatal exception ]---

The following 'lspci' output shows devices '10000:80:*' are subdevices of the VMD device 0000:59:00.5:

$ lspci ... 0000:59:00.5 RAID bus controller: Intel Corporation Volume Management Device NVMe RAID Controller (rev 20) ... 10000:80:01.0 PCI bridge: Intel Corporation Device 352a (rev 03) 10000:80:03.0 PCI bridge: Intel Corporation Device 352b (rev 03) 10000:80:05.0 PCI bridge: Intel Corporation Device 352c (rev 03) 10000:80:07.0 PCI bridge: Intel Corporation Device 352d (rev 03) 10000:81:00.0…

Record: OESA-2024-2321
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2322 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix double list_add when enabling VMD in scalable mode

When enabling VMD and IOMMU scalable mode, the following kernel panic call trace/kernel log is shown in Eagle Stream platform (Sapphire Rapids CPU) during booting:

The following 'lspci' output shows devices '10000:80:*' are subdevices of the VMD device 0000:59:00.5:

Record: OESA-2024-2322
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2324 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix double list_add when enabling VMD in scalable mode

When enabling VMD and IOMMU scalable mode, the following kernel panic call trace/kernel log is shown in Eagle Stream platform (Sapphire Rapids CPU) during booting:

The following 'lspci' output shows devices '10000:80:*' are subdevices of the VMD device 0000:59:00.5:

Record: OESA-2024-2324
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-38635 7.1

Record: UBUNTU-CVE-2024-38635
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVAZL-87128 No score

CVE-2024-38635 affecting package kernel for versions less than 6.6.139.1-1

In the Linux kernel, the following vulnerability has been resolved:

soundwire: cadence: fix invalid PDI offset

For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT.

This code is however completely wrong and leads to an out-of-bounds access. We were just lucky so far since we used only a couple of PDIs and remained within the PDI array bounds.

A Fixes: tag is not provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problems as well.

A follow-up patch completely removes this useless offset.

Record: AZL-87128
Updated: 2026-11-02

OSVCLSA-2025-1758796886 No score

kernel: Fix of 23 CVEs

drm/amd/amdgpu: introduce gc_*_mes_2.bin v2
proc: fix a dentry lock race between release_task and lookup
scsi: aacraid: Stop using PCI_IRQ_AFFINITY
scsi: aacraid: Remove useless code
scsi: aacraid: Remove unused aac_check_health()
scsi: aacraid: struct {user,}sgmap{,64,raw}: Replace 1-element arrays with flexible arrays
scsi: aacraid: Rearrange order of struct aac_srb_unit
scsi: aacraid: struct aac_ciss_phys_luns_resp: Replace 1-element array with flexible array
scsi: aacraid: union aac_init: Replace 1-element array with flexible array
scsi: aacraid: aachba: Replace snprintf() with the safer scnprintf() variant
Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity"
scsi: aacraid: Avoid -Warray-bounds warning
scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity
scsi: aacraid: Replace all non-returning strlcpy with strscpy
scsi: aacraid: Declare SCSI host template const
scsi: aacraid: Drop redundant pci_enable_pcie_error_reporting()
scsi: aacraid: Allocate cmd_priv with scsicmd
scsi: aacraid: Remove redundant "the"
scsi: aacraid: Fix undefined behavior due to shift overflowing the constant
scsi: aacraid: Clean up some inconsistent indenting
scsi: aacraid: Move the SCSI pointer to private command data
scsi: aacraid: Fix spelling of "its"
scsi: aacraid: Call scsi_done() directly
scsi: aacraid: Introduce aac_scsi_done()
scsi: aacraid: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
scsi: aacraid: Remove an unused include
x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler {CVE-2024-25743}
net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356}
ipv6: mcast: Delay put pmc->idev in mld_del_delrec() {CVE-2025-38550}
scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
PM: hibernate: defer device probing when resuming from hibernation {CVE-2022-50202}
net: fix UaF in netns ops registration error path {CVE-2023-52999}
net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed {CVE-2023-52999}
usb: typec: fix potential array underflow in ucsi_ccg_sync_control() {CVE-2024-53203}
soundwire: cadence: fix invalid PDI offset {CVE-2024-38635}
drm/i915/vma: Fix UAF on destroy against retire race {CVE-2024-26939}
netns: Make get_net_ns() handle zero refcount net {CVE-2024-40958}
bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487}
wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
wifi: ath11k: fix gtk offload status event locking {CVE-2023-52777}
wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() {CVE-2022-48632}
net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739}
can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv {CVE-2021-47459}
net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg {CVE-2021-47596}
Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
crypto: qat - fix double free during reset
media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
fs/smb/client: Reset password pointer to NULL {CVE-2023-5345}

Record: CLSA-2025-1758796886
Updated: 2026-11-02

OSVCLSA-2025-1763722365 No score

kernel: Fix of 63 CVEs

wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226} {CVE-2023-53226}
wifi: mac80211: check S1G action frame size {CVE-2023-53257} {CVE-2023-53257}
wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864} {CVE-2025-39864}
partitions: mac: fix handling of bogus partition table {CVE-2025-21772} {CVE-2025-21772}
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} {CVE-2024-58014}
wifi: at76c50x: fix use after free access in at76_disconnect {CVE-2025-37796} {CVE-2025-37796}
dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} {CVE-2024-35939}
Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} {CVE-2022-50386}
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} {CVE-2025-39817}
wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937} {CVE-2024-35937}
nfs: fix UAF in direct writes {CVE-2024-26958} {CVE-2024-26958}
wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} {CVE-2024-36921}
net/smc: avoid data corruption caused by decline {CVE-2023-52775} {CVE-2023-52775}
bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} {CVE-2024-39487}
scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} {CVE-2024-40978}
mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961} {CVE-2024-26961}
platform/x86: wmi: Fix opening of char device {CVE-2023-52864} {CVE-2023-52864}
net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739} {CVE-2024-26739}
drm/dp_mst: Fix resetting msg rx state after topology removal {CVE-2024-57876} {CVE-2024-57876}
net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556} {CVE-2024-38556}
of: Fix double free in of_parse_phandle_with_args_map {CVE-2023-52679} {CVE-2023-52679}
xhci: Handle TD clearing for multiple streams case {CVE-2024-40927} {CVE-2024-40927}
wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} {CVE-2023-52530}
net: openvswitch: Fix Use-After-Free in ovs_ct_exit {CVE-2024-27395} {CVE-2024-27395}
r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586} {CVE-2024-38586}
media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} {CVE-2023-52764}
media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847} {CVE-2023-52847}
vsock: Fix transport_* TOCTOU {CVE-2025-38461} {CVE-2025-38461}
ppdev: Add an error check in register_device {CVE-2024-36015} {CVE-2024-36015}
HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} {CVE-2025-38556}
iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904} {CVE-2024-57904}
perf/aux: Fix AUX buffer serialization {CVE-2024-46713} {CVE-2024-46713}
net_sched: hfsc: Fix a UAF vulnerability in class handling {CVE-2025-37797} {CVE-2025-37797}
wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072} {CVE-2024-58072}
wifi: rtlwifi: remove unused dualmac control leftovers {CVE-2024-58072} {CVE-2024-58072}
wifi: rtlwifi: remove unused timer and related code {CVE-2024-58072} {CVE-2024-58072}
ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() {CVE-2025-22121} {CVE-2025-22121}
ext4: move where set the MAY_INLINE_DATA flag is set {CVE-2025-22121} {CVE-2025-22121}
ext4: introduce ITAIL helper {CVE-2025-22121} {CVE-2025-22121}
ext4: improve xattr consistency checking and error reporting {CVE-2025-22121} {CVE-2025-22121}
mm: fix zswap writeback race condition {CVE-2023-53178} {CVE-2023-53178}
fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367} {CVE-2022-50367}
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} {CVE-2025-39757}
smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527} {CVE-2025-38527} -…

