CVE-2024-41012
filelock: Remove locks reliably when fcntl/close race is detected
In the Linux kernel, the following vulnerability has been resolved:
filelock: Remove locks reliably when fcntl/close race is detected
When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait(). However, LSMs can allow the first do_lock_file_wait() that created the lock while denying the second do_lock_file_wait() that tries to remove the lock. Separately, posix_lock_file() could also fail to remove a lock due to GFP_KERNEL allocation failure (when splitting a range in the middle).
After the bug has been triggered, use-after-free reads will occur in lock_get_status() when userspace reads /proc/locks. This can likely be used to read arbitrary kernel memory, but can't corrupt kernel memory.
Fix it by calling locks_remove_posix() instead, which is designed to reliably get rid of POSIX locks associated with the given file and files_struct and is also used by filp_flush().
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.8
filelock: Remove locks reliably when fcntl/close race is detected
In the Linux kernel, the following vulnerability has been resolved:
filelock: Remove locks reliably when fcntl/close race is detected
When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait(). However, LSMs can allow the first do_lock_file_wait() that created the lock while denying the second do_lock_file_wait() that tries to remove the lock. Separately, posix_lock_file() could also fail to remove a lock due to GFP_KERNEL allocation failure (when splitting a range in the middle).
After the bug has been triggered, use-after-free reads will occur in lock_get_status() when userspace reads /proc/locks. This can likely be used to read arbitrary kernel memory, but can't corrupt kernel memory.
Fix it by calling locks_remove_posix() instead, which is designed to reliably get rid of POSIX locks associated with the given file and files_struct and is also used by filp_flush().
- Record
CVE-2024-41012- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2024-39361
7.8
In the Linux kernel, the following vulnerability has been resolved:
filelock: Remove locks reliably when fcntl/close race is detected
When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait(). However, LSMs can allow the first do_lock_file_wait() that created the lock while denying the second do_lock_file_wait() that tries to remove the lock. Separately, posix_lock_file() could also fail to remove a lock due to GFP_KERNEL allocation failure (when splitting a range in the middle).
After the bug has been triggered, use-after-free reads will occur in lock_get_status() when userspace reads /proc/locks. This can likely be used to read arbitrary kernel memory, but can't corrupt kernel memory.
Fix it by calling locks_remove_posix() instead, which is designed to reliably get rid of POSIX locks associated with the given file and files_struct and is also used by filp_flush().
- Record
EUVD-2024-39361- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-c77m-wh63-vhch
6.3
In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks...
In the Linux kernel, the following vulnerability has been resolved:
filelock: Remove locks reliably when fcntl/close race is detected
When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait(). However, LSMs can allow the first do_lock_file_wait() that created the lock while denying the second do_lock_file_wait() that tries to remove the lock. Separately, posix_lock_file() could also fail to remove a lock due to GFP_KERNEL allocation failure (when splitting a range in the middle).
After the bug has been triggered, use-after-free reads will occur in lock_get_status() when userspace reads /proc/locks. This can likely be used to read arbitrary kernel memory, but can't corrupt kernel memory.
Fix it by calling locks_remove_posix() instead, which is designed to reliably get rid of POSIX locks associated with the given file and files_struct and is also used by filp_flush().
- Record
GHSA-c77m-wh63-vhch- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
NVD
7.8
In the Linux kernel, the following vulnerability has been resolved:
filelock: Remove locks reliably when fcntl/close race is detected
When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait(). However, LSMs can allow the first do_lock_file_wait() that created the lock while denying the second do_lock_file_wait() that tries to remove the lock. Separately, posix_lock_file() could also fail to remove a lock due to GFP_KERNEL allocation failure (when splitting a range in the middle).
After the bug has been triggered, use-after-free reads will occur in lock_get_status() when userspace reads /proc/locks. This can likely be used to read arbitrary kernel memory, but can't corrupt kernel memory.
Fix it by calling locks_remove_posix() instead, which is designed to reliably get rid of POSIX locks associated with the given file and files_struct and is also used by filp_flush().
- Record
CVE-2024-41012- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSVBELL-CVE-2024-41012
6.3
- Record
BELL-CVE-2024-41012- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSV
7.8
filelock: Remove locks reliably when fcntl/close race is detected
In the Linux kernel, the following vulnerability has been resolved:
filelock: Remove locks reliably when fcntl/close race is detected
When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait(). However, LSMs can allow the first do_lock_file_wait() that created the lock while denying the second do_lock_file_wait() that tries to remove the lock. Separately, posix_lock_file() could also fail to remove a lock due to GFP_KERNEL allocation failure (when splitting a range in the middle).
After the bug has been triggered, use-after-free reads will occur in lock_get_status() when userspace reads /proc/locks. This can likely be used to read arbitrary kernel memory, but can't corrupt kernel memory.
Fix it by calling locks_remove_posix() instead, which is designed to reliably get rid of POSIX locks associated with the given file and files_struct and is also used by filp_flush().
- Record
CVE-2024-41012- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 46 moreShow less
OSVDEBIAN-CVE-2024-41012
6.3
In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close race is detected When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait(). However, LSMs can allow the first do_lock_file_wait() that created the lock while denying the second do_lock_file_wait() that tries to remove the lock. Separately, posix_lock_file() could also fail to remove a lock due to GFP_KERNEL allocation failure (when splitting a range in the middle). After the bug has been triggered, use-after-free reads will occur in lock_get_status() when userspace reads /proc/locks. This can likely be used to read arbitrary kernel memory, but can't corrupt kernel memory. Fix it by calling locks_remove_posix() instead, which is designed to reliably get rid of POSIX locks associated with the given file and files_struct and is also used by filp_flush().
- Record
DEBIAN-CVE-2024-41012- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2024-1992
7.8
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
USB: core: Make do_proc_control() and do_proc_bulk() killable
The USBDEVFS_CONTROL and USBDEVFS_BULK ioctls invoke usb_start_wait_urb(), which contains an uninterruptible wait with a user-specified timeout value. If timeout value is very large and the device being accessed does not respond in a reasonable amount of time, the kernel will complain about "Task X blocked for more than N seconds", as found in testing by syzbot:
INFO: task syz-executor.0:8700 blocked for more than 143 seconds. Not tainted 5.14.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:23192 pid: 8700 ppid: 8455 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4681 [inline] __schedule+0xc07/0x11f0 kernel/sched/core.c:5938 schedule+0x14b/0x210 kernel/sched/core.c:6017 schedule_timeout+0x98/0x2f0 kernel/time/timer.c:1857 do_wait_for_common+0x2da/0x480 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion_timeout+0x46/0x60 kernel/sched/completion.c:157 usb_start_wait_urb+0x167/0x550 drivers/usb/core/message.c:63 do_proc_bulk+0x978/0x1080 drivers/usb/core/devio.c:1236 proc_bulk drivers/usb/core/devio.c:1273 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2547 [inline] usbdev_ioctl+0x3441/0x6b10 drivers/usb/core/devio.c:2713 ...
To fix this problem, this patch replaces usbfs's calls to usb_control_msg() and usb_bulk_msg() with special-purpose code that does essentially the same thing (as recommended in the comment for usb_start_wait_urb()), except that it always uses a killable wait and it uses GFP_KERNEL rather than GFP_NOIO.(CVE-2021-47582)
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Fix the behavior of READ near OFFSET_MAX
Dan Aloni reports: > Due to commit 8cfb9015280d ("NFS: Always provide aligned buffers to > the RPC read layers") on the client, a read of 0xfff is aligned up > to server rsize of 0x1000. > > As a result, in a test where the server has a file of size > 0x7fffffffffffffff, and the client tries to read from the offset > 0x7ffffffffffff000, the read causes loff_t overflow in the server > and it returns an NFS code of EINVAL to the client. The client as > a result indefinitely retries the request.
The Linux NFS client does not handle NFS?ERR_INVAL, even though all NFS specifications permit servers to return that status code for a READ.
Instead of NFS?ERR_INVAL, have out-of-range READ requests succeed and return a short result. Set the EOF flag in the result to prevent the client from retrying the READ request. This behavior appears to be consistent with Solaris NFS servers.
Note that NFSv3 and NFSv4 use u64 offset values on the wire. These must be converted to loff_t internally before use -- an implicit type cast is not adequate for this purpose. Otherwise VFS checks against sb->s_maxbytes do not work properly.(CVE-2022-48827)
In the Linux kernel, the following vulnerability has been resolved:
media: mediatek: vcodec: Only free buffer VA that is not NULL
In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called only when the buffer to free exists, there are some instances that didn't do the check and triggered warnings in practice.
We believe those checks were forgotten unintentionally. Add the checks back to fix the warnings.(CVE-2023-52888)
In the Linux kernel, the following vulnerability has been resolved:
HID: core: remove unnecessary WARN_ON() in implement()
Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report.
Since implement()…
- Record
OESA-2024-1992- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-1994
7.8
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
USB: core: Make do_proc_control() and do_proc_bulk() killable
The USBDEVFS_CONTROL and USBDEVFS_BULK ioctls invoke usb_start_wait_urb(), which contains an uninterruptible wait with a user-specified timeout value. If timeout value is very large and the device being accessed does not respond in a reasonable amount of time, the kernel will complain about "Task X blocked for more than N seconds", as found in testing by syzbot:
INFO: task syz-executor.0:8700 blocked for more than 143 seconds. Not tainted 5.14.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:23192 pid: 8700 ppid: 8455 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4681 [inline] __schedule+0xc07/0x11f0 kernel/sched/core.c:5938 schedule+0x14b/0x210 kernel/sched/core.c:6017 schedule_timeout+0x98/0x2f0 kernel/time/timer.c:1857 do_wait_for_common+0x2da/0x480 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion_timeout+0x46/0x60 kernel/sched/completion.c:157 usb_start_wait_urb+0x167/0x550 drivers/usb/core/message.c:63 do_proc_bulk+0x978/0x1080 drivers/usb/core/devio.c:1236 proc_bulk drivers/usb/core/devio.c:1273 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2547 [inline] usbdev_ioctl+0x3441/0x6b10 drivers/usb/core/devio.c:2713 ...
To fix this problem, this patch replaces usbfs's calls to usb_control_msg() and usb_bulk_msg() with special-purpose code that does essentially the same thing (as recommended in the comment for usb_start_wait_urb()), except that it always uses a killable wait and it uses GFP_KERNEL rather than GFP_NOIO.(CVE-2021-47582)
In the Linux kernel, the following vulnerability has been resolved:
media: mediatek: vcodec: Only free buffer VA that is not NULL
In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called only when the buffer to free exists, there are some instances that didn't do the check and triggered warnings in practice.
We believe those checks were forgotten unintentionally. Add the checks back to fix the warnings.(CVE-2023-52888)
In the Linux kernel, the following vulnerability has been resolved:
HID: core: remove unnecessary WARN_ON() in implement()
Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report.
Since implement() already has a warn message printed out with the help of hid_warn() and value in question gets trimmed with: ... value &= m; ... WARN_ON may be considered superfluous. Remove it to suppress future syzkaller triggers.
[1] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 implement drivers/hid/hid-core.c:1451 [inline] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 Modules linked in: CPU: 0 PID: 5084 Comm: syz-executor424 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:implement drivers/hid/hid-core.c:1451 [inline] RIP: 0010:hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 ... Call Trace: <TASK> __usbhid_submit_report drivers/hid/usbhid/hid-core.c:591 [inline] usbhid_submit_report+0x43d/0x9e0 drivers/hid/usbhid/hid-core.c:636 hiddev_ioctl+0x138b/0x1f00 drivers/hid/usbhid/hiddev.c:726 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:890 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f ...(CVE-2024-39509)
In the Linux kernel, the…
- Record
OESA-2024-1994- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-1995
7.8
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
USB: core: Make do_proc_control() and do_proc_bulk() killable
The USBDEVFS_CONTROL and USBDEVFS_BULK ioctls invoke usb_start_wait_urb(), which contains an uninterruptible wait with a user-specified timeout value. If timeout value is very large and the device being accessed does not respond in a reasonable amount of time, the kernel will complain about "Task X blocked for more than N seconds", as found in testing by syzbot:
INFO: task syz-executor.0:8700 blocked for more than 143 seconds. Not tainted 5.14.0-rc7-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:23192 pid: 8700 ppid: 8455 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4681 [inline] __schedule+0xc07/0x11f0 kernel/sched/core.c:5938 schedule+0x14b/0x210 kernel/sched/core.c:6017 schedule_timeout+0x98/0x2f0 kernel/time/timer.c:1857 do_wait_for_common+0x2da/0x480 kernel/sched/completion.c:85 __wait_for_common kernel/sched/completion.c:106 [inline] wait_for_common kernel/sched/completion.c:117 [inline] wait_for_completion_timeout+0x46/0x60 kernel/sched/completion.c:157 usb_start_wait_urb+0x167/0x550 drivers/usb/core/message.c:63 do_proc_bulk+0x978/0x1080 drivers/usb/core/devio.c:1236 proc_bulk drivers/usb/core/devio.c:1273 [inline] usbdev_do_ioctl drivers/usb/core/devio.c:2547 [inline] usbdev_ioctl+0x3441/0x6b10 drivers/usb/core/devio.c:2713 ...
To fix this problem, this patch replaces usbfs's calls to usb_control_msg() and usb_bulk_msg() with special-purpose code that does essentially the same thing (as recommended in the comment for usb_start_wait_urb()), except that it always uses a killable wait and it uses GFP_KERNEL rather than GFP_NOIO.(CVE-2021-47582)
In the Linux kernel, the following vulnerability has been resolved:
media: mediatek: vcodec: Only free buffer VA that is not NULL
In the MediaTek vcodec driver, while mtk_vcodec_mem_free() is mostly called only when the buffer to free exists, there are some instances that didn't do the check and triggered warnings in practice.
We believe those checks were forgotten unintentionally. Add the checks back to fix the warnings.(CVE-2023-52888)
A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.
(CVE-2024-22386)
In the Linux kernel, the following vulnerability has been resolved:
HID: core: remove unnecessary WARN_ON() in implement()
Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report.
Since implement() already has a warn message printed out with the help of hid_warn() and value in question gets trimmed with: ... value &= m; ... WARN_ON may be considered superfluous. Remove it to suppress future syzkaller triggers.
[1] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 implement drivers/hid/hid-core.c:1451 [inline] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 Modules linked in: CPU: 0 PID: 5084 Comm: syz-executor424 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:implement drivers/hid/hid-core.c:1451 [inline] RIP: 0010:hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 ... Call Trace: <TASK> __usbhid_submit_report drivers/hid/usbhid/hid-core.c:591 [inline] usbhid_submit_report+0x43d/0x9e0 drivers/hid/usbhid/hid-core.c:636 hiddev_ioctl+0x138b/0x1f00 drivers/hid/usbhid/hiddev.c:726 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl…
- Record
OESA-2024-1995- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-1996
7.8
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
ethernet: Fix error handling in xemaclite_of_probe
This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak. As the remove function do.(CVE-2022-48860)
In the Linux kernel, the following vulnerability has been resolved:
HID: core: remove unnecessary WARN_ON() in implement()
Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report.