Record: CLSA-2025-1763722365
Updated: 2026-11-02

OSVCLSA-2025-1763731262 No score

kernel: Fix of 66 CVEs

media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847} {CVE-2023-52847}
firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087} {CVE-2022-50087}
wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226} {CVE-2023-53226}
vsock: Fix transport_* TOCTOU {CVE-2025-38461} {CVE-2025-38461}
ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} {CVE-2025-39757}
locking/ww_mutex/test: Fix potential workqueue corruption {CVE-2023-52836} {CVE-2023-52836}
media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621} {CVE-2024-38621}
ath10k: skip ath10k_halt during suspend for driver state RESTARTING {CVE-2022-49519} {CVE-2022-49519}
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() {CVE-2022-48738} {CVE-2022-48738}
partitions: mac: fix handling of bogus partition table {CVE-2025-21772} {CVE-2025-21772}
ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292} {CVE-2022-49292}
usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} {CVE-2025-21704}
vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} {CVE-2024-53214}
ppdev: Add an error check in register_device {CVE-2024-36015} {CVE-2024-36015}
scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} {CVE-2023-53675}
enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659} {CVE-2024-38659}
dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929} {CVE-2024-57929}
dlm: fix plock invalid read {CVE-2022-49407} {CVE-2022-49407}
rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev {CVE-2022-48759} {CVE-2022-48759}
bpf: Don't use tnum_range on array range checking for poke descriptors {CVE-2022-49985} {CVE-2022-49985}
net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001} {CVE-2025-38001}
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes {CVE-2023-53185} {CVE-2023-53185}
dm integrity: fix memory corruption when tag_size is less than digest size {CVE-2022-49044} {CVE-2022-49044}
drm/radeon: possible buffer overflow {CVE-2023-52867} {CVE-2023-52867}
ata: sata_dwc_460ex: Fix crash due to OOB write {CVE-2022-49073} {CVE-2022-49073}
fs/jfs: Add validity check for db_maxag and db_agpref {CVE-2023-52804} {CVE-2023-52804}
net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581} {CVE-2023-53581}
thermal: core: prevent potential string overflow {CVE-2023-52868} {CVE-2023-52868}
ACPI: CPPC: Avoid out of bounds access when parsing _CPC data {CVE-2022-49145} {CVE-2022-49145}
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} {CVE-2025-39817}
igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} {CVE-2024-52332}
do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} {CVE-2025-38498}
drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119} {CVE-2024-42119}
wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408} {CVE-2022-50408}
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} {CVE-2024-58014}
wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229} {CVE-2023-53229}
ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} {CVE-2024-56570}
net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} {CVE-2023-53125}
net: stmmac: fix dma queue left shift overflow issue {CVE-2022-49592} {CVE-2022-49592}
iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904} {CVE-2024-57904}
crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} {CVE-2023-53373}
sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} {CVE-2025-38718}
KVM: SVM: Don't BUG if userspace…

Record: CLSA-2025-1763731262
Updated: 2026-11-02

OSVCLSA-2025-1763734783 No score

kernel: Fix of 64 CVEs

media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847}
firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087}
wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226}
vsock: Fix transport_* TOCTOU {CVE-2025-38461}
ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
perf/aux: Fix AUX buffer serialization {CVE-2024-46713}
locking/ww_mutex/test: Fix potential workqueue corruption {CVE-2023-52836}
media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
ath10k: skip ath10k_halt during suspend for driver state RESTARTING {CVE-2022-49519}
ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() {CVE-2022-48738}
partitions: mac: fix handling of bogus partition table {CVE-2025-21772}
ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
ppdev: Add an error check in register_device {CVE-2024-36015}
scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675}
enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659}
dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929}
dlm: fix plock invalid read {CVE-2022-49407}
rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev {CVE-2022-48759}
bpf: Don't use tnum_range on array range checking for poke descriptors {CVE-2022-49985}
net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001}
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes {CVE-2023-53185}
dm integrity: fix memory corruption when tag_size is less than digest size {CVE-2022-49044}
drm/radeon: possible buffer overflow {CVE-2023-52867}
ata: sata_dwc_460ex: Fix crash due to OOB write {CVE-2022-49073}
fs/jfs: Add validity check for db_maxag and db_agpref {CVE-2023-52804}
net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581}
thermal: core: prevent potential string overflow {CVE-2023-52868}
ACPI: CPPC: Avoid out of bounds access when parsing _CPC data {CVE-2022-49145}
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817}
igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498}
drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119}
wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408}
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014}
wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229}
ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570}
net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125}
net: stmmac: fix dma queue left shift overflow issue {CVE-2022-49592}
iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904}
crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}
sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718}
KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 {CVE-2022-50228}
soundwire: cadence: fix invalid PDI offset {CVE-2024-38635}
wifi: at76c50x: fix use after free access in at76_disconnect {CVE-2025-37796}
ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365}
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans {CVE-2023-53034}
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297}
scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527}
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730}
scsi:…

Record: CLSA-2025-1763734783
Updated: 2026-11-02

OSVMGASA-2024-0263 No score

Updated kernel kmod-xtables-addons kmod-virtualbox dwarves packages fix security vulnerabilities

Upstream kernel version 6.6.37 fix bugs and vulnerabilities. The dwarves, kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2024-0263
Updated: 2026-11-02

OSVMGASA-2024-0266 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.37 fix bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2024-0266
Updated: 2026-11-02

OSVSUSE-SU-2024:2372-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282bsc#1222072).
CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (git-fixesbsc#1223641).
CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
CVE-2024-35861:…

Record: SUSE-SU-2024:2372-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2394-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282, bsc#1222072).
CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (bsc#1223641).
CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
CVE-2024-35857: icmp: prevent possible…

Record: SUSE-SU-2024:2394-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2571-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758).
CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
CVE-2023-52834: atl1c: Work around the DMA RX overflow issue (bsc#1225599).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52865: Add check for mtk_alloc_clk_data (bsc#1225086).
CVE-2023-52821: Fixed a possible null pointer dereference (bsc#1225022).
CVE-2023-52867: Fixed possible buffer overflow (bsc#1225009).
CVE-2024-38578: ecryptfs: Fix buffer size for tag 66 packet (bsc#1226634,).
CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
CVE-2023-52759: Ignore negated quota changes (bsc#1225560).
CVE-2023-52796: Add ipvlan_route_v6_outbound() helper (bsc#1224930).
CVE-2023-52807: Fixed out-of-bounds access may occur when coalesce info is read via debugfs (bsc#1225097).
CVE-2023-52864: Fixed opening of char device (bsc#1225132).
CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
CVE-2023-52795: Fixed use after free in vhost_vdpa_probe() (bsc#1225085).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
CVE-2024-35843: iommu/vt-d: Use device rbtree in iopf reporting path (bsc#1224751).
CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799).
CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841).
CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879).
CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789).
CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
CVE-2024-38556:…

Record: SUSE-SU-2024:2571-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2896-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801). -…

Record: SUSE-SU-2024:2896-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2939-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958).
CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
CVE-2021-47546: ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571).
CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len. (bsc#1226555).
CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071).
CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869).
CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
CVE-2023-52787: blk-mq: make…

Record: SUSE-SU-2024:2939-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2973-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
CVE-2023-38417: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225600).
CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52458: Fixed check that partition length needs to be aligned with block size (bsc#1220428).
CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264 CVE-2023-52631).
CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442)
CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
CVE-2023-52692: Fixed missing error check to scarlett2_usb_set_config() (bsc#1224628).
CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race (bsc#1225007).
CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52855: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (bsc#1225583).
CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
CVE-2023-52875: Add check for mtk_alloc_clk_data (bsc#1225096).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086) -…

Record: SUSE-SU-2024:2973-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20008-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
CVE-2024-35890:…

Record: SUSE-SU-2025:20008-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20028-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866).
CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()…

Record: SUSE-SU-2025:20028-1
Updated: 2026-11-02

OSVUSN-6951-1 No score

linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-raspi, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
M68K architecture;
User-Mode Linux (UML);
x86 architecture;
Accessibility subsystem;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
FireWire subsystem;
GPU drivers;
HW tracing;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Greybus lights staging drivers;
TTY drivers;
Framebuffer layer;
Virtio drivers;
9P distributed file system;
eCrypt file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
Network file system client;
NILFS2 file system;
SMB network file system;
Kernel debugger infrastructure;
IRQ subsystem;
Tracing infrastructure;
Dynamic debug library;
9P file system network protocol;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
Netfilter;
NET/ROM layer;
NFC subsystem;
NSH protocol;
Open vSwitch;
Phonet protocol;
TIPC protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
ALSA framework; (CVE-2024-36934, CVE-2024-38578, CVE-2024-38600, CVE-2024-27399, CVE-2024-39276, CVE-2024-38596, CVE-2024-36933, CVE-2024-36919, CVE-2024-35976, CVE-2024-37356, CVE-2023-52585, CVE-2024-38558, CVE-2024-38560, CVE-2024-38634, CVE-2024-36959, CVE-2024-38633, CVE-2024-36886, CVE-2024-27398, CVE-2024-39493, CVE-2024-26886, CVE-2024-31076, CVE-2024-38559, CVE-2024-38615, CVE-2024-36971, CVE-2024-38627, CVE-2024-36964, CVE-2024-38780, CVE-2024-37353, CVE-2024-38621, CVE-2024-36883, CVE-2024-39488, CVE-2024-38661, CVE-2024-36939, CVE-2024-38589, CVE-2024-38565, CVE-2024-38381, CVE-2024-35947, CVE-2024-36905, CVE-2022-48772, CVE-2024-36017, CVE-2024-36946, CVE-2024-27401, CVE-2024-38579, CVE-2024-38612, CVE-2024-38598, CVE-2024-38635, CVE-2024-38587, CVE-2024-38567, CVE-2024-38549, CVE-2024-36960, CVE-2023-52752, CVE-2024-27019, CVE-2024-38601, CVE-2024-39489, CVE-2024-39467, CVE-2023-52882, CVE-2024-38583, CVE-2024-39480, CVE-2024-38607, CVE-2024-36940, CVE-2024-38659, CVE-2023-52434, CVE-2024-36015, CVE-2024-38582, CVE-2024-36950, CVE-2024-38552, CVE-2024-33621, CVE-2024-36954, CVE-2024-39475, CVE-2024-39301, CVE-2024-38599, CVE-2024-36902, CVE-2024-36286, CVE-2024-38613, CVE-2024-38637, CVE-2024-36941, CVE-2024-36014, CVE-2024-38618, CVE-2024-36904, CVE-2024-36270, CVE-2024-39292, CVE-2024-39471, CVE-2022-48674)

Record: USN-6951-1
Updated: 2026-11-02

OSVUSN-6951-2 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
M68K architecture;
User-Mode Linux (UML);
x86 architecture;
Accessibility subsystem;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
FireWire subsystem;
GPU drivers;
HW tracing;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Greybus lights staging drivers;
TTY drivers;
Framebuffer layer;
Virtio drivers;
9P distributed file system;
eCrypt file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
Network file system client;
NILFS2 file system;
SMB network file system;
Kernel debugger infrastructure;
IRQ subsystem;
Tracing infrastructure;
Dynamic debug library;
9P file system network protocol;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
Netfilter;
NET/ROM layer;
NFC subsystem;
NSH protocol;
Open vSwitch;
Phonet protocol;
TIPC protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
ALSA framework; (CVE-2024-36934, CVE-2024-38578, CVE-2024-38600, CVE-2024-27399, CVE-2024-39276, CVE-2024-38596, CVE-2024-36933, CVE-2024-36919, CVE-2024-35976, CVE-2024-37356, CVE-2023-52585, CVE-2024-38558, CVE-2024-38560, CVE-2024-38634, CVE-2024-36959, CVE-2024-38633, CVE-2024-36886, CVE-2024-27398, CVE-2024-39493, CVE-2024-26886, CVE-2024-31076, CVE-2024-38559, CVE-2024-38615, CVE-2024-36971, CVE-2024-38627, CVE-2024-36964, CVE-2024-38780, CVE-2024-37353, CVE-2024-38621, CVE-2024-36883, CVE-2024-39488, CVE-2024-38661, CVE-2024-36939, CVE-2024-38589, CVE-2024-38565, CVE-2024-38381, CVE-2024-35947, CVE-2024-36905, CVE-2022-48772, CVE-2024-36017, CVE-2024-36946, CVE-2024-27401, CVE-2024-38579, CVE-2024-38612, CVE-2024-38598, CVE-2024-38635, CVE-2024-38587, CVE-2024-38567, CVE-2024-38549, CVE-2024-36960, CVE-2023-52752, CVE-2024-27019, CVE-2024-38601, CVE-2024-39489, CVE-2024-39467, CVE-2023-52882, CVE-2024-38583, CVE-2024-39480, CVE-2024-38607, CVE-2024-36940, CVE-2024-38659, CVE-2023-52434, CVE-2024-36015, CVE-2024-38582, CVE-2024-36950, CVE-2024-38552, CVE-2024-33621, CVE-2024-36954, CVE-2024-39475, CVE-2024-39301, CVE-2024-38599, CVE-2024-36902, CVE-2024-36286, CVE-2024-38613, CVE-2024-38637, CVE-2024-36941, CVE-2024-36014, CVE-2024-38618, CVE-2024-36904, CVE-2024-36270, CVE-2024-39292, CVE-2024-39471, CVE-2022-48674)

Record: USN-6951-2
Updated: 2026-11-02

OSVUSN-6951-3 No score

linux-azure-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
M68K architecture;
User-Mode Linux (UML);
x86 architecture;
Accessibility subsystem;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
FireWire subsystem;
GPU drivers;
HW tracing;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Greybus lights staging drivers;
TTY drivers;
Framebuffer layer;
Virtio drivers;
9P distributed file system;
eCrypt file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
Network file system client;
NILFS2 file system;
SMB network file system;
Kernel debugger infrastructure;
IRQ subsystem;
Tracing infrastructure;
Dynamic debug library;
9P file system network protocol;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
Netfilter;
NET/ROM layer;
NFC subsystem;
NSH protocol;
Open vSwitch;
Phonet protocol;
TIPC protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
ALSA framework; (CVE-2024-36934, CVE-2024-38578, CVE-2024-38600, CVE-2024-27399, CVE-2024-39276, CVE-2024-38596, CVE-2024-36933, CVE-2024-36919, CVE-2024-35976, CVE-2024-37356, CVE-2023-52585, CVE-2024-38558, CVE-2024-38560, CVE-2024-38634, CVE-2024-36959, CVE-2024-38633, CVE-2024-36886, CVE-2024-27398, CVE-2024-39493, CVE-2024-26886, CVE-2024-31076, CVE-2024-38559, CVE-2024-38615, CVE-2024-36971, CVE-2024-38627, CVE-2024-36964, CVE-2024-38780, CVE-2024-37353, CVE-2024-38621, CVE-2024-36883, CVE-2024-39488, CVE-2024-38661, CVE-2024-36939, CVE-2024-38589, CVE-2024-38565, CVE-2024-38381, CVE-2024-35947, CVE-2024-36905, CVE-2022-48772, CVE-2024-36017, CVE-2024-36946, CVE-2024-27401, CVE-2024-38579, CVE-2024-38612, CVE-2024-38598, CVE-2024-38635, CVE-2024-38587, CVE-2024-38567, CVE-2024-38549, CVE-2024-36960, CVE-2023-52752, CVE-2024-27019, CVE-2024-38601, CVE-2024-39489, CVE-2024-39467, CVE-2023-52882, CVE-2024-38583, CVE-2024-39480, CVE-2024-38607, CVE-2024-36940, CVE-2024-38659, CVE-2023-52434, CVE-2024-36015, CVE-2024-38582, CVE-2024-36950, CVE-2024-38552, CVE-2024-33621, CVE-2024-36954, CVE-2024-39475, CVE-2024-39301, CVE-2024-38599, CVE-2024-36902, CVE-2024-36286, CVE-2024-38613, CVE-2024-38637, CVE-2024-36941, CVE-2024-36014, CVE-2024-38618, CVE-2024-36904, CVE-2024-36270, CVE-2024-39292, CVE-2024-39471, CVE-2022-48674)