Since implement() already has a warn message printed out with the help of hid_warn() and value in question gets trimmed with: ... value &= m; ... WARN_ON may be considered superfluous. Remove it to suppress future syzkaller triggers.
[1] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 implement drivers/hid/hid-core.c:1451 [inline] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 Modules linked in: CPU: 0 PID: 5084 Comm: syz-executor424 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:implement drivers/hid/hid-core.c:1451 [inline] RIP: 0010:hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 ... Call Trace: <TASK> __usbhid_submit_report drivers/hid/usbhid/hid-core.c:591 [inline] usbhid_submit_report+0x43d/0x9e0 drivers/hid/usbhid/hid-core.c:636 hiddev_ioctl+0x138b/0x1f00 drivers/hid/usbhid/hiddev.c:726 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:890 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f ...(CVE-2024-39509)
In the Linux kernel, the following vulnerability has been resolved:
filelock: Remove locks reliably when fcntl/close race is detected
When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait(). However, LSMs can allow the first do_lock_file_wait() that created the lock while denying the second do_lock_file_wait() that tries to remove the lock. Separately, posix_lock_file() could also fail to remove a lock due to GFP_KERNEL allocation failure (when splitting a range in the middle).
After the bug has been triggered, use-after-free reads will occur in lock_get_status() when userspace reads /proc/locks. This can likely be used to read arbitrary kernel memory, but can't corrupt kernel memory.
Fix it by calling locks_remove_posix() instead, which is designed to reliably get rid of POSIX locks associated with the given file and files_struct and is also used by filp_flush().(CVE-2024-41012)
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix kernel bug on rename operation of broken directory
Syzbot reported that in rename directory operation on broken directory on nilfs2, __block_write_begin_int() called to prepare block write may fail BUG_ON check for access exceeding the folio/page size.
This is because nilfs_dotdot(), which gets parent directory reference entry ("..") of the directory to be moved or renamed, does not check consistency enough, and may return location exceeding folio/page size for broken directories.
Fix this issue by checking required directory entries ("." and "..") in the first chunk of the directory in nilfs_dotdot().(CVE-2024-41034)
In the Linux kernel, the following vulnerability has been resolved:
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
Syzbot has identified a bug in usbcore (see the Closes: tag below) caused by our assumption that the reserved bits in an endpoint descriptor's bEndpointAddress field will…
- Record
OESA-2024-1996- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-2124
7.8
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
bna: ensure the copied buf is NUL terminated
Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.(CVE-2024-36934)
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix potential kernel bug due to lack of writeback flag waiting
Destructive writes to a block device on which nilfs2 is mounted can cause a kernel bug in the folio/page writeback start routine or writeback end routine (__folio_start_writeback in the log below):
kernel BUG at mm/page-writeback.c:3070! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI ... RIP: 0010:__folio_start_writeback+0xbaa/0x10e0 Code: 25 ff 0f 00 00 0f 84 18 01 00 00 e8 40 ca c6 ff e9 17 f6 ff ff e8 36 ca c6 ff 4c 89 f7 48 c7 c6 80 c0 12 84 e8 e7 b3 0f 00 90 <0f> 0b e8 1f ca c6 ff 4c 89 f7 48 c7 c6 a0 c6 12 84 e8 d0 b3 0f 00 ... Call Trace: <TASK> nilfs_segctor_do_construct+0x4654/0x69d0 [nilfs2] nilfs_segctor_construct+0x181/0x6b0 [nilfs2] nilfs_segctor_thread+0x548/0x11c0 [nilfs2] kthread+0x2f0/0x390 ret_from_fork+0x4b/0x80 ret_from_fork_asm+0x1a/0x30 </TASK>
This is because when the log writer starts a writeback for segment summary blocks or a super root block that use the backing device's page cache, it does not wait for the ongoing folio/page writeback, resulting in an inconsistent writeback state.
Fix this issue by waiting for ongoing writebacks when putting folios/pages on the backing device into writeback state.(CVE-2024-37078)
In the Linux kernel, the following vulnerability has been resolved:
xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
ip6_dst_idev() can return NULL, xfrm6_get_saddr() must act accordingly.
syzbot reported:
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 1 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker RIP: 0010:xfrm6_get_saddr+0x93/0x130 net/ipv6/xfrm6_policy.c:64 Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 97 00 00 00 4c 8b ab d8 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 86 00 00 00 4d 8b 6d 00 e8 ca 13 47 01 48 b8 00 RSP: 0018:ffffc90000117378 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: ffff88807b079dc0 RCX: ffffffff89a0d6d7 RDX: 0000000000000000 RSI: ffffffff89a0d6e9 RDI: ffff88807b079e98 RBP: ffff88807ad73248 R08: 0000000000000007 R09: fffffffffffff000 R10: ffff88807b079dc0 R11: 0000000000000007 R12: ffffc90000117480 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4586d00440 CR3: 0000000079042000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> xfrm_get_saddr net/xfrm/xfrm_policy.c:2452 [inline] xfrm_tmpl_resolve_one net/xfrm/xfrm_policy.c:2481 [inline] xfrm_tmpl_resolve+0xa26/0xf10 net/xfrm/xfrm_policy.c:2541 xfrm_resolve_and_create_bundle+0x140/0x2570 net/xfrm/xfrm_policy.c:2835 xfrm_bundle_lookup net/xfrm/xfrm_policy.c:3070 [inline] xfrm_lookup_with_ifid+0x4d1/0x1e60 net/xfrm/xfrm_policy.c:3201 xfrm_lookup net/xfrm/xfrm_policy.c:3298 [inline] …
- Record
OESA-2024-2124- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:7000
7.8
Red Hat Security Advisory: kernel security update
- Record
RHSA-2024:7000- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:7001
7.8
Red Hat Security Advisory: kernel-rt security update
- Record
RHSA-2024:7001- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:9315
7.8
Red Hat Security Advisory: kernel security update
- Record
RHSA-2024:9315- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2024:7000
7.8
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26638 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26846 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52798 CVE-2023-52809 CVE-2023-52817 CVE-2023-52840 CVE-2023-52800 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36922 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36919 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38579 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41023 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41064 CVE-2024-41065 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42094 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42225 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43830 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:7000- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-41012
5.8
In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close race is detected When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait(). However, LSMs can allow the first do_lock_file_wait() that created the lock while denying the second do_lock_file_wait() that tries to remove the lock. Separately, posix_lock_file() could also fail to remove a lock due to GFP_KERNEL allocation failure (when splitting a range in the middle). After the bug has been triggered, use-after-free reads will occur in lock_get_status() when userspace reads /proc/locks. This can likely be used to read arbitrary kernel memory, but can't corrupt kernel memory. Fix it by calling locks_remove_posix() instead, which is designed to reliably get rid of POSIX locks associated with the given file and files_struct and is also used by filp_flush().
- Record
UBUNTU-CVE-2024-41012- CVSS 4.0
- 5.8 Medium
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-06
OSVALSA-2024:7000 No score
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26638 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26846 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52798 CVE-2023-52809 CVE-2023-52817 CVE-2023-52840 CVE-2023-52800 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36922 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36919 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38579 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41023 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41064 CVE-2024-41065 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42094 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42225 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43830 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:7000- Updated
- 2026-11-02
OSVALSA-2024:7001 No score
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
CVE-2023-6040 CVE-2024-26595 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52817 CVE-2023-52840 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:7001- Updated
- 2026-11-02
OSVCLSA-2024-1731602566 No score
Fix of 76 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-44946
- kcm: Serialise kcm_sendmsg() for the same socket.
- CVE-url: https://ubuntu.com/security/CVE-2024-42292
- kobject_uevent: Fix OOB access within zap_modalias_env()
- CVE-url: https://ubuntu.com/security/CVE-2024-41042
- netfilter: nf_tables: prefer nft_chain_validate
- CVE-url: https://ubuntu.com/security/CVE-2024-42265
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
- CVE-url: https://ubuntu.com/security/CVE-2024-50036
- net: do not delay dst_entries_add() in dst_release()
- CVE-url: https://ubuntu.com/security/CVE-2024-47663
- staging: iio: frequency: ad9833: Load clock using clock framework
- staging: iio: frequency: ad9834: Validate frequency parameter value
- CVE-url: https://ubuntu.com/security/CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
- CVE-url: https://ubuntu.com/security/CVE-2023-52918
- media: pci: cx23885: check cx23885_vdev_init() return
- CVE-url: https://ubuntu.com/security/CVE-2024-44960
- usb: gadget: core: Check for unset descriptor
- CVE-url: https://ubuntu.com/security/CVE-2024-42297
- f2fs: fix to don't dirty inode for readonly filesystem
- CVE-url: https://ubuntu.com/security/CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
- CVE-url: https://ubuntu.com/security/CVE-2024-46676
- nfc: pn533: Add poll mod list filling check
- CVE-url: https://ubuntu.com/security/CVE-2024-46761
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- CVE-url: https://ubuntu.com/security/CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- CVE-url: https://ubuntu.com/security/CVE-2024-46679
- ethtool: check device is present when getting link settings
- CVE-url: https://ubuntu.com/security/CVE-2024-46721
- apparmor: fix possible NULL pointer dereference
- CVE-url: https://ubuntu.com/security/CVE-2024-46685
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- CVE-url: https://ubuntu.com/security/CVE-2024-44947
- fuse: Initialize beyond-EOF page contents before setting uptodate
- CVE-url: https://ubuntu.com/security/CVE-2024-46675
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- CVE-url: https://ubuntu.com/security/CVE-2024-43893
- serial: core: check uartclk for zero to avoid divide by zero
- CVE-url: https://ubuntu.com/security/CVE-2024-45021
- memcg_write_event_control(): fix a user-triggerable oops
- CVE-url: https://ubuntu.com/security/CVE-2024-46677
- gtp: fix a potential NULL pointer dereference
- CVE-url: https://ubuntu.com/security/CVE-2024-43861
- net: usb: qmi_wwan: fix memory leak for not ip packets
- CVE-url: https://ubuntu.com/security/CVE-2024-41063
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- CVE-url: https://ubuntu.com/security/CVE-2024-45006
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- CVE-url: https://ubuntu.com/security/CVE-2024-43853
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- CVE-url: https://ubuntu.com/security/CVE-2024-42310
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- CVE-url: https://ubuntu.com/security/CVE-2024-42311
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- CVE-url: https://ubuntu.com/security/CVE-2024-41012
- filelock: Remove locks reliably when fcntl/close race is detected
- CVE-url: https://ubuntu.com/security/CVE-2024-45028
- mmc: mmc_test: Fix NULL dereference on allocation failure
- CVE-url: https://ubuntu.com/security/CVE-2024-43860
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- CVE-url: https://ubuntu.com/security/CVE-2024-43914
- md/raid5: avoid BUG_ON() while continue…
- Record
CLSA-2024-1731602566- Updated
- 2026-11-02
OSVCLSA-2024-1731603213 No score
Fix of 76 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-44946
- kcm: Serialise kcm_sendmsg() for the same socket.