Record: USN-6951-3
Updated: 2026-11-02

OSVUSN-6951-4 No score

linux-bluefield vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
M68K architecture;
User-Mode Linux (UML);
x86 architecture;
Accessibility subsystem;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
FireWire subsystem;
GPU drivers;
HW tracing;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Greybus lights staging drivers;
TTY drivers;
Framebuffer layer;
Virtio drivers;
9P distributed file system;
eCrypt file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
Network file system client;
NILFS2 file system;
SMB network file system;
Kernel debugger infrastructure;
IRQ subsystem;
Tracing infrastructure;
Dynamic debug library;
9P file system network protocol;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
Netfilter;
NET/ROM layer;
NFC subsystem;
NSH protocol;
Open vSwitch;
Phonet protocol;
TIPC protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
ALSA framework; (CVE-2024-36934, CVE-2024-38578, CVE-2024-38600, CVE-2024-27399, CVE-2024-39276, CVE-2024-38596, CVE-2024-36933, CVE-2024-36919, CVE-2024-35976, CVE-2024-37356, CVE-2023-52585, CVE-2024-38558, CVE-2024-38560, CVE-2024-38634, CVE-2024-36959, CVE-2024-38633, CVE-2024-36886, CVE-2024-27398, CVE-2024-39493, CVE-2024-26886, CVE-2024-31076, CVE-2024-38559, CVE-2024-38615, CVE-2024-36971, CVE-2024-38627, CVE-2024-36964, CVE-2024-38780, CVE-2024-37353, CVE-2024-38621, CVE-2024-36883, CVE-2024-39488, CVE-2024-38661, CVE-2024-36939, CVE-2024-38589, CVE-2024-38565, CVE-2024-38381, CVE-2024-35947, CVE-2024-36905, CVE-2022-48772, CVE-2024-36017, CVE-2024-36946, CVE-2024-27401, CVE-2024-38579, CVE-2024-38612, CVE-2024-38598, CVE-2024-38635, CVE-2024-38587, CVE-2024-38567, CVE-2024-38549, CVE-2024-36960, CVE-2023-52752, CVE-2024-27019, CVE-2024-38601, CVE-2024-39489, CVE-2024-39467, CVE-2023-52882, CVE-2024-38583, CVE-2024-39480, CVE-2024-38607, CVE-2024-36940, CVE-2024-38659, CVE-2023-52434, CVE-2024-36015, CVE-2024-38582, CVE-2024-36950, CVE-2024-38552, CVE-2024-33621, CVE-2024-36954, CVE-2024-39475, CVE-2024-39301, CVE-2024-38599, CVE-2024-36902, CVE-2024-36286, CVE-2024-38613, CVE-2024-38637, CVE-2024-36941, CVE-2024-36014, CVE-2024-38618, CVE-2024-36904, CVE-2024-36270, CVE-2024-39292, CVE-2024-39471, CVE-2022-48674)

Record: USN-6951-4
Updated: 2026-11-02

OSVUSN-6953-1 No score

linux-oracle, linux-oracle-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
M68K architecture;
User-Mode Linux (UML);
x86 architecture;
Accessibility subsystem;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
FireWire subsystem;
ARM SCMI message protocol;
GPU drivers;
HW tracing;
InfiniBand drivers;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Greybus lights staging drivers;
TTY drivers;
Framebuffer layer;
Virtio drivers;
9P distributed file system;
eCrypt file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
Network file system client;
NILFS2 file system;
SMB network file system;
Mellanox drivers;
Kernel debugger infrastructure;
IRQ subsystem;
Tracing infrastructure;
Dynamic debug library;
9P file system network protocol;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
Netfilter;
NET/ROM layer;
NFC subsystem;
NSH protocol;
Open vSwitch;
Phonet protocol;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
ALSA framework; (CVE-2024-26584, CVE-2023-52434, CVE-2024-36933, CVE-2024-36286, CVE-2024-36886, CVE-2024-38579, CVE-2022-48772, CVE-2024-39493, CVE-2024-38637, CVE-2024-36016, CVE-2023-52752, CVE-2024-38558, CVE-2024-39488, CVE-2024-38559, CVE-2024-36919, CVE-2024-36905, CVE-2024-39489, CVE-2024-39475, CVE-2021-47131, CVE-2024-26585, CVE-2024-38578, CVE-2024-38567, CVE-2024-38596, CVE-2024-38598, CVE-2024-36940, CVE-2024-38552, CVE-2024-37356, CVE-2024-38780, CVE-2024-38589, CVE-2024-36959, CVE-2024-27399, CVE-2024-36017, CVE-2024-38661, CVE-2024-36939, CVE-2024-36904, CVE-2024-36902, CVE-2024-38381, CVE-2024-36883, CVE-2024-37353, CVE-2024-38560, CVE-2024-39292, CVE-2024-36934, CVE-2024-38621, CVE-2024-38599, CVE-2024-36941, CVE-2022-48655, CVE-2024-26886, CVE-2024-36014, CVE-2024-38613, CVE-2024-27398, CVE-2024-27019, CVE-2024-36954, CVE-2024-39471, CVE-2024-26583, CVE-2024-35947, CVE-2024-31076, CVE-2024-38659, CVE-2024-38549, CVE-2024-38618, CVE-2024-38565, CVE-2024-27401, CVE-2022-48674, CVE-2024-38582, CVE-2024-38634, CVE-2024-38627, CVE-2024-39480, CVE-2024-36015, CVE-2023-52585, CVE-2024-36270, CVE-2024-26907, CVE-2024-38615, CVE-2024-38600, CVE-2024-38612, CVE-2024-36946, CVE-2024-39301, CVE-2024-38601, CVE-2024-38635, CVE-2024-33621, CVE-2024-36964, CVE-2024-38633, CVE-2024-39467, CVE-2024-38607, CVE-2024-36971, CVE-2024-35976, CVE-2024-38587, CVE-2023-52882, CVE-2024-36950, CVE-2024-39276, CVE-2024-36960, CVE-2024-38583)

Record: USN-6953-1
Updated: 2026-11-02

OSVUSN-6979-1 No score

linux-raspi-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
M68K architecture;
User-Mode Linux (UML);
x86 architecture;
Accessibility subsystem;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
FireWire subsystem;
ARM SCMI message protocol;
GPU drivers;
HW tracing;
InfiniBand drivers;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Pin controllers subsystem;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Greybus lights staging drivers;
TTY drivers;
Framebuffer layer;
Virtio drivers;
9P distributed file system;
eCrypt file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
Network file system client;
NILFS2 file system;
SMB network file system;
Mellanox drivers;
Kernel debugger infrastructure;
IRQ subsystem;
Tracing infrastructure;
Dynamic debug library;
9P file system network protocol;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
Netfilter;
NET/ROM layer;
NFC subsystem;
NSH protocol;
Open vSwitch;
Phonet protocol;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
ALSA framework; (CVE-2022-48674, CVE-2024-36016, CVE-2024-36934, CVE-2024-39471, CVE-2024-38381, CVE-2024-26584, CVE-2024-38635, CVE-2024-36902, CVE-2022-48772, CVE-2024-38600, CVE-2024-39475, CVE-2024-26886, CVE-2024-39301, CVE-2024-36919, CVE-2024-35947, CVE-2024-38559, CVE-2024-38637, CVE-2024-36014, CVE-2024-36960, CVE-2024-35976, CVE-2024-27399, CVE-2024-38607, CVE-2024-38558, CVE-2024-38578, CVE-2024-36015, CVE-2024-39488, CVE-2024-38780, CVE-2024-36940, CVE-2024-38621, CVE-2024-38659, CVE-2024-26585, CVE-2024-27019, CVE-2024-38615, CVE-2024-38661, CVE-2024-37353, CVE-2024-38549, CVE-2024-38579, CVE-2024-27401, CVE-2024-38589, CVE-2024-38565, CVE-2022-48655, CVE-2024-38567, CVE-2024-38587, CVE-2024-37356, CVE-2024-36959, CVE-2024-39493, CVE-2024-38627, CVE-2024-36939, CVE-2024-31076, CVE-2024-36971, CVE-2024-38560, CVE-2024-39467, CVE-2024-36286, CVE-2024-39480, CVE-2024-26907, CVE-2024-36017, CVE-2024-38634, CVE-2023-52585, CVE-2024-38582, CVE-2023-52752, CVE-2024-38583, CVE-2024-38618, CVE-2024-36946, CVE-2024-39292, CVE-2024-36950, CVE-2024-36886, CVE-2024-39489, CVE-2024-36933, CVE-2024-27398, CVE-2023-52434, CVE-2024-36905, CVE-2024-38596, CVE-2021-47131, CVE-2024-38601, CVE-2024-38552, CVE-2024-26583, CVE-2024-38633, CVE-2024-36964, CVE-2024-39276, CVE-2024-36270, CVE-2024-38613, CVE-2024-36904, CVE-2024-38598, CVE-2024-38612, CVE-2024-36941, CVE-2024-36954, CVE-2024-38599, CVE-2024-36883, CVE-2023-52882, CVE-2024-33621)