- CVE-url: https://ubuntu.com/security/CVE-2024-42292
- kobject_uevent: Fix OOB access within zap_modalias_env()
- CVE-url: https://ubuntu.com/security/CVE-2024-41042
- netfilter: nf_tables: prefer nft_chain_validate
- CVE-url: https://ubuntu.com/security/CVE-2024-42265
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
- CVE-url: https://ubuntu.com/security/CVE-2024-50036
- net: do not delay dst_entries_add() in dst_release()
- CVE-url: https://ubuntu.com/security/CVE-2024-47663
- staging: iio: frequency: ad9833: Load clock using clock framework
- staging: iio: frequency: ad9834: Validate frequency parameter value
- CVE-url: https://ubuntu.com/security/CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
- CVE-url: https://ubuntu.com/security/CVE-2023-52918
- media: pci: cx23885: check cx23885_vdev_init() return
- CVE-url: https://ubuntu.com/security/CVE-2024-44960
- usb: gadget: core: Check for unset descriptor
- CVE-url: https://ubuntu.com/security/CVE-2024-42297
- f2fs: fix to don't dirty inode for readonly filesystem
- CVE-url: https://ubuntu.com/security/CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
- CVE-url: https://ubuntu.com/security/CVE-2024-46676
- nfc: pn533: Add poll mod list filling check
- CVE-url: https://ubuntu.com/security/CVE-2024-46761
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- CVE-url: https://ubuntu.com/security/CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- CVE-url: https://ubuntu.com/security/CVE-2024-46679
- ethtool: check device is present when getting link settings
- CVE-url: https://ubuntu.com/security/CVE-2024-46721
- apparmor: fix possible NULL pointer dereference
- CVE-url: https://ubuntu.com/security/CVE-2024-46685
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- CVE-url: https://ubuntu.com/security/CVE-2024-44947
- fuse: Initialize beyond-EOF page contents before setting uptodate
- CVE-url: https://ubuntu.com/security/CVE-2024-46675
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- CVE-url: https://ubuntu.com/security/CVE-2024-43893
- serial: core: check uartclk for zero to avoid divide by zero
- CVE-url: https://ubuntu.com/security/CVE-2024-45021
- memcg_write_event_control(): fix a user-triggerable oops
- CVE-url: https://ubuntu.com/security/CVE-2024-46677
- gtp: fix a potential NULL pointer dereference
- CVE-url: https://ubuntu.com/security/CVE-2024-43861
- net: usb: qmi_wwan: fix memory leak for not ip packets
- CVE-url: https://ubuntu.com/security/CVE-2024-41063
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- CVE-url: https://ubuntu.com/security/CVE-2024-45006
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- CVE-url: https://ubuntu.com/security/CVE-2024-43853
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- CVE-url: https://ubuntu.com/security/CVE-2024-42310
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- CVE-url: https://ubuntu.com/security/CVE-2024-42311
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- CVE-url: https://ubuntu.com/security/CVE-2024-41012
- filelock: Remove locks reliably when fcntl/close race is detected
- CVE-url: https://ubuntu.com/security/CVE-2024-45028
- mmc: mmc_test: Fix NULL dereference on allocation failure
- CVE-url: https://ubuntu.com/security/CVE-2024-43860
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- CVE-url: https://ubuntu.com/security/CVE-2024-43914
- md/raid5: avoid BUG_ON() while continue…
- Record
CLSA-2024-1731603213- Updated
- 2026-11-02
OSVCLSA-2024-1731605761 No score
Fix of 67 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-42265
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
- CVE-url: https://ubuntu.com/security/CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
- CVE-url: https://ubuntu.com/security/CVE-2023-52918
- media: pci: cx23885: check cx23885_vdev_init() return
- CVE-url: https://ubuntu.com/security/CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
- CVE-url: https://ubuntu.com/security/CVE-2024-46676
- nfc: pn533: Add poll mod list filling check
- CVE-url: https://ubuntu.com/security/CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- CVE-url: https://ubuntu.com/security/CVE-2024-46721
- apparmor: fix possible NULL pointer dereference
- CVE-url: https://ubuntu.com/security/CVE-2024-44947
- fuse: Initialize beyond-EOF page contents before setting uptodate
- CVE-url: https://ubuntu.com/security/CVE-2024-46675
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- CVE-url: https://ubuntu.com/security/CVE-2024-43893
- serial: core: check uartclk for zero to avoid divide by zero
- CVE-url: https://ubuntu.com/security/CVE-2024-45021
- memcg_write_event_control(): fix a user-triggerable oops
- CVE-url: https://ubuntu.com/security/CVE-2024-41012
- filelock: Remove locks reliably when fcntl/close race is detected
- CVE-url: https://ubuntu.com/security/CVE-2024-42310
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- CVE-url: https://ubuntu.com/security/CVE-2024-42311
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- CVE-url: https://ubuntu.com/security/CVE-2024-45028
- mmc: mmc_test: Fix NULL dereference on allocation failure
- CVE-url: https://ubuntu.com/security/CVE-2024-43914
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- CVE-url: https://ubuntu.com/security/CVE-2024-43856
- dma: fix call order in dmam_free_coherent
- CVE-url: https://ubuntu.com/security/CVE-2024-43884
- Bluetooth: MGMT: Add error handling to pair_device()
- CVE-url: https://ubuntu.com/security/CVE-2024-42309
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- CVE-url: https://ubuntu.com/security/CVE-2024-50044
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- CVE-url: https://ubuntu.com/security/CVE-2024-49967
- ext4: no need to continue when the number of entries is 1
- Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE-
url: https://ubuntu.com/security/CVE-2022-49015
- net: hsr: Fix potential use-after-free
- CVE-url: https://ubuntu.com/security/CVE-2024-50033
- slip: make slhc_remember() more robust against malicious packets
- CVE-url: https://ubuntu.com/security/CVE-2024-47670
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()
- CVE-url: https://ubuntu.com/security/CVE-2024-49950
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- CVE-url: https://ubuntu.com/security/CVE-2024-49883
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE-
url: https://ubuntu.com/security/CVE-2022-48960
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- CVE-url: https://ubuntu.com/security/CVE-2024-47745
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- CVE-url: https://ubuntu.com/security/CVE-2024-49860
- ACPI: sysfs: validate return type of _STR method
- CVE-url: https://ubuntu.com/security/CVE-2024-49882
- ext4: fix double brelse() the buffer of the extents path
- CVE-url: https://ubuntu.com/security/CVE-2024-49995
- tipc: guard against string buffer overrun
- CVE-url: https://ubuntu.com/security/CVE-2024-47723 -…
- Record
CLSA-2024-1731605761- Updated
- 2026-11-02
OSVCLSA-2024-1731606243 No score
Fix of 67 CVEs
- CVE-url: https://ubuntu.com/security/CVE-2024-42265
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
- CVE-url: https://ubuntu.com/security/CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
- CVE-url: https://ubuntu.com/security/CVE-2023-52918
- media: pci: cx23885: check cx23885_vdev_init() return
- CVE-url: https://ubuntu.com/security/CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
- CVE-url: https://ubuntu.com/security/CVE-2024-46676
- nfc: pn533: Add poll mod list filling check
- CVE-url: https://ubuntu.com/security/CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- CVE-url: https://ubuntu.com/security/CVE-2024-46721
- apparmor: fix possible NULL pointer dereference
- CVE-url: https://ubuntu.com/security/CVE-2024-44947
- fuse: Initialize beyond-EOF page contents before setting uptodate
- CVE-url: https://ubuntu.com/security/CVE-2024-46675
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- CVE-url: https://ubuntu.com/security/CVE-2024-43893
- serial: core: check uartclk for zero to avoid divide by zero
- CVE-url: https://ubuntu.com/security/CVE-2024-45021
- memcg_write_event_control(): fix a user-triggerable oops
- CVE-url: https://ubuntu.com/security/CVE-2024-41012
- filelock: Remove locks reliably when fcntl/close race is detected
- CVE-url: https://ubuntu.com/security/CVE-2024-42310
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- CVE-url: https://ubuntu.com/security/CVE-2024-42311
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- CVE-url: https://ubuntu.com/security/CVE-2024-45028
- mmc: mmc_test: Fix NULL dereference on allocation failure
- CVE-url: https://ubuntu.com/security/CVE-2024-43914
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- CVE-url: https://ubuntu.com/security/CVE-2024-43856
- dma: fix call order in dmam_free_coherent
- CVE-url: https://ubuntu.com/security/CVE-2024-43884
- Bluetooth: MGMT: Add error handling to pair_device()
- CVE-url: https://ubuntu.com/security/CVE-2024-42309
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- CVE-url: https://ubuntu.com/security/CVE-2024-50044
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- CVE-url: https://ubuntu.com/security/CVE-2024-49967
- ext4: no need to continue when the number of entries is 1
- Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE-
url: https://ubuntu.com/security/CVE-2022-49015
- net: hsr: Fix potential use-after-free
- CVE-url: https://ubuntu.com/security/CVE-2024-50033
- slip: make slhc_remember() more robust against malicious packets
- CVE-url: https://ubuntu.com/security/CVE-2024-47670
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()
- CVE-url: https://ubuntu.com/security/CVE-2024-49950
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- CVE-url: https://ubuntu.com/security/CVE-2024-49883
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE-
url: https://ubuntu.com/security/CVE-2022-48960
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- CVE-url: https://ubuntu.com/security/CVE-2024-47745
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- CVE-url: https://ubuntu.com/security/CVE-2024-49860
- ACPI: sysfs: validate return type of _STR method
- CVE-url: https://ubuntu.com/security/CVE-2024-49882
- ext4: fix double brelse() the buffer of the extents path
- CVE-url: https://ubuntu.com/security/CVE-2024-49995
- tipc: guard against string buffer overrun
- CVE-url: https://ubuntu.com/security/CVE-2024-47723 -…
- Record
CLSA-2024-1731606243- Updated
- 2026-11-02
OSVRLSA-2024:7001 No score
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
CVE-2023-6040 CVE-2024-26595 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52817 CVE-2023-52840 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:7001- Updated
- 2026-11-02
OSVSUSE-SU-2024:2894-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
- CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
- CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
- CVE-2021-47546: Kabi fix for ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
- CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
- CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
- CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
- CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
- CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
- CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
- CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571)
- CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len (bsc#1226555).
- CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
- CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
- CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
- CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071)
- CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
- CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
- CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869)
- CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
- CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
- CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
- CVE-2023-52812: drm/amd: check num of link levels when update pcie param (bsc#1225564).
- CVE-2023-52857: drm/mediatek: Fix coverity issue with unintentional integer overflow (bsc#1225581).
- CVE-2023-52863: hwmon: (axi-fan-control) Fix possible NULL pointer dereference (bsc#1225586).
- CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
- CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
- CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
- CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
- CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
- CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
- CVE-2024-26661: drm/amd/display: Add NULL test for 'timing generator' in (bsc#1222323)
- CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
- CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
- CVE-2024-26802: stmmac: Clear variable when destroying workqueue (bsc#1222799).
- CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
- CVE-2024-26961: mac802154: fix llsec key resources release in mac802154_llsec_key_del (bsc#1223652).
- CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
- CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
- CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
- CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ…
- Record
SUSE-SU-2024:2894-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2902-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
- CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
- CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).
- CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829).
- CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
- CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
- CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823).
- CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
- CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
- CVE-2024-39463: 9p: add missing locking around taking dentry fid list (bsc#1227090).
- CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
- CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-35901: net: mana: Fix Rx DMA datasize and skb_over_panic (bsc#1224495).
- CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).
- CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
- CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
The following non-security bugs were fixed:
- NFS: Do not re-read the entire page cache to find the next cookie (bsc#1226662).
- NFS: Reduce use of uncached readdir (bsc#1226662).
- NFSv4.x: by default serialize open/close operations (bsc#1226226 bsc#1223863).
- X.509: Fix the parser of extended key usage for length (bsc#1218820).
- btrfs: sysfs: update fs features directory asynchronously (bsc#1226168).
- cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801).
- jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383).
- kABI: rtas: Workaround false positive due to lost definition (bsc#1227487).
- kernel-binary: vdso: Own module_dir
- net/dcb: check for detached device before executing callbacks (bsc#1215587).
- ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
- powerpc/rtas: clean up includes (bsc#1227487).
- workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454).
- workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454).
- Record
SUSE-SU-2024:2902-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2929-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
- CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
- CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743)
- CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829).
- CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
- CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
- CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823).
- CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561).
- CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
- CVE-2024-39463: 9p: add missing locking around taking dentry fid list (bsc#1227090).
- CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
- CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-35901: net: mana: Fix Rx DMA datasize and skb_over_panic (bsc#1224495).
- CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).
- CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
- CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
- CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
The following non-security bugs were fixed:
- NFS: Do not re-read the entire page cache to find the next cookie (bsc#1226662).
- NFS: Reduce use of uncached readdir (bsc#1226662).
- NFSv4.x: by default serialize open/close operations (bsc#1226226 bsc#1223863).
- X.509: Fix the parser of extended key usage for length (bsc#1218820).
- btrfs: sysfs: update fs features directory asynchronously (bsc#1226168).
- cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801).
- jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383).
- kABI: rtas: Workaround false positive due to lost definition (bsc#1227487).
- kernel-binary: vdso: Own module_dir
- net/dcb: check for detached device before executing callbacks (bsc#1215587).
- ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834).
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
- powerpc/rtas: clean up includes (bsc#1227487).
- workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454).
- workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454).
- Record
SUSE-SU-2024:2929-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2939-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
- CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958).
- CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
- CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
- CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
- CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
- CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
- CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
- CVE-2021-47546: ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
- CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
- CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
- CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
- CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
- CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
- CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
- CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
- CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
- CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
- CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
- CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571).
- CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len. (bsc#1226555).
- CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
- CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
- CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
- CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
- CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071).
- CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
- CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
- CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
- CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869).
- CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
- CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
- CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
- CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
- CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
- CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
- CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
- CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
- CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
- CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
- CVE-2023-52787: blk-mq: make…
- Record
SUSE-SU-2024:2939-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2947-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
- CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
- CVE-2021-47186: ipc: check for null after calling kmemdup (bsc#1222702).
- CVE-2021-47546: Kabi fix for ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
- CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
- CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
- CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
- CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
- CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
- CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
- CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571)
- CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len (bsc#1226555).
- CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
- CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
- CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
- CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071)
- CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
- CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
- CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869)
- CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
- CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
- CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
- CVE-2023-52812: drm/amd: check num of link levels when update pcie param (bsc#1225564).
- CVE-2023-52857: drm/mediatek: Fix coverity issue with unintentional integer overflow (bsc#1225581).
- CVE-2023-52863: hwmon: (axi-fan-control) Fix possible NULL pointer dereference (bsc#1225586).
- CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
- CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
- CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
- CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
- CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
- CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
- CVE-2024-26661: drm/amd/display: Add NULL test for 'timing generator' in (bsc#1222323)
- CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
- CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
- CVE-2024-26802: stmmac: Clear variable when destroying workqueue (bsc#1222799).
- CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
- CVE-2024-26961: mac802154: fix llsec key resources release in mac802154_llsec_key_del (bsc#1223652).
- CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
- CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
- CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
- CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ…
- Record
SUSE-SU-2024:2947-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3189-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-43907: drm/amdgpu/pm: fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
- CVE-2024-43905: drm/amd/pm: fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
- CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
- CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
- CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
- CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
- CVE-2024-43879: wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
- CVE-2024-43872: RDMA/hns: Fix soft lockup under heavy CEQE load (bsc#1229489).
- CVE-2024-43871: devres: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490).
- CVE-2024-43866: net/mlx5: Always drain health in shutdown callback (bsc#1229495).
- CVE-2024-43863: drm/vmwgfx: Fix a deadlock in dma buf fence polling (bsc#1229497).
- CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
- CVE-2024-43856: dma: fix call order in dmam_free_coherent (bsc#1229346).
- CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media (bsc#1229345)
- CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
- CVE-2024-43831: media: mediatek: vcodec: Handle invalid decoder vsi (bsc#1229309).
- CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
- CVE-2024-42322: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347)
- CVE-2024-42312: sysctl: always initialize i_uid/i_gid (bsc#1229357)
- CVE-2024-42310: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (bsc#1229358).
- CVE-2024-42309: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (bsc#1229359).
- CVE-2024-42301: dev/parport: fix the array out-of-bounds risk (bsc#1229407).
- CVE-2024-42285: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (bsc#1229381).
- CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
- CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386).
- CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
- CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)
- CVE-2024-42259: drm/i915/gem: fix Virtual Memory mapping boundaries calculation (bsc#1229156).
- CVE-2024-42246: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).
- CVE-2024-42244: usb: serial: mos7840: fix crash on resume (bsc#1228967).
- CVE-2024-42236: usb: gadget: configfs: prevent OOB read/write in usb_string_copy() (bsc#1228964).
- CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959)
- CVE-2024-42228: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (bsc#1228667).
- CVE-2024-42226: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
- CVE-2024-42162: gve: Account for stopped queues when reading NIC stats (bsc#1228706).
- CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
- CVE-2024-42157: s390/pkey: Wipe sensitive data on failure (bsc#1228727).
- CVE-2024-42155: s390/pkey: Wipe copies of protected- and secure-keys (bsc#1228733).
- CVE-2024-42148: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).
- CVE-2024-42110: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501).
- CVE-2024-42106: inet_diag: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493).
- CVE-2024-42101: drm/nouveau: fix null pointer dereference in…
- Record
SUSE-SU-2024:3189-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3194-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
- CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
- CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
- CVE-2024-43911: Fix NULL dereference at band check in starting tx ba session (bsc#1229827).
- CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
- CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
- CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
- CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
- CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
- CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
- CVE-2024-36270: Fix reference in patches.suse/netfilter-tproxy-bail-out-if-IP-has-been-disabled-on.patch (bsc#1226798)
- CVE-2024-36881: Reset ptes when close() for wr-protected ones (bsc#1225718).
- CVE-2024-42316: Fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
- CVE-2024-43855: Fix deadlock between mddev_suspend and flush bio (bsc#1229342,).