Record: USN-6979-1
Updated: 2026-11-02

OSVUSN-6999-1 No score

linux, linux-aws, linux-gcp, linux-gke, linux-ibm, linux-lowlatency, linux-oem-6.8, linux-oracle vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-40902)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
Null block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
FPGA Framework;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Mailbox framework;
Media drivers;
Microchip PCI driver;
VMware VMCI Driver;
Network drivers;
PCI subsystem;
x86 platform drivers;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Sonic Silicon Backplane drivers;
Greybus lights staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Watchdog drivers;
9P distributed file system;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Tracing file system;
Tracing infrastructure;
io_uring subsystem;
Core kernel;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
NFC subsystem;
Network traffic control;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
AppArmor security module;
Integrity Measurement Architecture(IMA) framework;
Landlock security;
Linux Security Modules (LSM) Framework;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
ALSA framework;
HD-audio driver;
SOF drivers;
KVM core; (CVE-2024-40911, CVE-2024-37356, CVE-2024-40935, CVE-2024-40944, CVE-2024-41003, CVE-2024-40990, CVE-2024-40952, CVE-2024-40940, CVE-2024-40930, CVE-2024-40985, CVE-2024-40941, CVE-2024-38630, CVE-2024-39466, CVE-2024-40933, CVE-2024-38624, CVE-2024-40924, CVE-2024-40945, CVE-2024-40899, CVE-2024-38622, CVE-2024-40979, CVE-2024-36484, CVE-2024-41004, CVE-2024-39474, CVE-2022-48772, CVE-2024-36244, CVE-2024-38664, CVE-2024-40925, CVE-2024-40980, CVE-2024-39480, CVE-2024-36270, CVE-2024-40936, CVE-2024-40904, CVE-2024-38635, CVE-2024-40927, CVE-2024-36481, CVE-2024-40929, CVE-2024-40958, CVE-2024-36978, CVE-2024-40992, CVE-2024-40908, CVE-2024-39504, CVE-2024-41001, CVE-2024-40967, CVE-2023-52884, CVE-2024-40997, CVE-2024-40903, CVE-2024-40913, CVE-2024-34030, CVE-2024-39473, CVE-2024-40966, CVE-2024-40951, CVE-2024-40902, CVE-2024-40982, CVE-2024-40923, CVE-2024-39467, CVE-2024-40910, CVE-2024-40909, CVE-2024-39463,…

Record: USN-6999-1
Updated: 2026-11-02

OSVUSN-6999-2 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
Null block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
FPGA Framework;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Mailbox framework;
Media drivers;
Microchip PCI driver;
VMware VMCI Driver;
Network drivers;
PCI subsystem;
x86 platform drivers;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Sonic Silicon Backplane drivers;
Greybus lights staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Watchdog drivers;
9P distributed file system;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Tracing file system;
IOMMU subsystem;
Tracing infrastructure;
io_uring subsystem;
Core kernel;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
NFC subsystem;
Network traffic control;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
AppArmor security module;
Integrity Measurement Architecture(IMA) framework;
Landlock security;
Linux Security Modules (LSM) Framework;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
ALSA framework;
HD-audio driver;
SOF drivers;
KVM core; (CVE-2024-40978, CVE-2024-39504, CVE-2024-39483, CVE-2024-36478, CVE-2024-40928, CVE-2024-36971, CVE-2024-40947, CVE-2024-31076, CVE-2024-40934, CVE-2024-40909, CVE-2024-40962, CVE-2024-38635, CVE-2024-38632, CVE-2024-40912, CVE-2024-40967, CVE-2024-39492, CVE-2024-40974, CVE-2024-39466, CVE-2024-40939, CVE-2024-40988, CVE-2024-40951, CVE-2024-41005, CVE-2024-40968, CVE-2024-39493, CVE-2024-40949, CVE-2022-48772, CVE-2024-40944, CVE-2024-40998, CVE-2024-39490, CVE-2024-39467, CVE-2024-42078, CVE-2024-40953, CVE-2024-40990, CVE-2024-40902, CVE-2024-39461, CVE-2024-39301, CVE-2024-36978, CVE-2024-39475, CVE-2024-39496, CVE-2024-40901, CVE-2024-40985, CVE-2024-33621, CVE-2024-38663, CVE-2024-39497, CVE-2024-40937, CVE-2024-40941, CVE-2024-40987, CVE-2024-40918, CVE-2024-32936, CVE-2024-40999, CVE-2024-40938, CVE-2024-39488, CVE-2024-39510, CVE-2024-40924, CVE-2024-38661, CVE-2024-40989, CVE-2024-39509,…

Record: USN-6999-2
Updated: 2026-11-02

OSVUSN-7004-1 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
Null block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
FPGA Framework;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Mailbox framework;
Media drivers;
Microchip PCI driver;
VMware VMCI Driver;
Network drivers;
PCI subsystem;
x86 platform drivers;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Sonic Silicon Backplane drivers;
Greybus lights staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Watchdog drivers;
9P distributed file system;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Tracing file system;
IOMMU subsystem;
Tracing infrastructure;
io_uring subsystem;
Core kernel;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
NFC subsystem;
Network traffic control;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
AppArmor security module;
Integrity Measurement Architecture(IMA) framework;
Landlock security;
Linux Security Modules (LSM) Framework;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
ALSA framework;
HD-audio driver;
SOF drivers;
KVM core; (CVE-2024-36270, CVE-2024-38627, CVE-2024-39508, CVE-2024-41001, CVE-2024-38634, CVE-2024-40979, CVE-2024-40903, CVE-2024-34030, CVE-2024-38621, CVE-2024-34027, CVE-2024-39504, CVE-2024-38385, CVE-2024-36288, CVE-2024-39301, CVE-2024-38628, CVE-2024-42270, CVE-2024-39507, CVE-2024-36286, CVE-2024-40960, CVE-2024-36479, CVE-2024-41002, CVE-2024-36974, CVE-2024-40943, CVE-2024-40976, CVE-2024-38662, CVE-2024-40995, CVE-2024-39497, CVE-2024-31076, CVE-2024-39371, CVE-2024-40983, CVE-2024-40985, CVE-2024-38618, CVE-2024-40914, CVE-2024-40989, CVE-2024-40973, CVE-2024-38663, CVE-2024-39463, CVE-2024-38633, CVE-2024-36978, CVE-2024-40970, CVE-2024-40932, CVE-2024-39480, CVE-2024-39471, CVE-2024-40962, CVE-2024-40986, CVE-2024-40937, CVE-2024-39469, CVE-2024-40904, CVE-2024-39466, CVE-2024-38388, CVE-2024-39494, CVE-2024-41004, CVE-2024-38381, CVE-2022-48772, CVE-2024-33847, CVE-2024-40969, CVE-2024-40957,…

Record: USN-7004-1
Updated: 2026-11-02

OSVUSN-7005-1 No score

linux-nvidia, linux-nvidia-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
Null block device driver;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
FPGA Framework;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Mailbox framework;
Media drivers;
Microchip PCI driver;
VMware VMCI Driver;
Network drivers;
PCI subsystem;
x86 platform drivers;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Sonic Silicon Backplane drivers;
Greybus lights staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Watchdog drivers;
9P distributed file system;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Tracing file system;
IOMMU subsystem;
Tracing infrastructure;
io_uring subsystem;
Core kernel;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
NFC subsystem;
Network traffic control;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
AppArmor security module;
Integrity Measurement Architecture(IMA) framework;
Landlock security;
Linux Security Modules (LSM) Framework;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
ALSA framework;
HD-audio driver;
SOF drivers;
KVM core; (CVE-2024-40963, CVE-2024-40994, CVE-2024-36481, CVE-2024-39301, CVE-2024-38390, CVE-2024-40976, CVE-2024-40934, CVE-2024-40902, CVE-2024-40916, CVE-2024-39298, CVE-2024-38659, CVE-2024-38384, CVE-2024-38635, CVE-2024-39494, CVE-2024-40926, CVE-2024-40956, CVE-2024-40948, CVE-2024-40920, CVE-2024-38624, CVE-2024-39498, CVE-2024-38780, CVE-2024-39503, CVE-2024-40919, CVE-2024-39505, CVE-2024-40988, CVE-2024-36972, CVE-2024-36974, CVE-2024-39495, CVE-2024-40992, CVE-2024-36015, CVE-2024-38618, CVE-2024-39478, CVE-2024-40975, CVE-2024-39507, CVE-2024-39479, CVE-2024-39291, CVE-2024-40925, CVE-2024-39493, CVE-2024-41005, CVE-2024-40932, CVE-2024-39467, CVE-2024-40973, CVE-2024-38634, CVE-2024-34027, CVE-2024-39462, CVE-2024-40949, CVE-2024-40908, CVE-2024-40929, CVE-2024-38662, CVE-2024-39489, CVE-2024-40953, CVE-2024-38306, CVE-2024-40915, CVE-2024-39470, CVE-2024-40969, CVE-2024-31076, CVE-2024-38663, CVE-2024-38629,…

Record: USN-7005-1
Updated: 2026-11-02

OSVUSN-7005-2 No score

linux-nvidia-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
Null block device driver;
Character device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
FPGA Framework;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Mailbox framework;
Media drivers;
Microchip PCI driver;
VMware VMCI Driver;
Network drivers;
PCI subsystem;
x86 platform drivers;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Sonic Silicon Backplane drivers;
Greybus lights staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Watchdog drivers;
9P distributed file system;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Tracing file system;
IOMMU subsystem;
Tracing infrastructure;
io_uring subsystem;
Core kernel;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
NFC subsystem;
Network traffic control;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
AppArmor security module;
Integrity Measurement Architecture(IMA) framework;
Landlock security;
Linux Security Modules (LSM) Framework;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
ALSA framework;
HD-audio driver;
SOF drivers;
KVM core; (CVE-2024-39465, CVE-2024-39492, CVE-2024-40976, CVE-2024-40956, CVE-2024-39480, CVE-2024-39467, CVE-2024-39478, CVE-2024-39489, CVE-2024-41003, CVE-2024-39510, CVE-2024-39498, CVE-2024-40994, CVE-2024-40937, CVE-2024-39488, CVE-2024-40990, CVE-2024-40955, CVE-2024-40905, CVE-2024-39496, CVE-2024-36478, CVE-2024-40920, CVE-2024-40954, CVE-2024-32936, CVE-2024-40919, CVE-2024-40947, CVE-2024-40975, CVE-2024-39481, CVE-2024-40983, CVE-2024-39276, CVE-2024-37026, CVE-2024-40980, CVE-2022-48772, CVE-2024-39470, CVE-2024-40951, CVE-2024-40927, CVE-2024-38635, CVE-2024-40974, CVE-2024-39468, CVE-2024-38384, CVE-2024-37354, CVE-2024-40992, CVE-2024-40934, CVE-2024-40925, CVE-2024-40935, CVE-2024-39473, CVE-2024-40910, CVE-2024-40979, CVE-2024-39501, CVE-2024-38628, CVE-2024-39298, CVE-2024-40909, CVE-2024-38629, CVE-2024-41000, CVE-2024-40989, CVE-2024-40924, CVE-2024-40943, CVE-2024-41006, CVE-2024-38621, CVE-2024-39462,…

Record: USN-7005-2
Updated: 2026-11-02

OSVUSN-7007-1 No score

linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-oracle, linux-raspi vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
M68K architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Accessibility subsystem;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
Bluetooth drivers;
Character device driver;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FPGA Framework;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Pin controllers subsystem;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Greybus lights staging drivers;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
eCrypt file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
IOMMU subsystem;
Memory management;
Netfilter;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Tracing infrastructure;
9P file system network protocol;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
NFC subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
ALSA framework;
SoC Audio for Freescale CPUs drivers;
Kirkwood ASoC drivers; (CVE-2024-40961, CVE-2024-38597, CVE-2024-39468, CVE-2024-36978, CVE-2024-42161, CVE-2024-38573, CVE-2024-40905, CVE-2024-42094, CVE-2024-36894, CVE-2024-40914, CVE-2024-40956, CVE-2024-42106, CVE-2024-38610, CVE-2024-39506, CVE-2024-42098, CVE-2024-42232, CVE-2024-38590, CVE-2024-39488, CVE-2024-42127, CVE-2024-41006, CVE-2024-42131, CVE-2024-41005, CVE-2024-40963, CVE-2024-38559, CVE-2024-42130, CVE-2024-37078, CVE-2024-42082, CVE-2024-40984, CVE-2024-38560, CVE-2024-42090, CVE-2024-33621, CVE-2024-40974, CVE-2024-42115, CVE-2024-40971, CVE-2024-40943, CVE-2024-38627, CVE-2024-38548, CVE-2024-40934, CVE-2024-38579, CVE-2024-38558, CVE-2024-39495, CVE-2023-52884, CVE-2024-42225, CVE-2024-38659, CVE-2024-40927, CVE-2024-40967, CVE-2024-38624, CVE-2024-38583, CVE-2024-41047, CVE-2024-38623, CVE-2024-39509, CVE-2024-36971, CVE-2024-42120, CVE-2024-38589, CVE-2024-36270, CVE-2024-42105, CVE-2024-36032, CVE-2024-42101, CVE-2024-40908,…

Record: USN-7007-1
Updated: 2026-11-02

OSVUSN-7007-2 No score

linux-ibm-5.15, linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
M68K architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Accessibility subsystem;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
Bluetooth drivers;
Character device driver;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FPGA Framework;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Pin controllers subsystem;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Greybus lights staging drivers;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
eCrypt file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
IOMMU subsystem;
Memory management;
Netfilter;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Tracing infrastructure;
9P file system network protocol;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
NFC subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
ALSA framework;
SoC Audio for Freescale CPUs drivers;
Kirkwood ASoC drivers; (CVE-2024-42140, CVE-2024-38580, CVE-2024-38555, CVE-2024-38591, CVE-2024-40942, CVE-2024-42130, CVE-2024-41095, CVE-2024-40994, CVE-2024-39469, CVE-2024-38610, CVE-2024-42097, CVE-2024-42137, CVE-2024-31076, CVE-2024-38552, CVE-2024-36489, CVE-2024-40983, CVE-2024-40908, CVE-2024-39493, CVE-2024-40970, CVE-2024-40901, CVE-2024-38567, CVE-2024-38599, CVE-2024-38605, CVE-2024-42119, CVE-2024-38590, CVE-2024-38558, CVE-2023-52884, CVE-2024-41000, CVE-2024-42101, CVE-2024-40943, CVE-2024-39507, CVE-2024-42115, CVE-2024-40968, CVE-2024-42095, CVE-2024-41034, CVE-2024-38618, CVE-2024-38633, CVE-2024-40904, CVE-2024-42070, CVE-2024-38583, CVE-2024-39471, CVE-2024-38578, CVE-2024-38637, CVE-2024-40987, CVE-2024-39506, CVE-2024-39482, CVE-2024-42124, CVE-2024-40981, CVE-2024-35927, CVE-2022-48772, CVE-2024-38588, CVE-2023-52887, CVE-2024-40941, CVE-2024-34027, CVE-2024-38627, CVE-2024-42106, CVE-2024-40927, CVE-2024-38559, CVE-2024-39499,…

Record: USN-7007-2
Updated: 2026-11-02

OSVUSN-7007-3 No score

linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
M68K architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Accessibility subsystem;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
Bluetooth drivers;
Character device driver;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FPGA Framework;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Pin controllers subsystem;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Greybus lights staging drivers;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
eCrypt file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
IOMMU subsystem;
Memory management;
Netfilter;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Tracing infrastructure;
9P file system network protocol;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
NFC subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
ALSA framework;
SoC Audio for Freescale CPUs drivers;
Kirkwood ASoC drivers; (CVE-2024-42105, CVE-2024-41002, CVE-2024-38558, CVE-2023-52887, CVE-2024-39487, CVE-2024-39276, CVE-2024-42077, CVE-2024-39493, CVE-2024-40934, CVE-2024-39277, CVE-2024-42087, CVE-2024-38598, CVE-2024-38618, CVE-2024-40981, CVE-2024-42127, CVE-2024-38607, CVE-2024-38586, CVE-2024-40901, CVE-2024-40916, CVE-2024-42247, CVE-2024-42093, CVE-2024-36489, CVE-2024-38615, CVE-2024-42120, CVE-2024-38567, CVE-2024-40957, CVE-2024-39501, CVE-2024-42140, CVE-2024-33621, CVE-2024-38573, CVE-2023-52884, CVE-2024-39468, CVE-2024-41092, CVE-2024-40931, CVE-2024-42145, CVE-2024-39490, CVE-2024-38555, CVE-2024-42086, CVE-2024-38597, CVE-2024-40956, CVE-2024-42223, CVE-2024-36894, CVE-2024-40961, CVE-2024-42076, CVE-2024-40994, CVE-2024-38619, CVE-2024-39467, CVE-2024-39466, CVE-2022-48772, CVE-2024-39507, CVE-2024-40914, CVE-2024-41046, CVE-2024-42094, CVE-2024-38591, CVE-2024-42098, CVE-2024-41027, CVE-2024-41040, CVE-2024-41089, CVE-2024-40945,…