- CVE-2024-43864: Fix CT entry update leaks of modify header context (bsc#1229496)
- CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
- CVE-2024-42109: Unconditionally flush pending work before notifier (bsc#1228505)
- CVE-2024-41084: Avoid null pointer dereference in region lookup (bsc#1228472)
- CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
- CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
- CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
- CVE-2024-27079: Add kABI workaround patch (bsc#1223742).
- CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
- CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
- CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
- CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
- CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
- CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
- CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
- CVE-2024-26809: Release elements in clone only from destroy path (bsc#1222633).
- CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).
- CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297).
- CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
- CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374).
- CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391).
- CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314)
- CVE-2024-27433: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
- CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
- CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
- CVE-2024-40920: Fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
- CVE-2024-40921: Pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
- CVE-2024-36979: Fix vlan use-after-free (bsc#1226604).
- CVE-2024-26590: Fix inconsistent per-file compression format (bsc#1220252,).
- CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582).
- CVE-2024-42270: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404)
- CVE-2024-42269: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402)
- CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
- CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383) -…
- Record
SUSE-SU-2024:3194-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3195-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
- CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
- CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
- CVE-2024-43911: Fix NULL dereference at band check in starting tx ba session (bsc#1229827).
- CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
- CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
- CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
- CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
- CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
- CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
- CVE-2024-36881: Fix reset ptes when close() for wr-protected (bsc#1225718).
- CVE-2024-42316: Fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
- CVE-2024-43855: Fix deadlock between mddev_suspend and flush bio (bsc#1229342).
- CVE-2024-43864: Fix CT entry update leaks of modify header context (bsc#1229496).
- CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
- CVE-2024-42109: Unconditionally flush pending work before notifier (bsc#1228505).
- CVE-2024-41084: Avoid null pointer dereference in region lookup (bsc#1228472).
- CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
- CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
- CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
- CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
- CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
- CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
- CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
- CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
- CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
- CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
- CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
- CVE-2024-26809: Release elements in clone only from destroy path (bsc#1222633).
- CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).
- CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297).
- CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
- CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374).
- CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391).
- CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314)
- CVE-2024-27433: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
- CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
- CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
- CVE-2024-40920: Fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
- CVE-2024-40921: Pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
- CVE-2024-36979: Fix vlan use-after-free (bsc#1226604).
- CVE-2024-26590: Fix inconsistent per-file compression format (bsc#1220252).
- CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582).
- CVE-2024-42270: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404).
- CVE-2024-42269: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402).
- CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
- CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383)
- CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357)
- CVE-2024-43854: Initialize integrity buffer to zero…
- Record
SUSE-SU-2024:3195-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3251-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579).
- CVE-2024-35933: Fixed build regression (bsc#1224640).
- CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
- CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
- CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
- CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
- CVE-2024-43863: Fix a deadlock in dma buf fence polling (bsc#1229497)
- CVE-2024-41087: Fix double free on error (bsc#1228466).
- CVE-2024-43907: Fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
- CVE-2024-43905: Fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
- CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
- CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
- CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
- CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
- CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
- CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
- CVE-2022-48910: Ensure we call ipv6_mc_down() at most once (bsc#1229632)
- CVE-2023-52893: Fix null-deref in gsmi_get_variable (bsc#1229535)
- CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
- CVE-2022-48875: Initialize struct pn533_out_arg properly (bsc#1229516).
- CVE-2023-52907: Wait for out_urb's completion in pn533_usb_send_frame() (bsc#1229526).
- CVE-2024-43871: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490)
- CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
- CVE-2024-43872: Fix soft lockup under heavy CEQE load (bsc#1229489)
- CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
- CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
- CVE-2024-42236: Prevent OOB read/write in usb_string_copy() (bsc#1228964).
- CVE-2024-42244: Fix crash on resume (bsc#1228967).
- CVE-2024-43879: Handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
- CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
- CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).
- CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
- CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
- CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
- CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290).
- CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727).
- CVE-2021-47341: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (bsc#1224923).
- CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
- CVE-2022-48769: Avoid EFIv2 runtime services on Apple x86 machines (bsc#1226629).
- CVE-2024-43856: Fix call order in dmam_free_coherent (bsc#1229346).
- CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
- CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
- CVE-2024-40984: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (bsc#1227820).
- CVE-2024-26677: Blacklist e7870cf13d20 (' Fix delayed ACKs to not set the reference serial number') (bsc#1222387)
- CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
- CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
- CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357)
- CVE-2024-42310: Fix null pointer dereference in…
- Record
SUSE-SU-2024:3251-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3252-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579).
- CVE-2024-35933: Fixed a build regression (bsc#1224640).
- CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
- CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
- CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
- CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
- CVE-2024-43863: Fix a deadlock in dma buf fence polling (bsc#1229497)
- CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
- CVE-2024-43907: Fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
- CVE-2024-43905: Fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
- CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
- CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
- CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
- CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
- CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
- CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
- CVE-2022-48910: Ensure we call ipv6_mc_down() at most once (bsc#1229632)
- CVE-2023-52893: Fix null-deref in gsmi_get_variable (bsc#1229535)
- CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
- CVE-2022-48875: Initialize struct pn533_out_arg properly (bsc#1229516).
- CVE-2023-52907: Wait for out_urb's completion in pn533_usb_send_frame() (bsc#1229526).
- CVE-2024-43871: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490)
- CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
- CVE-2024-43872: Fix soft lockup under heavy CEQE load (bsc#1229489)
- CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
- CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
- CVE-2024-42236: Prevent OOB read/write in usb_string_copy() (bsc#1228964).
- CVE-2024-42244: Fix crash on resume (bsc#1228967).
- CVE-2024-43879: Handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
- CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
- CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).
- CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
- CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
- CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
- CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
- CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727 CVE-2024-42157 git-fixes).
- CVE-2021-47341: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (bsc#1224923).
- CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
- CVE-2022-48769: Avoid EFIv2 runtime services on Apple x86 machines (bsc#1226629).
- CVE-2024-43856: Fix call order in dmam_free_coherent (bsc#1229346).
- CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
- CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
- CVE-2024-40984: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (bsc#1227820).
- CVE-2024-26677: Blacklist e7870cf13d20 ('rxrpc: Fix delayed ACKs to not set the reference serial number') (bsc#1222387)
- CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
- CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
- CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357) -…
- Record
SUSE-SU-2024:3252-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:3383-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-43911: wifi: mac80211: fix NULL dereference at band check in starting tx ba session (bsc#1229827).
- CVE-2024-43899: drm/amd/display: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
- CVE-2024-43880: kabi: lib: objagg: Put back removed metod in struct objagg_ops (bsc#1229481).
- CVE-2024-43866: net/mlx5: Always drain health in shutdown callback (bsc#1229495).
- CVE-2024-43864: net/mlx5e: Fix CT entry update leaks of modify header context (bsc#1229496).
- CVE-2024-43855: md: fix deadlock between mddev_suspend and flush bio (bsc#1229342).
- CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media (bsc#1229345)
- CVE-2024-43850: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove (bsc#1229316).
- CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
- CVE-2024-43837: bpf: Fix updating attached freplace prog in prog_array map (bsc#1229297).
- CVE-2024-43834: xdp: fix invalid wait context of page_pool_destroy() (bsc#1229314)
- CVE-2024-43831: media: mediatek: vcodec: Handle invalid decoder vsi (bsc#1229309).
- CVE-2024-43821: scsi: lpfc: Fix a possible null pointer dereference (bsc#1229315).
- CVE-2024-42322: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347)
- CVE-2024-42318: landlock: Do not lose track of restrictions on cred_transfer (bsc#1229351).
- CVE-2024-42316: mm/mglru: fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
- CVE-2024-42312: sysctl: always initialize i_uid/i_gid (bsc#1229357)
- CVE-2024-42308: Update DRM patch reference (bsc#1229411)
- CVE-2024-42301: dev/parport: fix the array out-of-bounds risk (bsc#1229407).
- CVE-2024-42295: nilfs2: handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370).
- CVE-2024-42291: ice: Add a per-VF limit on number of FDIR filters (bsc#1229374).
- CVE-2024-42290: irqchip/imx-irqsteer: Handle runtime power management correctly (bsc#1229379).
- CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
- CVE-2024-42283: net: nexthop: Initialize all fields in dumped nexthops (bsc#1229383)
- CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386).
- CVE-2024-42277: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
- CVE-2024-42270: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404).
- CVE-2024-42269: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402).
- CVE-2024-42268: net/mlx5: Fix missing lock on sync reset reload (bsc#1229391).
- CVE-2024-42247: wireguard: allowedips: avoid unaligned 64-bit memory accesses (bsc#1228988).
- CVE-2024-42246: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).
- CVE-2024-42245: Revert 'sched/fair: Make sure to try to detach at least one movable task' (bsc#1228978).
- CVE-2024-42241: mm/shmem: disable PMD-sized page cache if needed (bsc#1228986).
- CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723).
- CVE-2024-42162: gve: Account for stopped queues when reading NIC stats (bsc#1228706).
- CVE-2024-42161: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756).
- CVE-2024-42159: scsi: mpi3mr: fix sanitise num_phys (bsc#1228754).
- CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
- CVE-2024-42157: s390/pkey: Wipe sensitive data on failure (bsc#1228727).
- CVE-2024-42156: s390/pkey: Wipe copies of clear-key structures on failure (bsc#1228722).
- CVE-2024-42155: s390/pkey: Wipe copies of protected- and secure-keys (bsc#1228733).
- CVE-2024-42148: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).
- CVE-2024-42145:…
- Record
SUSE-SU-2024:3383-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20044-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.
This release includes the first live patch.
The following security bugs were fixed:
- CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
- CVE-2023-52581: netfilter: nf_tables: fix memleak when more than 255 elements expired (bsc#1220877).
- CVE-2023-52859: perf: hisi: Fix use-after-free when register pmu fails (bsc#1225582).
- CVE-2023-52889: apparmor: Fix null pointer deref when receiving skb during sock creation (bsc#1229287,).
- CVE-2024-26590: erofs: fix inconsistent per-file compression format (bsc#1220252).
- CVE-2024-26631: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
- CVE-2024-26668: netfilter: nft_limit: reject configurations that cause integer overflow (bsc#1222335).
- CVE-2024-26669: kABI fix for net/sched: flower: Fix chain template offload (bsc#1222350).
- CVE-2024-26677: blacklist.conf: Add e7870cf13d20 ("rxrpc: Fix delayed ACKs to not set the reference serial number") (bsc#1222387)
- CVE-2024-26735: ipv6: sr: fix possible use-after-free and null-ptr-deref (bsc#1222372).
- CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
- CVE-2024-26809: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1222633).
- CVE-2024-26812: kABI: vfio: struct virqfd kABI workaround (bsc#1222808).
- CVE-2024-26835: netfilter: nf_tables: set dormant flag on hook register failure (bsc#1222967).
- CVE-2024-26837: net: bridge: switchdev: Skip MDB replays of deferred events on offload (bsc#1222973).
- CVE-2024-26851: netfilter: nf_conntrack_h323: Add protection for bmp length out of range (bsc#1223074)
- CVE-2024-27010: net/sched: Fix mirred deadlock on device recursion (bsc#1223720).
- CVE-2024-27011: netfilter: nf_tables: fix memleak in map from abort path (bsc#1223803).
- CVE-2024-27024: net/rds: fix WARNING in rds_conn_connect_if_down (bsc#1223777).
- CVE-2024-27079: iommu/vt-d: Fix NULL domain on device release (bsc#1223742).
- CVE-2024-27403: kabi: restore const specifier in flow_offload_route_init() (bsc#1224415).
- CVE-2024-27433: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
- CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
- CVE-2024-35897: netfilter: nf_tables: discard table flag update with pending basechain deletion (bsc#1224510).
- CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
- CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
- CVE-2024-36286: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
- CVE-2024-36489: tls: fix missing memory barrier in tls_init (bsc#1226874)
- CVE-2024-36881: mm/userfaultfd: reset ptes when close() for wr-protected ones (bsc#1225718).
- CVE-2024-36929: net: core: reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).
- CVE-2024-36933: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).
- CVE-2024-36979: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in bridge's mst code. (bsc#1226604).
- CVE-2024-38662: selftests/bpf: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).
- CVE-2024-39489: ipv6: sr: fix memleak in seg6_hmac_init_algo (bsc#1227623)
- CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
- CVE-2024-40905: ipv6: fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
- CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798).
- CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
- CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
- CVE-2024-40938: landlock: fix d_parent…
- Record
SUSE-SU-2025:20044-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20047-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
- CVE-2023-52581: netfilter: nf_tables: fix memleak when more than 255 elements expired (bsc#1220877).
- CVE-2023-52859: perf: hisi: Fix use-after-free when register pmu fails (bsc#1225582).
- CVE-2023-52889: apparmor: Fix null pointer deref when receiving skb during sock creation (bsc#1229287).
- CVE-2024-26590: erofs: fix inconsistent per-file compression format (bsc#1220252).
- CVE-2024-26631: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
- CVE-2024-26668: netfilter: nft_limit: reject configurations that cause integer overflow (bsc#1222335).
- CVE-2024-26669: kABI fix for net/sched: flower: Fix chain template offload (bsc#1222350).
- CVE-2024-26677: Blacklist e7870cf13d20 (" Fix delayed ACKs to not set the reference serial number") (bsc#1222387)
- CVE-2024-26735: ipv6: sr: fix possible use-after-free and null-ptr-deref (bsc#1222372).
- CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
- CVE-2024-26809: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1222633).
- CVE-2024-26812: kABI: vfio: struct virqfd kABI workaround (bsc#1222808).
- CVE-2024-26835: netfilter: nf_tables: set dormant flag on hook register failure (bsc#1222967).
- CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
- CVE-2024-26851: netfilter: nf_conntrack_h323: Add protection for bmp length out of range (bsc#1223074)
- CVE-2024-27010: net/sched: Fix mirred deadlock on device recursion (bsc#1223720).
- CVE-2024-27011: netfilter: nf_tables: fix memleak in map from abort path (bsc#1223803).
- CVE-2024-27024: net/rds: fix WARNING in rds_conn_connect_if_down (bsc#1223777).
- CVE-2024-27079: iommu/vt-d: Fix NULL domain on device release (bsc#1223742).
- CVE-2024-27403: kabi: restore const specifier in flow_offload_route_init() (bsc#1224415).
- CVE-2024-27433: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
- CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
- CVE-2024-35897: netfilter: nf_tables: discard table flag update with pending basechain deletion (bsc#1224510).
- CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
- CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
- CVE-2024-36286: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
- CVE-2024-36489: tls: fix missing memory barrier in tls_init (bsc#1226874)
- CVE-2024-36881: mm/userfaultfd: Fix reset ptes when close() for wr-protected (bsc#1225718).