Record: USN-7007-3
Updated: 2026-11-02

OSVUSN-7008-1 No score

linux-lowlatency-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
Null block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
FPGA Framework;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Mailbox framework;
Media drivers;
Microchip PCI driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
PCI subsystem;
x86 platform drivers;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Sonic Silicon Backplane drivers;
Greybus lights staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Watchdog drivers;
9P distributed file system;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Tracing file system;
IOMMU subsystem;
Tracing infrastructure;
io_uring subsystem;
Core kernel;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
NFC subsystem;
Network traffic control;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
AppArmor security module;
Integrity Measurement Architecture(IMA) framework;
Landlock security;
Linux Security Modules (LSM) Framework;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
ALSA framework;
HD-audio driver;
SOF drivers;
KVM core; (CVE-2024-38623, CVE-2024-38662, CVE-2024-39484, CVE-2024-42148, CVE-2024-39493, CVE-2024-38637, CVE-2024-40962, CVE-2024-36281, CVE-2024-40922, CVE-2024-40958, CVE-2024-40920, CVE-2024-40986, CVE-2024-40929, CVE-2024-40967, CVE-2024-39296, CVE-2024-40900, CVE-2024-40995, CVE-2024-40974, CVE-2024-40942, CVE-2024-39464, CVE-2024-40916, CVE-2024-40952, CVE-2024-40997, CVE-2024-41004, CVE-2024-40970, CVE-2024-40911, CVE-2024-40972, CVE-2024-36477, CVE-2024-40996, CVE-2024-40988, CVE-2024-38619, CVE-2024-40998, CVE-2024-38627, CVE-2024-36971, CVE-2024-37021, CVE-2024-40989, CVE-2024-40947, CVE-2024-40957, CVE-2024-39508, CVE-2024-41005, CVE-2024-40931, CVE-2024-34777, CVE-2024-38633, CVE-2024-38663, CVE-2024-36288, CVE-2024-40955, CVE-2024-40973, CVE-2024-39483, CVE-2024-38388, CVE-2024-40976, CVE-2024-38622, CVE-2024-40915, CVE-2024-38661, CVE-2024-38306,…

Record: USN-7008-1
Updated: 2026-11-02

OSVUSN-7009-1 No score

linux-azure, linux-azure-5.15, linux-azure-fde vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
M68K architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Accessibility subsystem;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
Bluetooth drivers;
Character device driver;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FPGA Framework;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Pin controllers subsystem;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Greybus lights staging drivers;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
eCrypt file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
IOMMU subsystem;
Memory management;
Netfilter;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Tracing infrastructure;
9P file system network protocol;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
NFC subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
ALSA framework;
SoC Audio for Freescale CPUs drivers;
Kirkwood ASoC drivers; (CVE-2024-38613, CVE-2024-42096, CVE-2024-40908, CVE-2024-42137, CVE-2024-38590, CVE-2024-41044, CVE-2024-39480, CVE-2024-39469, CVE-2024-39471, CVE-2024-42089, CVE-2024-38588, CVE-2024-41092, CVE-2024-42120, CVE-2024-40901, CVE-2024-40981, CVE-2024-42127, CVE-2024-40932, CVE-2024-39475, CVE-2024-40957, CVE-2024-39501, CVE-2024-42090, CVE-2024-40904, CVE-2024-40978, CVE-2022-48772, CVE-2024-40934, CVE-2024-38548, CVE-2024-41005, CVE-2024-36489, CVE-2024-36978, CVE-2024-38573, CVE-2024-42106, CVE-2024-42104, CVE-2024-42085, CVE-2024-38621, CVE-2024-42098, CVE-2024-38662, CVE-2024-38587, CVE-2024-41089, CVE-2024-42095, CVE-2024-40916, CVE-2024-39487, CVE-2024-42229, CVE-2023-52884, CVE-2024-40974, CVE-2024-40980, CVE-2024-42225, CVE-2024-39502, CVE-2024-37356, CVE-2024-39488, CVE-2024-40912, CVE-2024-39507, CVE-2024-38591, CVE-2024-31076, CVE-2024-40984, CVE-2024-39500, CVE-2024-38582, CVE-2024-34027, CVE-2024-36270, CVE-2024-42076,…

Record: USN-7009-1
Updated: 2026-11-02

OSVUSN-7009-2 No score

linux-azure-fde-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
M68K architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Accessibility subsystem;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
Bluetooth drivers;
Character device driver;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FPGA Framework;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Pin controllers subsystem;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Greybus lights staging drivers;
Media staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
DesignWare USB3 driver;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
eCrypt file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
IOMMU subsystem;
Memory management;
Netfilter;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Tracing infrastructure;
9P file system network protocol;
B.A.T.M.A.N. meshing protocol;
CAN network layer;
Ceph Core library;
Networking core;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
NFC subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
ALSA framework;
SoC Audio for Freescale CPUs drivers;
Kirkwood ASoC drivers; (CVE-2024-42076, CVE-2024-40994, CVE-2024-40932, CVE-2024-41000, CVE-2024-42224, CVE-2024-38633, CVE-2024-40954, CVE-2024-36270, CVE-2024-38623, CVE-2024-38549, CVE-2024-42225, CVE-2024-42085, CVE-2024-42157, CVE-2024-42229, CVE-2024-42109, CVE-2024-41040, CVE-2024-38607, CVE-2024-39493, CVE-2024-38546, CVE-2024-41046, CVE-2024-38567, CVE-2024-42092, CVE-2024-39501, CVE-2024-41005, CVE-2024-42223, CVE-2024-39480, CVE-2024-38571, CVE-2024-41048, CVE-2024-38605, CVE-2024-42094, CVE-2024-38598, CVE-2024-38559, CVE-2024-38558, CVE-2024-40931, CVE-2024-40942, CVE-2024-39495, CVE-2024-40981, CVE-2024-40911, CVE-2024-42148, CVE-2024-33621, CVE-2024-39502, CVE-2024-41095, CVE-2024-40960, CVE-2024-36286, CVE-2024-42232, CVE-2024-42130, CVE-2024-42154, CVE-2024-41087, CVE-2024-41004, CVE-2024-39277, CVE-2024-38560, CVE-2024-36978, CVE-2024-42089, CVE-2024-37356, CVE-2024-38547, CVE-2024-38381, CVE-2024-36015, CVE-2024-38548, CVE-2024-42120,…

Record: USN-7009-2
Updated: 2026-11-02

OSVUSN-7019-1 No score

linux-xilinx-zynqmp vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-38096)

Gui-Dong Han discovered that the software RAID driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. A privileged attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-23307)

It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CVE-2024-24859)

Bai Jiaju discovered that the Xceive XC4000 silicon tuner device driver in the Linux kernel contained a race condition, leading to an integer overflow vulnerability. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-24861)

Chenyuan Yang discovered that the Unsorted Block Images (UBI) flash device volume management subsystem did not properly validate logical eraseblock sizes in certain situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2024-25739)

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious #VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to expose sensitive information or possibly execute arbitrary code in the trusted execution environment. (CVE-2024-25742)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
M68K architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Accessibility subsystem;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
Bluetooth drivers;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
FireWire subsystem;
FPGA Framework;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
IRQ chip drivers;
Macintosh device drivers;
Multiple devices driver;
Media drivers;
EEPROM drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Pin controllers subsystem;
PTP clock framework;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
Freescale SoC…

Record: USN-7019-1
Updated: 2026-11-02

OSVUSN-7029-1 No score

linux-hwe-6.8

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
Null block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
FPGA Framework;
GPU drivers;
Greybus drivers;
HID subsystem;
HW tracing;
I2C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
Mailbox framework;
Media drivers;
Microchip PCI driver;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
PCI subsystem;
x86 platform drivers;
PTP clock framework;
S/390 drivers;
SCSI drivers;
SoundWire subsystem;
Sonic Silicon Backplane drivers;
Greybus lights staging drivers;
Thermal drivers;
TTY drivers;
USB subsystem;
VFIO drivers;
Framebuffer layer;
Watchdog drivers;
9P distributed file system;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Tracing file system;
IOMMU subsystem;
Tracing infrastructure;
io_uring subsystem;
Core kernel;
BPF subsystem;
Kernel debugger infrastructure;
DMA mapping infrastructure;
IRQ subsystem;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
NFC subsystem;
Network traffic control;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Unix domain sockets;
Wireless networking;
XFRM subsystem;
AppArmor security module;
Integrity Measurement Architecture(IMA) framework;
Landlock security;
Linux Security Modules (LSM) Framework;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
ALSA framework;
HD-audio driver;
SOF drivers;
KVM core; (CVE-2024-39498, CVE-2024-33847, CVE-2024-39510, CVE-2024-39462, CVE-2024-40930, CVE-2024-38634, CVE-2024-40962, CVE-2024-37078, CVE-2024-39371, CVE-2024-40972, CVE-2024-41002, CVE-2024-40920, CVE-2024-40982, CVE-2024-40915, CVE-2024-40942, CVE-2024-42154, CVE-2024-40937, CVE-2024-40967, CVE-2024-40909, CVE-2024-36244, CVE-2024-33619, CVE-2024-39277, CVE-2024-40900, CVE-2024-38661, CVE-2024-40974, CVE-2024-38618, CVE-2024-32936, CVE-2024-40906, CVE-2024-40919, CVE-2024-39470, CVE-2024-38390, CVE-2024-40966, CVE-2024-39467, CVE-2024-40938, CVE-2024-39471, CVE-2024-39485, CVE-2024-39495, CVE-2024-39492, CVE-2024-39475, CVE-2024-40953, CVE-2024-40939, CVE-2024-39493, CVE-2024-38637, CVE-2024-40945, CVE-2024-41006, CVE-2024-39461, CVE-2024-40948, CVE-2024-40916, CVE-2024-40925, CVE-2024-40956, CVE-2024-40970, CVE-2024-40912, CVE-2024-33621, CVE-2024-40989,…