- CVE-2024-36929: net: core: reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).
- CVE-2024-36933: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).
- CVE-2024-36979: net: bridge: mst: fix vlan use-after-free (bsc#1226604).
- CVE-2024-38662: selftests/bpf: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).
- CVE-2024-39489: ipv6: sr: fix memleak in seg6_hmac_init_algo (bsc#1227623)
- CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
- CVE-2024-40905: ipv6: fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
- CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798).
- CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
- CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
- CVE-2024-40938: landlock: fix d_parent walk (bsc#1227840).
- CVE-2024-40939: net: wwan: iosm: Fix tainted…
- Record
SUSE-SU-2025:20047-1- Updated
- 2026-11-02
OSVUSN-7088-1 No score
linux, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4 vulnerabilities
Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- PowerPC architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- ATM drivers;
- Drivers core;
- CPU frequency scaling framework;
- Device frequency scaling framework;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- InfiniBand drivers;
- Input Device core drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- EEPROM drivers;
- VMware VMCI Driver;
- MMC subsystem;
- Network drivers;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- QCOM SoC drivers;
- Direct Digital Synthesis drivers;
- TTY drivers;
- Userspace I/O drivers;
- DesignWare USB3 driver;
- USB subsystem;
- BTRFS file system;
- File systems infrastructure;
- Ext4 file system;
- F2FS file system;
- JFS file system;
- NILFS2 file system;
- BPF subsystem;
- Core kernel;
- DMA mapping infrastructure;
- Tracing infrastructure;
- Radix Tree data structure library;
- Kernel userspace event delivery library;
- Objagg library;
- Memory management;
- Amateur Radio drivers;
- Bluetooth subsystem;
- CAN network layer;
- Networking core;
- Ethtool driver;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- KCM (Kernel Connection Multiplexor) sockets driver;
- MAC80211 subsystem;
- Netfilter;
- Network traffic control;
- SCTP protocol;
- Sun RPC protocol;
- TIPC protocol;
- TLS protocol;
- Wireless networking;
- AppArmor security module;
- Simplified Mandatory Access Control Kernel framework;
- SoC audio core drivers;
- USB sound devices; (CVE-2024-43894, CVE-2024-46737, CVE-2024-46828, CVE-2024-42244, CVE-2024-46723, CVE-2024-41073, CVE-2024-46756, CVE-2024-42288, CVE-2024-46840, CVE-2024-46771, CVE-2024-46757, CVE-2024-43860, CVE-2024-46747, CVE-2024-41017, CVE-2024-42246, CVE-2024-44988, CVE-2024-42281, CVE-2024-36484, CVE-2024-43856, CVE-2024-47668, CVE-2024-46759, CVE-2024-46744, CVE-2024-42289, CVE-2024-42131, CVE-2024-46679, CVE-2024-42304, CVE-2024-46818, CVE-2024-43858, CVE-2024-44960, CVE-2024-45028, CVE-2024-26885, CVE-2024-46676, CVE-2024-46780, CVE-2024-42310, CVE-2024-44987, CVE-2024-41090, CVE-2024-44954, CVE-2024-45026, CVE-2024-42285, CVE-2023-52614, CVE-2024-27051, CVE-2024-43880, CVE-2024-43839, CVE-2024-43884, CVE-2024-42311, CVE-2024-43893, CVE-2024-41072, CVE-2024-41091, CVE-2024-46758, CVE-2024-41022, CVE-2024-46745, CVE-2024-42305, CVE-2024-46673, CVE-2024-42284, CVE-2024-46844, CVE-2024-46677, CVE-2024-45025, CVE-2024-43861, CVE-2024-43914, CVE-2024-46783, CVE-2024-41012, CVE-2024-44999, CVE-2024-44946, CVE-2024-42276, CVE-2024-46740, CVE-2024-42295, CVE-2024-44947, CVE-2024-41059, CVE-2024-26669, CVE-2024-38602, CVE-2024-42306, CVE-2023-52918, CVE-2024-42297, CVE-2024-42229, CVE-2024-43853, CVE-2024-45006, CVE-2024-44998, CVE-2024-42283, CVE-2024-44952, CVE-2024-46761, CVE-2024-43841, CVE-2024-44944, CVE-2024-42313, CVE-2024-45008, CVE-2024-46714, CVE-2024-41065, CVE-2024-43883, CVE-2024-43867, CVE-2024-42286, CVE-2024-43879, CVE-2024-43846, CVE-2024-42280, CVE-2024-43854, CVE-2021-47212, CVE-2024-35848, CVE-2024-41020, CVE-2024-41068, CVE-2024-45021, CVE-2024-41098, CVE-2024-44965, CVE-2024-43890,…
- Record
USN-7088-1- Updated
- 2026-11-02
OSVUSN-7088-2 No score
linux-azure, linux-bluefield vulnerabilities
Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- PowerPC architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- ATM drivers;
- Drivers core;
- CPU frequency scaling framework;
- Device frequency scaling framework;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- EEPROM drivers;
- VMware VMCI Driver;
- MMC subsystem;
- Network drivers;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- QCOM SoC drivers;
- Direct Digital Synthesis drivers;
- TTY drivers;
- Userspace I/O drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- BTRFS file system;
- File systems infrastructure;
- Ext4 file system;
- F2FS file system;
- JFS file system;
- NILFS2 file system;
- BPF subsystem;
- Core kernel;
- DMA mapping infrastructure;
- Tracing infrastructure;
- Radix Tree data structure library;
- Kernel userspace event delivery library;
- Objagg library;
- Memory management;
- Amateur Radio drivers;
- Bluetooth subsystem;
- CAN network layer;
- Networking core;
- Ethtool driver;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- KCM (Kernel Connection Multiplexor) sockets driver;
- MAC80211 subsystem;
- Netfilter;
- Network traffic control;
- SCTP protocol;
- Sun RPC protocol;
- TIPC protocol;
- TLS protocol;
- Wireless networking;
- AppArmor security module;
- Simplified Mandatory Access Control Kernel framework;
- SoC audio core drivers;
- USB sound devices; (CVE-2024-46714, CVE-2024-42288, CVE-2024-42290, CVE-2024-44987, CVE-2024-41090, CVE-2024-42313, CVE-2024-46689, CVE-2024-46737, CVE-2024-44946, CVE-2024-44999, CVE-2024-44935, CVE-2024-38602, CVE-2024-43883, CVE-2024-26607, CVE-2024-41091, CVE-2024-45025, CVE-2024-42305, CVE-2024-26891, CVE-2024-41073, CVE-2024-44969, CVE-2024-26641, CVE-2024-46719, CVE-2024-40929, CVE-2024-46721, CVE-2024-46740, CVE-2024-41012, CVE-2024-42280, CVE-2024-46738, CVE-2024-46722, CVE-2024-42246, CVE-2024-41063, CVE-2024-41072, CVE-2024-41068, CVE-2024-43884, CVE-2024-46758, CVE-2024-43861, CVE-2024-42306, CVE-2024-42285, CVE-2024-41065, CVE-2024-46818, CVE-2024-43894, CVE-2024-44954, CVE-2024-42310, CVE-2024-46829, CVE-2023-52614, CVE-2024-47663, CVE-2024-42281, CVE-2024-42297, CVE-2024-46800, CVE-2024-44960, CVE-2024-44952, CVE-2024-46747, CVE-2024-42286, CVE-2024-41071, CVE-2024-43893, CVE-2023-52531, CVE-2024-43860, CVE-2024-46840, CVE-2024-41011, CVE-2024-43890, CVE-2024-45026, CVE-2024-42292, CVE-2024-27051, CVE-2024-41015, CVE-2024-47668, CVE-2024-46817, CVE-2024-43846, CVE-2024-44988, CVE-2024-44944, CVE-2024-43829, CVE-2024-45021, CVE-2024-43914, CVE-2024-43856, CVE-2024-46673, CVE-2024-46771, CVE-2024-41081, CVE-2024-43830, CVE-2024-43839, CVE-2024-43853, CVE-2024-47669, CVE-2024-42244, CVE-2021-47212, CVE-2024-46844, CVE-2024-44965, CVE-2024-41059, CVE-2024-46783, CVE-2024-42295, CVE-2024-35848, CVE-2024-41017, CVE-2024-47659, CVE-2024-42309, CVE-2024-26800, CVE-2024-41064, CVE-2024-43879, CVE-2024-46679, CVE-2024-43854, CVE-2024-41022,…
- Record
USN-7088-2- Updated
- 2026-11-02
OSVUSN-7088-3 No score
linux-aws-5.4, linux-oracle-5.4 vulnerabilities
Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- PowerPC architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- ATM drivers;
- Drivers core;
- CPU frequency scaling framework;
- Device frequency scaling framework;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- EEPROM drivers;
- VMware VMCI Driver;
- MMC subsystem;
- Network drivers;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- QCOM SoC drivers;
- Direct Digital Synthesis drivers;
- TTY drivers;
- Userspace I/O drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- BTRFS file system;
- File systems infrastructure;
- Ext4 file system;
- F2FS file system;
- JFS file system;
- NILFS2 file system;
- BPF subsystem;
- Core kernel;
- DMA mapping infrastructure;
- Tracing infrastructure;
- Radix Tree data structure library;
- Kernel userspace event delivery library;
- Objagg library;
- Memory management;
- Amateur Radio drivers;
- Bluetooth subsystem;
- CAN network layer;
- Networking core;
- Ethtool driver;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- KCM (Kernel Connection Multiplexor) sockets driver;
- MAC80211 subsystem;
- Netfilter;
- Network traffic control;
- SCTP protocol;
- Sun RPC protocol;
- TIPC protocol;
- TLS protocol;
- Wireless networking;
- AppArmor security module;
- Simplified Mandatory Access Control Kernel framework;
- SoC audio core drivers;
- USB sound devices; (CVE-2021-47212, CVE-2024-44965, CVE-2024-46676, CVE-2024-41091, CVE-2024-44946, CVE-2024-43894, CVE-2024-26668, CVE-2024-42259, CVE-2024-42295, CVE-2024-46685, CVE-2024-46722, CVE-2024-45028, CVE-2024-46815, CVE-2024-41081, CVE-2024-41022, CVE-2024-44948, CVE-2024-42301, CVE-2024-43914, CVE-2024-46771, CVE-2024-42289, CVE-2024-43841, CVE-2024-41042, CVE-2024-44999, CVE-2024-43893, CVE-2024-46758, CVE-2024-46828, CVE-2024-36484, CVE-2024-26669, CVE-2024-44952, CVE-2024-42265, CVE-2024-42311, CVE-2024-43880, CVE-2024-41070, CVE-2024-46829, CVE-2024-42292, CVE-2024-46719, CVE-2024-41020, CVE-2024-41015, CVE-2024-42283, CVE-2024-46744, CVE-2024-46679, CVE-2024-46800, CVE-2024-46777, CVE-2024-43835, CVE-2024-42271, CVE-2024-43882, CVE-2024-41072, CVE-2024-35848, CVE-2024-43860, CVE-2024-38611, CVE-2024-26607, CVE-2024-47663, CVE-2024-46780, CVE-2024-46675, CVE-2024-45003, CVE-2024-44969, CVE-2024-42244, CVE-2024-43856, CVE-2024-46755, CVE-2024-42286, CVE-2024-41063, CVE-2024-41068, CVE-2024-46743, CVE-2024-43839, CVE-2024-41065, CVE-2023-52531, CVE-2024-41090, CVE-2024-46747, CVE-2023-52614, CVE-2024-43853, CVE-2024-46737, CVE-2024-45021, CVE-2024-41012, CVE-2024-41064, CVE-2024-26800, CVE-2024-42246, CVE-2024-43908, CVE-2024-46723, CVE-2024-42310, CVE-2024-46781, CVE-2023-52918, CVE-2024-42313, CVE-2024-45006, CVE-2024-43890, CVE-2024-44954, CVE-2024-43858, CVE-2024-41098, CVE-2024-41071, CVE-2024-26641, CVE-2024-42280, CVE-2024-46673, CVE-2024-43846, CVE-2024-46721, CVE-2024-47667, CVE-2024-26885, CVE-2024-42304, CVE-2024-46745,…
- Record
USN-7088-3- Updated
- 2026-11-02
OSVUSN-7088-4 No score
linux-aws, linux-azure-5.4, linux-kvm, linux-oracle, linux-xilinx-zynqmp vulnerabilities
Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- PowerPC architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- ATM drivers;
- Drivers core;
- CPU frequency scaling framework;
- Device frequency scaling framework;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- EEPROM drivers;
- VMware VMCI Driver;
- MMC subsystem;
- Network drivers;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- QCOM SoC drivers;
- Direct Digital Synthesis drivers;
- TTY drivers;
- Userspace I/O drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- BTRFS file system;
- File systems infrastructure;
- Ext4 file system;
- F2FS file system;
- JFS file system;
- NILFS2 file system;
- BPF subsystem;
- Core kernel;
- DMA mapping infrastructure;
- Tracing infrastructure;
- Radix Tree data structure library;
- Kernel userspace event delivery library;
- Objagg library;
- Memory management;
- Amateur Radio drivers;
- Bluetooth subsystem;
- CAN network layer;
- Networking core;
- Ethtool driver;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- KCM (Kernel Connection Multiplexor) sockets driver;
- MAC80211 subsystem;
- Netfilter;
- Network traffic control;
- SCTP protocol;
- Sun RPC protocol;
- TIPC protocol;
- TLS protocol;
- Wireless networking;
- AppArmor security module;
- Simplified Mandatory Access Control Kernel framework;
- SoC audio core drivers;
- USB sound devices; (CVE-2024-35848, CVE-2024-43853, CVE-2024-41017, CVE-2024-26607, CVE-2024-43839, CVE-2024-41072, CVE-2024-46815, CVE-2023-52614, CVE-2024-46798, CVE-2024-46676, CVE-2024-43914, CVE-2024-43841, CVE-2024-41012, CVE-2024-27051, CVE-2024-46738, CVE-2024-47663, CVE-2024-46723, CVE-2024-46740, CVE-2024-42287, CVE-2024-46750, CVE-2024-43894, CVE-2023-52531, CVE-2024-47668, CVE-2024-47669, CVE-2024-46685, CVE-2024-41011, CVE-2024-41064, CVE-2024-42305, CVE-2024-41073, CVE-2024-46829, CVE-2024-43860, CVE-2024-46679, CVE-2024-44999, CVE-2024-46817, CVE-2024-26800, CVE-2024-46689, CVE-2024-43908, CVE-2024-46739, CVE-2024-43893, CVE-2024-46828, CVE-2024-46777, CVE-2024-46721, CVE-2024-36484, CVE-2024-46822, CVE-2024-46840, CVE-2024-43880, CVE-2024-46781, CVE-2024-46673, CVE-2024-26669, CVE-2024-41098, CVE-2024-46737, CVE-2024-43871, CVE-2024-42281, CVE-2024-42301, CVE-2024-44995, CVE-2024-43879, CVE-2024-26668, CVE-2024-44965, CVE-2024-41068, CVE-2024-41059, CVE-2024-42229, CVE-2024-44987, CVE-2024-46745, CVE-2024-26891, CVE-2024-46719, CVE-2024-42292, CVE-2024-44952, CVE-2024-46756, CVE-2024-45028, CVE-2024-42283, CVE-2024-45025, CVE-2024-46743, CVE-2024-43867, CVE-2024-46771, CVE-2024-41081, CVE-2024-42244, CVE-2024-42284, CVE-2024-43858, CVE-2024-44998, CVE-2024-46758, CVE-2024-46800, CVE-2024-45003, CVE-2024-44935, CVE-2024-38611, CVE-2024-46844, CVE-2024-44954, CVE-2024-42313, CVE-2024-46783, CVE-2024-42311, CVE-2024-46761, CVE-2024-41022, CVE-2024-43829, CVE-2024-43835, CVE-2024-43846, CVE-2024-46755, CVE-2024-47667, CVE-2024-42259,…
- Record
USN-7088-4- Updated
- 2026-11-02
OSVUSN-7088-5 No score
linux-raspi, linux-raspi-5.4 vulnerabilities
Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- PowerPC architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- ATM drivers;
- Drivers core;
- CPU frequency scaling framework;
- Device frequency scaling framework;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- EEPROM drivers;
- VMware VMCI Driver;
- MMC subsystem;
- Network drivers;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- QCOM SoC drivers;
- Direct Digital Synthesis drivers;
- TTY drivers;
- Userspace I/O drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB Serial drivers;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- BTRFS file system;
- File systems infrastructure;
- Ext4 file system;
- F2FS file system;
- JFS file system;
- NILFS2 file system;
- BPF subsystem;
- Core kernel;
- DMA mapping infrastructure;
- Tracing infrastructure;
- Radix Tree data structure library;
- Kernel userspace event delivery library;
- Objagg library;
- Memory management;
- Amateur Radio drivers;
- Bluetooth subsystem;
- CAN network layer;
- Networking core;
- Ethtool driver;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- KCM (Kernel Connection Multiplexor) sockets driver;
- MAC80211 subsystem;
- Netfilter;
- Network traffic control;
- SCTP protocol;
- Sun RPC protocol;
- TIPC protocol;
- TLS protocol;
- Wireless networking;
- AppArmor security module;
- Simplified Mandatory Access Control Kernel framework;
- SoC audio core drivers;
- USB sound devices; (CVE-2024-42289, CVE-2024-26640, CVE-2024-42246, CVE-2024-43914, CVE-2024-46744, CVE-2024-45026, CVE-2024-41071, CVE-2024-43893, CVE-2024-46689, CVE-2024-41073, CVE-2024-42292, CVE-2024-43884, CVE-2024-42301, CVE-2024-43856, CVE-2024-46756, CVE-2024-46759, CVE-2024-27051, CVE-2024-26668, CVE-2024-46840, CVE-2024-42306, CVE-2024-41042, CVE-2024-45006, CVE-2024-42309, CVE-2024-26891, CVE-2024-42283, CVE-2024-46782, CVE-2024-44948, CVE-2024-43839, CVE-2024-47667, CVE-2024-44965, CVE-2024-42284, CVE-2024-44987, CVE-2024-46777, CVE-2024-41017, CVE-2024-46722, CVE-2024-41015, CVE-2024-46817, CVE-2024-46740, CVE-2024-43894, CVE-2024-26800, CVE-2024-45003, CVE-2024-46822, CVE-2024-26641, CVE-2024-44960, CVE-2024-44935, CVE-2024-42229, CVE-2024-42285, CVE-2024-44988, CVE-2024-46829, CVE-2024-41012, CVE-2024-46750, CVE-2024-43835, CVE-2024-43883, CVE-2024-43882, CVE-2024-46844, CVE-2024-41011, CVE-2024-44999, CVE-2024-46757, CVE-2024-42131, CVE-2024-46714, CVE-2024-41081, CVE-2024-45021, CVE-2024-46747, CVE-2024-46673, CVE-2024-46737, CVE-2024-43841, CVE-2024-42304, CVE-2024-45008, CVE-2024-42259, CVE-2024-42276, CVE-2024-46685, CVE-2024-46743, CVE-2023-52614, CVE-2024-42313, CVE-2024-41090, CVE-2024-46677, CVE-2024-43861, CVE-2024-42288, CVE-2024-43890, CVE-2024-41063, CVE-2024-43860, CVE-2024-47669, CVE-2024-42305, CVE-2024-43879, CVE-2024-42281, CVE-2024-46798, CVE-2024-42280, CVE-2024-42297, CVE-2024-42310,…
- Record
USN-7088-5- Updated
- 2026-11-02
OSVUSN-7089-1 No score
linux, linux-gcp-6.8, linux-hwe-6.8 vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- MIPS architecture;
- PA-RISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Serial ATA and Parallel ATA drivers;
- Null block device driver;
- Bluetooth drivers;
- Cdrom driver;
- Clock framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Cirrus firmware drivers;
- GPIO subsystem;
- GPU drivers;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- S/390 drivers;
- SCSI drivers;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- VFIO drivers;
- VHOST drivers;
- File systems infrastructure;
- BTRFS file system;
- GFS2 file system;
- JFFS2 file system;
- JFS file system;
- Network file systems library;
- Network file system client;
- NILFS2 file system;
- NTFS3 file system;
- SMB network file system;
- Memory management;
- Netfilter;
- Tracing infrastructure;
- io_uring subsystem;
- BPF subsystem;
- Core kernel;
- Bluetooth subsystem;
- CAN network layer;
- Ceph Core library;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- MAC80211 subsystem;
- Network traffic control;
- Sun RPC protocol;
- Wireless networking;
- AMD SoC Alsa drivers;
- SoC Audio for Freescale CPUs drivers;
- MediaTek ASoC drivers;
- SoC audio core drivers;
- SOF drivers;
- Sound sequencer drivers; (CVE-2024-42104, CVE-2024-42084, CVE-2024-42252, CVE-2024-41096, CVE-2024-42237, CVE-2024-42140, CVE-2024-42150, CVE-2024-41031, CVE-2024-41059, CVE-2024-41062, CVE-2024-41051, CVE-2024-41028, CVE-2024-41090, CVE-2024-41092, CVE-2024-43855, CVE-2024-41021, CVE-2024-42229, CVE-2024-41056, CVE-2024-41048, CVE-2024-41036, CVE-2024-42094, CVE-2024-41089, CVE-2024-41068, CVE-2024-41039, CVE-2024-41095, CVE-2024-41069, CVE-2024-42234, CVE-2024-42136, CVE-2024-41025, CVE-2024-42157, CVE-2024-42248, CVE-2024-42087, CVE-2024-41041, CVE-2024-42230, CVE-2024-42151, CVE-2024-42130, CVE-2024-42244, CVE-2024-41079, CVE-2024-42253, CVE-2024-42092, CVE-2024-41022, CVE-2024-42137, CVE-2024-42132, CVE-2024-42108, CVE-2024-42155, CVE-2024-42127, CVE-2024-41060, CVE-2024-42074, CVE-2024-41081, CVE-2024-42066, CVE-2024-42098, CVE-2024-42082, CVE-2024-42093, CVE-2024-42245, CVE-2024-41072, CVE-2024-41052, CVE-2024-42161, CVE-2024-42096, CVE-2024-42115, CVE-2024-41074, CVE-2024-42120, CVE-2024-41046, CVE-2024-42239, CVE-2024-41063, CVE-2024-42090, CVE-2024-41023, CVE-2024-42069, CVE-2024-41087, CVE-2024-42158, CVE-2024-41067, CVE-2024-41084, CVE-2024-41077, CVE-2024-42240, CVE-2024-42145, CVE-2024-42102, CVE-2024-41020, CVE-2024-42231, CVE-2024-41053, CVE-2024-42131, CVE-2024-42089, CVE-2024-41083, CVE-2024-42247, CVE-2024-42105, CVE-2024-41044, CVE-2024-42128, CVE-2024-42271, CVE-2024-41037, CVE-2024-42114, CVE-2024-42106, CVE-2024-41076, CVE-2024-42088, CVE-2024-41057, CVE-2024-41091, CVE-2024-42152, CVE-2024-41070, CVE-2024-41035, CVE-2024-41050, CVE-2024-39487, CVE-2024-42113, CVE-2024-42250, CVE-2024-41047,…
- Record
USN-7089-1- Updated
- 2026-11-02
OSVUSN-7089-2 No score
linux-azure, linux-gcp, linux-ibm vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- MIPS architecture;
- PA-RISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Serial ATA and Parallel ATA drivers;
- Null block device driver;
- Bluetooth drivers;
- Cdrom driver;
- Clock framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Cirrus firmware drivers;
- GPIO subsystem;
- GPU drivers;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- S/390 drivers;
- SCSI drivers;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- VFIO drivers;
- VHOST drivers;
- File systems infrastructure;
- BTRFS file system;
- GFS2 file system;
- JFFS2 file system;
- JFS file system;
- Network file systems library;
- Network file system client;
- NILFS2 file system;
- NTFS3 file system;
- SMB network file system;
- Memory management;
- Netfilter;
- Tracing infrastructure;
- io_uring subsystem;
- BPF subsystem;
- Core kernel;
- Bluetooth subsystem;
- CAN network layer;
- Ceph Core library;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- MAC80211 subsystem;
- Network traffic control;
- Sun RPC protocol;
- Wireless networking;
- AMD SoC Alsa drivers;
- SoC Audio for Freescale CPUs drivers;
- MediaTek ASoC drivers;
- SoC audio core drivers;
- SOF drivers;
- Sound sequencer drivers; (CVE-2024-42104, CVE-2024-42101, CVE-2024-41052, CVE-2024-42157, CVE-2024-41020, CVE-2024-41055, CVE-2024-42124, CVE-2023-52888, CVE-2024-42079, CVE-2024-43858, CVE-2024-41075, CVE-2024-42073, CVE-2024-42113, CVE-2024-42110, CVE-2024-41080, CVE-2024-42097, CVE-2024-41046, CVE-2024-42076, CVE-2024-41010, CVE-2024-41018, CVE-2024-42115, CVE-2024-41048, CVE-2024-42231, CVE-2024-42241, CVE-2024-41034, CVE-2024-42065, CVE-2024-42140, CVE-2024-42094, CVE-2024-41029, CVE-2024-42225, CVE-2024-41096, CVE-2024-42088, CVE-2024-41087, CVE-2023-52887, CVE-2024-42141, CVE-2024-42135, CVE-2024-42247, CVE-2024-39487, CVE-2024-42229, CVE-2024-42147, CVE-2024-42252, CVE-2024-41038, CVE-2024-41083, CVE-2024-42091, CVE-2024-42156, CVE-2024-42149, CVE-2024-41015, CVE-2024-41047, CVE-2024-42129, CVE-2024-42120, CVE-2024-41097, CVE-2024-42243, CVE-2024-42084, CVE-2024-42250, CVE-2024-41023, CVE-2024-41028, CVE-2024-42108, CVE-2024-41045, CVE-2024-42098, CVE-2024-41064, CVE-2024-42087, CVE-2024-42080, CVE-2024-41049, CVE-2024-42271, CVE-2024-41037, CVE-2024-42114, CVE-2024-41044, CVE-2024-42126, CVE-2024-42119, CVE-2024-42223, CVE-2024-42280, CVE-2024-42112, CVE-2024-41019, CVE-2024-42133, CVE-2024-42152, CVE-2024-41074, CVE-2024-41042, CVE-2024-41093, CVE-2024-41025, CVE-2024-42253, CVE-2024-42136, CVE-2024-42127, CVE-2024-41036, CVE-2024-42237, CVE-2024-42111, CVE-2024-41031, CVE-2024-41069, CVE-2024-41084, CVE-2024-41076, CVE-2024-41090, CVE-2024-41088, CVE-2024-41070, CVE-2024-42118, CVE-2024-42238, CVE-2024-42234, CVE-2024-41089, CVE-2024-41095, CVE-2024-41085, CVE-2024-42106, CVE-2024-42155, CVE-2024-42146,…
- Record
USN-7089-2- Updated
- 2026-11-02
OSVUSN-7089-3 No score
linux-aws, linux-aws-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- MIPS architecture;
- PA-RISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Serial ATA and Parallel ATA drivers;
- Null block device driver;
- Bluetooth drivers;
- Cdrom driver;
- Clock framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Cirrus firmware drivers;
- GPIO subsystem;
- GPU drivers;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- S/390 drivers;
- SCSI drivers;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- VFIO drivers;
- VHOST drivers;
- File systems infrastructure;
- BTRFS file system;
- GFS2 file system;
- JFFS2 file system;
- JFS file system;
- Network file systems library;
- Network file system client;
- NILFS2 file system;
- NTFS3 file system;
- SMB network file system;
- Memory management;
- Netfilter;
- Tracing infrastructure;
- io_uring subsystem;
- BPF subsystem;
- Core kernel;
- Bluetooth subsystem;
- CAN network layer;
- Ceph Core library;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- MAC80211 subsystem;
- Network traffic control;
- Sun RPC protocol;
- Wireless networking;
- AMD SoC Alsa drivers;
- SoC Audio for Freescale CPUs drivers;
- MediaTek ASoC drivers;
- SoC audio core drivers;
- SOF drivers;
- Sound sequencer drivers; (CVE-2024-42239, CVE-2024-42079, CVE-2024-41080, CVE-2024-42064, CVE-2024-42127, CVE-2024-41049, CVE-2024-41086, CVE-2024-42142, CVE-2024-42244, CVE-2024-41060, CVE-2024-42131, CVE-2024-42085, CVE-2024-42246, CVE-2024-41062, CVE-2024-42115, CVE-2024-42234, CVE-2024-42080, CVE-2024-41095, CVE-2024-41063, CVE-2024-42227, CVE-2024-41089, CVE-2024-42133, CVE-2024-43858, CVE-2024-42135, CVE-2024-42113, CVE-2024-42120, CVE-2024-42149, CVE-2024-42132, CVE-2024-41038, CVE-2024-41069, CVE-2024-41090, CVE-2024-41059, CVE-2024-41028, CVE-2024-42126, CVE-2024-42121, CVE-2024-42155, CVE-2024-42110, CVE-2024-41021, CVE-2024-41044, CVE-2024-42098, CVE-2024-42235, CVE-2024-41083, CVE-2024-41065, CVE-2024-42094, CVE-2024-42229, CVE-2024-42240, CVE-2024-42225, CVE-2024-42230, CVE-2024-41088, CVE-2024-42073, CVE-2024-42145, CVE-2024-42076, CVE-2024-42087, CVE-2024-42241, CVE-2024-41019, CVE-2024-41052, CVE-2024-42093, CVE-2024-42063, CVE-2024-41039, CVE-2024-42106, CVE-2024-42108, CVE-2024-42237, CVE-2024-41048, CVE-2024-41033, CVE-2023-52888, CVE-2024-41096, CVE-2024-41032, CVE-2024-41091, CVE-2024-42238, CVE-2024-41056, CVE-2024-42091, CVE-2024-42088, CVE-2024-41047, CVE-2024-42271, CVE-2024-41064, CVE-2024-42223, CVE-2024-42129, CVE-2024-42102, CVE-2024-42146, CVE-2024-42138, CVE-2024-41079, CVE-2024-42232, CVE-2024-42112, CVE-2024-39487, CVE-2024-42245, CVE-2024-41093, CVE-2024-41066, CVE-2024-43855, CVE-2024-41055, CVE-2024-42100, CVE-2024-41053, CVE-2024-42069, CVE-2024-42252, CVE-2024-42243, CVE-2024-42124, CVE-2024-41054, CVE-2024-42151, CVE-2024-42118, CVE-2024-42251, CVE-2024-42137, CVE-2024-41071,…