Record: USN-7029-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` Azure Linux:3	before 6.6.139.1-1	6.6.139.1-1
`linux-lts` Alpaquita:23	6.1.92-r0 up to 6.1.97-r0	6.1.97-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.7.els20	7.0.0-284.1101.el9_2.tuxcare.7.els20
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-core` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els20	2:1.0.0-2.el9_2.tuxcare.7.els20
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els20	2:1.0.0-2.el9_2.tuxcare.7.els20
`libbpf-static` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els20	2:1.0.0-2.el9_2.tuxcare.7.els20
`perf` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`python3-perf` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`rtla` TuxCare:AlmaLinux:9.2 From an advisory covering 22 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els20	5.14.0-284.1101.el9_2.tuxcare.7.els20
`bpftool` TuxCare:CentOS-Stream:8 From an advisory covering 62 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els14	4.18.0-553.6.1.el8_10.tuxcare.els14
`kernel` TuxCare:CentOS-Stream:8 From an advisory covering 62 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els14	4.18.0-553.6.1.el8_10.tuxcare.els14
`kernel-core` TuxCare:CentOS-Stream:8 From an advisory covering 62 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els14	4.18.0-553.6.1.el8_10.tuxcare.els14
`kernel-cross-headers` TuxCare:CentOS-Stream:8 From an advisory covering 62 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els14	4.18.0-553.6.1.el8_10.tuxcare.els14
`kernel-debug` TuxCare:CentOS-Stream:8 From an advisory covering 62 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els14	4.18.0-553.6.1.el8_10.tuxcare.els14
`kernel-debug-core` TuxCare:CentOS-Stream:8 From an advisory covering 62 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els14	4.18.0-553.6.1.el8_10.tuxcare.els14
`kernel-debug-devel` TuxCare:CentOS-Stream:8 From an advisory covering 62 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els14	4.18.0-553.6.1.el8_10.tuxcare.els14
`kernel-debug-modules` TuxCare:CentOS-Stream:8 From an advisory covering 62 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els14	4.18.0-553.6.1.el8_10.tuxcare.els14
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 62 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els14	4.18.0-553.6.1.el8_10.tuxcare.els14
`Kernel` Linux	before 5.4.278, 5.5.0 up to 5.10.219, 5.11.0 up to 5.15.161, 5.16.0 up to 6.1.93, 6.2.0 up to 6.6.33, 6.7.0 up to 6.9.4	5.4.2785.10.2195.15.1616.1.936.6.336.9.4
`linux` Debian:12	before 6.1.94-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 18 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1~bpo11+1	6.1.94-1
`linux` Debian:13	before 6.9.7-1	6.9.7-1
`linux` Debian:14	before 6.9.7-1	6.9.7-1
`linux` Debian:11 From an advisory covering 124 CVEs	before 5.10.221-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 36 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.221-1
`kernel` Mageia:9 From an advisory covering 320 CVEs	before 6.6.37-1.mga9	6.6.37-1.mga9
`kmod-xtables-addons` Mageia:9 From an advisory covering 320 CVEs	before 3.24-59.mga9	3.24-59.mga9
`kmod-virtualbox` Mageia:9 From an advisory covering 320 CVEs	before 7.0.18-50.mga9	7.0.18-50.mga9
`dwarves` Mageia:9 From an advisory covering 320 CVEs	before 1.27-1.mga9	1.27-1.mga9
`kernel-linus` Mageia:9 From an advisory covering 320 CVEs	before 6.6.37-1.mga9	6.6.37-1.mga9
`kernel` openEuler:24.03-LTS From an advisory covering 134 CVEs	before 6.6.0-39.0.0.47.oe2403	6.6.0-39.0.0.47.oe2403
`kernel` openEuler:22.03-LTS-SP4 From an advisory covering 62 CVEs	before 5.10.0-234.0.0.133.oe2203sp4	5.10.0-234.0.0.133.oe2203sp4
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 62 CVEs	before 5.10.0-234.0.0.136.oe2203sp3	5.10.0-234.0.0.136.oe2203sp3
`kernel` openEuler:22.03-LTS-SP1 From an advisory covering 74 CVEs	before 5.10.0-136.99.0.180.oe2203sp1	5.10.0-136.99.0.180.oe2203sp1
`bpftool-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`bpftool` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`bpftool-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-livepatch-SLE15-SP5-RT_Update_17` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 249 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2.150600.12.4.3	6.4.0-150600.23.14.2.150600.12.4.3
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-livepatch-SLE15-SP6_Update_2` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 285 CVEs	before 1-150600.13.3.2	1-150600.13.3.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.1	6.4.0-150600.23.14.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2.150600.12.4.3	6.4.0-150600.23.14.2.150600.12.4.3
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 285 CVEs	before 6.4.0-150600.23.14.2	6.4.0-150600.23.14.2
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.1	6.4.0-150600.8.8.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.2	6.4.0-150600.8.8.2
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 402 CVEs	before 6.4.0-150600.8.8.1	6.4.0-150600.8.8.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.2	5.14.21-150500.55.73.2
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-livepatch-SLE15-SP5_Update_17` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 531 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` openSUSE:Leap Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` openSUSE:Leap Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.2	5.14.21-150500.55.73.2
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-livepatch-SLE15-SP6-RT_Update_1` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 783 CVEs	before 1-150600.1.5.1	1-150600.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 783 CVEs	before 6.4.0-150600.10.5.1	6.4.0-150600.10.5.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-17.1.1.51	6.4.0-17.1.1.51
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 848 CVEs	before 6.4.0-18.1	6.4.0-18.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 826 CVEs	before 6.4.0-9.1	6.4.0-9.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 826 CVEs	before 6.4.0-9.1	6.4.0-9.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1069.75~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 39 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.1	5.15.0-1069.75~20.04.1
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1072.81~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 41 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.1	5.15.0-1072.81~20.04.1
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1068.76~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 38 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.1	5.15.0-1068.76~20.04.1
`linux-gkeop` Ubuntu:20.04:LTS	before 5.4.0-1097.101, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	5.4.0-1097.101
`linux-gkeop-5.15` Ubuntu:20.04:LTS	before 5.15.0-1052.59~20.04.1, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 36 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.1	5.15.0-1052.59~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-121.131~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 39 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.1	5.15.0-121.131~20.04.1
`linux-ibm-5.15` Ubuntu:20.04:LTS	before 5.15.0-1062.65~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 20 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.1	5.15.0-1062.65~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1064.70~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 30 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.1	5.15.0-1064.70~20.04.1
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-121.131~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 39 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.1	5.15.0-121.131~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:20.04:LTS	before 5.15.0-1030.30~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 8 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.1	5.15.0-1030.30~20.04.1
`linux-oracle-5.15` Ubuntu:20.04:LTS	before 5.15.0-1067.73~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 37 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.1	5.15.0-1067.73~20.04.1
`linux-riscv-5.15` Ubuntu:20.04:LTS	before 5.15.0-1065.69~20.04.1, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 37 moreShow less 5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.15.15.0-1061.65~20.04.15.15.0-1062.66~20.04.15.15.0-1063.67~20.04.15.15.0-1064.68~20.04.1	5.15.0-1065.69~20.04.1
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux` Ubuntu:22.04:LTS	before 5.15.0-121.131, plus listed versions 5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23 Show 45 moreShow less 5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115	5.15.0-121.131
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws` Ubuntu:22.04:LTS	before 5.15.0-1069.75, plus listed versions 5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7 Show 45 moreShow less 5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71	5.15.0-1069.75
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	before 6.8.0-1015.16~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1	6.8.0-1015.16~22.04.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-38635 is a high vulnerability (CVSS 7.8) in Linux, published June 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. Fixed in kernel 6.6.139.1-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 277 package rows, 34 versions, 6,234 references and the rest of 28 source descriptions. The JSON record has them.