- Record
USN-7089-3- Updated
- 2026-11-02
OSVUSN-7089-4 No score
linux-oem-6.8 vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- MIPS architecture;
- PA-RISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Serial ATA and Parallel ATA drivers;
- Null block device driver;
- Bluetooth drivers;
- Cdrom driver;
- Clock framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Cirrus firmware drivers;
- GPIO subsystem;
- GPU drivers;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- S/390 drivers;
- SCSI drivers;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- VFIO drivers;
- VHOST drivers;
- File systems infrastructure;
- BTRFS file system;
- GFS2 file system;
- JFFS2 file system;
- JFS file system;
- Network file systems library;
- Network file system client;
- NILFS2 file system;
- NTFS3 file system;
- SMB network file system;
- Memory management;
- Netfilter;
- Tracing infrastructure;
- io_uring subsystem;
- BPF subsystem;
- Core kernel;
- Bluetooth subsystem;
- CAN network layer;
- Ceph Core library;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- MAC80211 subsystem;
- Network traffic control;
- Sun RPC protocol;
- Wireless networking;
- AMD SoC Alsa drivers;
- SoC Audio for Freescale CPUs drivers;
- MediaTek ASoC drivers;
- SoC audio core drivers;
- SOF drivers;
- Sound sequencer drivers; (CVE-2024-41064, CVE-2024-41087, CVE-2023-52888, CVE-2024-42098, CVE-2024-42111, CVE-2024-42076, CVE-2024-42088, CVE-2024-42135, CVE-2024-42145, CVE-2024-42142, CVE-2024-41036, CVE-2024-41071, CVE-2024-41012, CVE-2024-42091, CVE-2024-42253, CVE-2024-42119, CVE-2024-42097, CVE-2024-42243, CVE-2024-39487, CVE-2024-42235, CVE-2024-42120, CVE-2024-42149, CVE-2024-41015, CVE-2024-41074, CVE-2024-42067, CVE-2024-42090, CVE-2024-42128, CVE-2024-41038, CVE-2024-42113, CVE-2024-42102, CVE-2024-42231, CVE-2024-42080, CVE-2024-42241, CVE-2024-42106, CVE-2024-42130, CVE-2024-42073, CVE-2024-42153, CVE-2024-42156, CVE-2024-42118, CVE-2024-41007, CVE-2024-41049, CVE-2024-39486, CVE-2024-42240, CVE-2024-41018, CVE-2024-42251, CVE-2024-42280, CVE-2024-42096, CVE-2024-42121, CVE-2024-42246, CVE-2024-42092, CVE-2024-41090, CVE-2024-42157, CVE-2024-43858, CVE-2024-42150, CVE-2024-42110, CVE-2024-41010, CVE-2024-41081, CVE-2024-41061, CVE-2024-41078, CVE-2024-41094, CVE-2024-41039, CVE-2024-42114, CVE-2024-42109, CVE-2024-41030, CVE-2024-42066, CVE-2024-41035, CVE-2024-42146, CVE-2024-42131, CVE-2024-41059, CVE-2024-41067, CVE-2024-42138, CVE-2024-41050, CVE-2024-41034, CVE-2024-41077, CVE-2024-41076, CVE-2024-41088, CVE-2024-41096, CVE-2024-41073, CVE-2024-41037, CVE-2024-42232, CVE-2024-41063, CVE-2024-42117, CVE-2024-42155, CVE-2024-41080, CVE-2024-42132, CVE-2024-42084, CVE-2024-42136, CVE-2024-42223, CVE-2024-41068, CVE-2024-42225, CVE-2024-42065, CVE-2024-41051, CVE-2024-43855, CVE-2024-42238, CVE-2024-42250, CVE-2024-42112, CVE-2024-41070, CVE-2023-52887, CVE-2024-42094, CVE-2024-42095, CVE-2024-41086,…
- Record
USN-7089-4- Updated
- 2026-11-02
OSVUSN-7089-5 No score
linux-raspi vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- MIPS architecture;
- PA-RISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Serial ATA and Parallel ATA drivers;
- Null block device driver;
- Bluetooth drivers;
- Cdrom driver;
- Clock framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Cirrus firmware drivers;
- GPIO subsystem;
- GPU drivers;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- S/390 drivers;
- SCSI drivers;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- VFIO drivers;
- VHOST drivers;
- File systems infrastructure;
- BTRFS file system;
- GFS2 file system;
- JFFS2 file system;
- JFS file system;
- Network file systems library;
- Network file system client;
- NILFS2 file system;
- NTFS3 file system;
- SMB network file system;
- Memory management;
- Netfilter;
- Tracing infrastructure;
- io_uring subsystem;
- BPF subsystem;
- Core kernel;
- Bluetooth subsystem;
- CAN network layer;
- Ceph Core library;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- MAC80211 subsystem;
- Network traffic control;
- Sun RPC protocol;
- Wireless networking;
- AMD SoC Alsa drivers;
- SoC Audio for Freescale CPUs drivers;
- MediaTek ASoC drivers;
- SoC audio core drivers;
- SOF drivers;
- Sound sequencer drivers; (CVE-2024-42223, CVE-2024-42244, CVE-2024-42105, CVE-2024-42100, CVE-2024-42235, CVE-2024-41007, CVE-2024-41047, CVE-2024-42088, CVE-2024-42079, CVE-2024-41053, CVE-2024-41094, CVE-2024-42227, CVE-2024-42253, CVE-2024-42150, CVE-2024-41049, CVE-2024-42096, CVE-2024-42093, CVE-2024-41079, CVE-2024-41037, CVE-2024-42129, CVE-2024-41031, CVE-2024-39486, CVE-2024-41065, CVE-2024-42101, CVE-2024-41082, CVE-2024-42135, CVE-2024-42236, CVE-2024-41078, CVE-2024-42098, CVE-2024-41056, CVE-2024-41096, CVE-2024-41074, CVE-2024-42246, CVE-2024-42137, CVE-2024-42232, CVE-2024-42121, CVE-2024-41093, CVE-2024-41076, CVE-2024-42157, CVE-2024-41062, CVE-2024-42104, CVE-2024-42085, CVE-2024-41092, CVE-2024-41034, CVE-2024-41036, CVE-2024-41072, CVE-2024-41012, CVE-2024-39487, CVE-2024-42124, CVE-2024-42065, CVE-2024-41061, CVE-2024-41064, CVE-2024-41091, CVE-2024-42119, CVE-2024-41088, CVE-2024-42089, CVE-2024-41048, CVE-2024-41032, CVE-2024-41020, CVE-2024-42066, CVE-2024-42068, CVE-2024-42238, CVE-2024-41069, CVE-2024-41044, CVE-2024-41025, CVE-2024-42161, CVE-2023-52887, CVE-2024-42127, CVE-2024-42239, CVE-2024-42149, CVE-2024-42091, CVE-2024-42097, CVE-2024-41054, CVE-2024-41041, CVE-2024-42131, CVE-2024-41089, CVE-2024-41018, CVE-2024-42067, CVE-2024-41039, CVE-2024-42128, CVE-2024-42248, CVE-2024-41090, CVE-2024-42073, CVE-2024-43858, CVE-2024-42225, CVE-2024-42077, CVE-2024-42247, CVE-2024-42109, CVE-2024-41045, CVE-2024-41019, CVE-2024-42231, CVE-2024-41017, CVE-2024-42145, CVE-2024-41046, CVE-2024-42063, CVE-2024-41087, CVE-2024-41033, CVE-2024-41021, CVE-2024-42241, CVE-2024-42229, CVE-2024-41015,…
- Record
USN-7089-5- Updated
- 2026-11-02
OSVUSN-7089-6 No score
linux-gke vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- MIPS architecture;
- PA-RISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Serial ATA and Parallel ATA drivers;
- Null block device driver;
- Bluetooth drivers;
- Cdrom driver;
- Clock framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Cirrus firmware drivers;
- GPIO subsystem;
- GPU drivers;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- S/390 drivers;
- SCSI drivers;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- VFIO drivers;
- VHOST drivers;
- File systems infrastructure;
- BTRFS file system;
- GFS2 file system;
- JFFS2 file system;
- JFS file system;
- Network file systems library;
- Network file system client;
- NILFS2 file system;
- NTFS3 file system;
- SMB network file system;
- Memory management;
- Netfilter;
- Tracing infrastructure;
- io_uring subsystem;
- BPF subsystem;
- Core kernel;
- Bluetooth subsystem;
- CAN network layer;
- Ceph Core library;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- MAC80211 subsystem;
- Network traffic control;
- Sun RPC protocol;
- Wireless networking;
- AMD SoC Alsa drivers;
- SoC Audio for Freescale CPUs drivers;
- MediaTek ASoC drivers;
- SoC audio core drivers;
- SOF drivers;
- Sound sequencer drivers; (CVE-2024-41062, CVE-2024-41029, CVE-2024-42142, CVE-2024-41070, CVE-2024-41066, CVE-2024-42150, CVE-2024-42120, CVE-2023-52888, CVE-2024-42141, CVE-2024-41032, CVE-2024-42245, CVE-2024-41053, CVE-2024-42247, CVE-2024-42161, CVE-2024-42094, CVE-2024-41072, CVE-2024-42076, CVE-2024-42091, CVE-2024-42103, CVE-2024-41007, CVE-2024-42064, CVE-2024-41075, CVE-2024-42157, CVE-2024-42069, CVE-2024-41045, CVE-2024-42068, CVE-2024-42090, CVE-2024-41071, CVE-2024-42082, CVE-2024-42146, CVE-2024-41018, CVE-2024-42238, CVE-2024-41079, CVE-2024-42241, CVE-2024-42067, CVE-2024-42132, CVE-2024-42121, CVE-2024-41025, CVE-2024-42231, CVE-2024-42225, CVE-2024-41080, CVE-2024-41086, CVE-2024-41012, CVE-2024-42234, CVE-2024-41088, CVE-2024-42129, CVE-2024-42158, CVE-2024-41078, CVE-2024-41038, CVE-2024-41055, CVE-2024-42106, CVE-2024-42227, CVE-2024-42102, CVE-2024-41082, CVE-2024-42108, CVE-2024-41085, CVE-2024-41020, CVE-2024-41054, CVE-2024-42085, CVE-2024-42140, CVE-2024-42089, CVE-2024-41047, CVE-2024-42092, CVE-2024-41044, CVE-2024-42246, CVE-2024-41035, CVE-2024-42250, CVE-2024-42070, CVE-2024-41039, CVE-2024-41061, CVE-2024-42147, CVE-2024-42104, CVE-2024-41090, CVE-2024-41096, CVE-2024-41063, CVE-2024-41084, CVE-2024-41059, CVE-2024-41097, CVE-2024-41089, CVE-2024-42093, CVE-2024-42126, CVE-2024-42135, CVE-2024-42128, CVE-2024-42098, CVE-2024-42105, CVE-2024-42124, CVE-2024-42101, CVE-2024-41091, CVE-2024-42127, CVE-2024-41077, CVE-2024-42111, CVE-2024-41037, CVE-2024-42136, CVE-2024-41083, CVE-2024-42243, CVE-2024-41033, CVE-2024-41046, CVE-2024-42230, CVE-2024-42080, CVE-2024-42096, CVE-2024-42100,…
- Record
USN-7089-6- Updated
- 2026-11-02
OSVUSN-7089-7 No score
linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- MIPS architecture;
- PA-RISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Serial ATA and Parallel ATA drivers;
- Null block device driver;
- Bluetooth drivers;
- Cdrom driver;
- Clock framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Cirrus firmware drivers;
- GPIO subsystem;
- GPU drivers;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- S/390 drivers;
- SCSI drivers;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- VFIO drivers;
- VHOST drivers;
- File systems infrastructure;
- BTRFS file system;
- GFS2 file system;
- JFFS2 file system;
- JFS file system;
- Network file systems library;
- Network file system client;
- NILFS2 file system;
- NTFS3 file system;
- SMB network file system;
- Memory management;
- Netfilter;
- Tracing infrastructure;
- io_uring subsystem;
- BPF subsystem;
- Core kernel;
- Bluetooth subsystem;
- CAN network layer;
- Ceph Core library;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- MAC80211 subsystem;
- Network traffic control;
- Sun RPC protocol;
- Wireless networking;
- AMD SoC Alsa drivers;
- SoC Audio for Freescale CPUs drivers;
- MediaTek ASoC drivers;
- SoC audio core drivers;
- SOF drivers;
- Sound sequencer drivers; (CVE-2024-42104, CVE-2024-42084, CVE-2024-42252, CVE-2024-41096, CVE-2024-42237, CVE-2024-42140, CVE-2024-42150, CVE-2024-41031, CVE-2024-41059, CVE-2024-41062, CVE-2024-41051, CVE-2024-41028, CVE-2024-41090, CVE-2024-41092, CVE-2024-43855, CVE-2024-41021, CVE-2024-42229, CVE-2024-41056, CVE-2024-41048, CVE-2024-41036, CVE-2024-42094, CVE-2024-41089, CVE-2024-41068, CVE-2024-41039, CVE-2024-41095, CVE-2024-41069, CVE-2024-42234, CVE-2024-42136, CVE-2024-41025, CVE-2024-42157, CVE-2024-42248, CVE-2024-42087, CVE-2024-41041, CVE-2024-42230, CVE-2024-42151, CVE-2024-42130, CVE-2024-42244, CVE-2024-41079, CVE-2024-42253, CVE-2024-42092, CVE-2024-41022, CVE-2024-42137, CVE-2024-42132, CVE-2024-42108, CVE-2024-42155, CVE-2024-42127, CVE-2024-41060, CVE-2024-42074, CVE-2024-41081, CVE-2024-42066, CVE-2024-42098, CVE-2024-42082, CVE-2024-42093, CVE-2024-42245, CVE-2024-41072, CVE-2024-41052, CVE-2024-42161, CVE-2024-42096, CVE-2024-42115, CVE-2024-41074, CVE-2024-42120, CVE-2024-41046, CVE-2024-42239, CVE-2024-41063, CVE-2024-42090, CVE-2024-41023, CVE-2024-42069, CVE-2024-41087, CVE-2024-42158, CVE-2024-41067, CVE-2024-41084, CVE-2024-41077, CVE-2024-42240, CVE-2024-42145, CVE-2024-42102, CVE-2024-41020, CVE-2024-42231, CVE-2024-41053, CVE-2024-42131, CVE-2024-42089, CVE-2024-41083, CVE-2024-42247, CVE-2024-42105, CVE-2024-41044, CVE-2024-42128, CVE-2024-42271, CVE-2024-41037, CVE-2024-42114, CVE-2024-42106, CVE-2024-41076, CVE-2024-42088, CVE-2024-41057, CVE-2024-41091, CVE-2024-42152, CVE-2024-41070, CVE-2024-41035, CVE-2024-41050, CVE-2024-39487, CVE-2024-42113, CVE-2024-42250, CVE-2024-41047,…
- Record
USN-7089-7- Updated
- 2026-11-02
OSVUSN-7090-1 No score
linux-azure-6.8 vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- MIPS architecture;
- PA-RISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Serial ATA and Parallel ATA drivers;
- Null block device driver;
- Bluetooth drivers;
- Cdrom driver;
- Clock framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Cirrus firmware drivers;
- GPIO subsystem;
- GPU drivers;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- S/390 drivers;
- SCSI drivers;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- VFIO drivers;
- VHOST drivers;
- File systems infrastructure;
- BTRFS file system;
- GFS2 file system;
- JFFS2 file system;
- JFS file system;
- Network file systems library;
- Network file system client;
- NILFS2 file system;
- NTFS3 file system;
- SMB network file system;
- Memory management;
- Netfilter;
- Tracing infrastructure;
- io_uring subsystem;
- BPF subsystem;
- Core kernel;
- Bluetooth subsystem;
- CAN network layer;
- Ceph Core library;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- MAC80211 subsystem;
- Network traffic control;
- Sun RPC protocol;
- Wireless networking;
- AMD SoC Alsa drivers;
- SoC Audio for Freescale CPUs drivers;
- MediaTek ASoC drivers;
- SoC audio core drivers;
- SOF drivers;
- Sound sequencer drivers; (CVE-2024-42064, CVE-2024-43858, CVE-2024-42251, CVE-2024-42113, CVE-2024-41020, CVE-2024-41093, CVE-2024-45016, CVE-2024-42150, CVE-2024-42069, CVE-2024-42157, CVE-2024-42126, CVE-2024-42144, CVE-2024-42093, CVE-2024-41035, CVE-2024-41032, CVE-2024-41077, CVE-2024-42097, CVE-2024-41071, CVE-2024-42227, CVE-2024-42253, CVE-2024-42237, CVE-2024-41060, CVE-2024-42080, CVE-2024-42068, CVE-2024-41058, CVE-2024-42140, CVE-2024-42231, CVE-2024-42127, CVE-2024-42243, CVE-2023-52887, CVE-2024-39486, CVE-2024-41063, CVE-2024-42128, CVE-2024-42074, CVE-2024-41028, CVE-2024-42110, CVE-2024-45001, CVE-2024-41090, CVE-2024-41084, CVE-2024-41088, CVE-2024-42118, CVE-2024-41094, CVE-2024-41091, CVE-2024-41007, CVE-2024-42280, CVE-2024-41044, CVE-2024-41012, CVE-2024-42063, CVE-2024-41078, CVE-2024-42082, CVE-2024-41055, CVE-2024-41031, CVE-2024-42142, CVE-2024-41083, CVE-2024-42145, CVE-2024-41039, CVE-2024-41019, CVE-2024-42149, CVE-2024-42248, CVE-2024-42111, CVE-2024-41074, CVE-2024-42096, CVE-2024-42100, CVE-2024-41010, CVE-2024-43855, CVE-2024-42136, CVE-2024-41054, CVE-2024-41053, CVE-2024-41061, CVE-2024-42104, CVE-2024-41025, CVE-2024-42129, CVE-2024-41086, CVE-2024-42133, CVE-2024-42115, CVE-2024-42158, CVE-2024-42091, CVE-2024-42088, CVE-2024-42161, CVE-2024-42236, CVE-2024-41065, CVE-2024-41062, CVE-2024-42153, CVE-2024-41030, CVE-2024-41079, CVE-2023-52888, CVE-2024-42223, CVE-2024-42119, CVE-2024-42238, CVE-2024-41052, CVE-2024-41064, CVE-2024-42138, CVE-2024-41081, CVE-2024-41034, CVE-2024-42147, CVE-2024-41095, CVE-2024-42132, CVE-2024-42137, CVE-2024-42106, CVE-2024-41041, CVE-2024-41073,…
- Record
USN-7090-1- Updated
- 2026-11-02
OSVUSN-7095-1 No score
linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities
Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM32 architecture;
- MIPS architecture;
- PA-RISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Serial ATA and Parallel ATA drivers;
- Null block device driver;
- Bluetooth drivers;
- Cdrom driver;
- Clock framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- Cirrus firmware drivers;
- GPIO subsystem;
- GPU drivers;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- NVMEM (Non Volatile Memory) drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- S/390 drivers;
- SCSI drivers;
- Thermal drivers;
- TTY drivers;
- UFS subsystem;
- USB DSL drivers;
- USB core drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Serial drivers;
- VFIO drivers;
- VHOST drivers;
- File systems infrastructure;
- BTRFS file system;
- GFS2 file system;
- JFFS2 file system;
- JFS file system;
- Network file systems library;
- Network file system client;
- NILFS2 file system;
- NTFS3 file system;
- SMB network file system;
- Memory management;
- Netfilter;
- Tracing infrastructure;
- io_uring subsystem;
- BPF subsystem;
- Core kernel;
- Bluetooth subsystem;
- CAN network layer;
- Ceph Core library;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- MAC80211 subsystem;
- Network traffic control;
- Sun RPC protocol;
- Wireless networking;
- AMD SoC Alsa drivers;
- SoC Audio for Freescale CPUs drivers;
- MediaTek ASoC drivers;
- SoC audio core drivers;
- SOF drivers;
- Sound sequencer drivers; (CVE-2024-42271, CVE-2024-42068, CVE-2024-42086, CVE-2024-42132, CVE-2024-42074, CVE-2024-41017, CVE-2024-42090, CVE-2024-42280, CVE-2024-41030, CVE-2024-41037, CVE-2024-42248, CVE-2024-42084, CVE-2024-41057, CVE-2024-42252, CVE-2024-41055, CVE-2024-42158, CVE-2024-42097, CVE-2024-42101, CVE-2024-42095, CVE-2024-41084, CVE-2024-41051, CVE-2024-41032, CVE-2024-41046, CVE-2024-42231, CVE-2024-42133, CVE-2024-42089, CVE-2024-41062, CVE-2024-41033, CVE-2024-41012, CVE-2024-41077, CVE-2024-41064, CVE-2024-41082, CVE-2024-41090, CVE-2024-42065, CVE-2024-41096, CVE-2024-42119, CVE-2024-41054, CVE-2024-42064, CVE-2024-42253, CVE-2024-42237, CVE-2024-42120, CVE-2024-41066, CVE-2024-41083, CVE-2024-42129, CVE-2024-41085, CVE-2024-41058, CVE-2024-42146, CVE-2024-42156, CVE-2024-42076, CVE-2024-42149, CVE-2024-42069, CVE-2024-41039, CVE-2024-42110, CVE-2024-42150, CVE-2024-41015, CVE-2024-39486, CVE-2024-42144, CVE-2024-42131, CVE-2024-42087, CVE-2024-42091, CVE-2024-42236, CVE-2024-42088, CVE-2024-42112, CVE-2024-42142, CVE-2024-42082, CVE-2024-42111, CVE-2024-41028, CVE-2024-45001, CVE-2024-42077, CVE-2024-42102, CVE-2024-42239, CVE-2024-42140, CVE-2024-41091, CVE-2024-41050, CVE-2024-41034, CVE-2024-43858, CVE-2024-42145, CVE-2024-42227, CVE-2024-41029, CVE-2024-42230, CVE-2024-42096, CVE-2024-42238, CVE-2024-41027, CVE-2024-42063, CVE-2024-41023, CVE-2024-41041, CVE-2024-41038, CVE-2024-41073, CVE-2024-41067, CVE-2024-41025, CVE-2024-42152, CVE-2024-42247, CVE-2024-41065, CVE-2024-42121, CVE-2024-42157, CVE-2024-42080, CVE-2024-41076, CVE-2024-41059, CVE-2024-42108, CVE-2024-42251, CVE-2024-42093,…
- Record
USN-7095-1- Updated
- 2026-11-02
OSVUSN-7100-1 No score
linux, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi, linux-xilinx-zynqmp vulnerabilities
Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- ATM drivers;
- Drivers core;
- Null block device driver;
- Character device driver;
- ARM SCMI message protocol;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I3C subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- ISDN/mISDN subsystem;
- LED subsystem;
- Multiple devices driver;
- Media drivers;
- VMware VMCI Driver;
- MMC subsystem;
- Network drivers;
- Near Field Communication (NFC) drivers;
- NVME drivers;
- Device tree and open firmware driver;
- Parport drivers;
- PCI subsystem;
- Pin controllers subsystem;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI drivers;
- QCOM SoC drivers;
- Direct Digital Synthesis drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- Userspace I/O drivers;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- VHOST drivers;
- File systems infrastructure;
- BTRFS file system;
- Ext4 file system;
- F2FS file system;
- JFS file system;
- NILFS2 file system;
- NTFS3 file system;
- Proc file system;
- SMB network file system;
- Core kernel;
- DMA mapping infrastructure;
- RCU subsystem;
- Tracing infrastructure;
- Radix Tree data structure library;
- Kernel userspace event delivery library;
- Objagg library;
- Memory management;
- Amateur Radio drivers;
- Bluetooth subsystem;
- Ethernet bridge;
- CAN network layer;
- Networking core;
- Ethtool driver;
- IPv4 networking;
- IPv6 networking;
- IUCV driver;
- KCM (Kernel Connection Multiplexor) sockets driver;
- MAC80211 subsystem;
- Multipath TCP;
- Netfilter;
- Network traffic control;
- SCTP protocol;
- Sun RPC protocol;
- TIPC protocol;
- TLS protocol;
- Wireless networking;
- AppArmor security module;
- Landlock security;
- Simplified Mandatory Access Control Kernel framework;
- FireWire sound drivers;
- SoC audio core drivers;
- USB sound devices; (CVE-2024-43817, CVE-2024-42304, CVE-2024-46756, CVE-2024-42318, CVE-2024-41090, CVE-2024-41063, CVE-2024-44987, CVE-2024-46844, CVE-2024-46677, CVE-2024-44988, CVE-2024-42297, CVE-2024-26893, CVE-2024-46673, CVE-2024-26800, CVE-2024-42305, CVE-2024-46731, CVE-2024-41091, CVE-2024-46810, CVE-2024-41072, CVE-2022-48666, CVE-2024-38602, CVE-2024-46780, CVE-2024-46750, CVE-2024-43858, CVE-2024-41020, CVE-2024-46755, CVE-2024-46829, CVE-2024-41068, CVE-2024-45003, CVE-2024-42280, CVE-2024-42283, CVE-2024-43873, CVE-2024-46746, CVE-2024-44969, CVE-2024-46807, CVE-2024-41081, CVE-2024-44971, CVE-2024-26607, CVE-2024-43880, CVE-2024-42281, CVE-2024-42274, CVE-2024-43908, CVE-2024-42267, CVE-2024-47665, CVE-2024-45011, CVE-2024-46707, CVE-2024-42310, CVE-2024-42309, CVE-2024-44965, CVE-2024-46747, CVE-2024-42259, CVE-2024-46804, CVE-2024-46679, CVE-2024-45007, CVE-2024-45009, CVE-2024-46771, CVE-2024-46739, CVE-2024-41060, CVE-2024-46676, CVE-2024-46822, CVE-2024-42272, CVE-2024-41059, CVE-2024-43839, CVE-2024-46817, CVE-2024-47669,…
- Record
USN-7100-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bpftoolAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernelAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-abi-stablelistsAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-coreAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-cross-headersAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-debugAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-debug-coreAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-debug-develAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-debug-modulesAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-debug-modules-extraAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-docAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-headersAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-modulesAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-modules-extraAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-toolsAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-tools-libsAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-tools-libs-develAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-zfcpdumpAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-zfcpdump-coreAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-zfcpdump-develAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-zfcpdump-modulesAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-zfcpdump-modules-extraAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
perfAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
python3-perfAlmaLinux:8 From an advisory covering 145 CVEs |
before 4.18.0-553.22.1.el8_10 | 4.18.0-553.22.1.el8_10 |
kernel-rtAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-coreAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debugAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debug-coreAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debug-develAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debug-kvmAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debug-modulesAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debug-modules-extraAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-develAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-kvmAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-modulesAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-modules-extraAlmaLinux:8 From an advisory covering 129 CVEs |
before 4.18.0-553.22.1.rt7.363.el8_10 | 4.18.0-553.22.1.rt7.363.el8_10 |
linux-ltsAlpaquita:23 |
6.1.99-r0 up to 6.1.104-r0 | 6.1.104-r0 |
linux-ltsAlpaquita:25 |
6.6.89-r0 up to 6.12.41-r0 | 6.12.41-r0 |
linux-ltsAlpaquita:stream |
6.6.100-r0 up to 6.12.41-r0 | 6.12.41-r0 |
linux-buildinfo-4.15.0-240-tuxcare.els28-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-buildinfo-4.15.0-240-tuxcare.els28-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-cloud-tools-4.15.0-240-tuxcare.els28TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-cloud-tools-4.15.0-240-tuxcare.els28-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-cloud-tools-4.15.0-240-tuxcare.els28-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-cloud-tools-commonTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-cloud-tools-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-cloud-tools-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-crashdumpTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-docTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-headers-4.15.0-240-tuxcare.els28TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-headers-4.15.0-240-tuxcare.els28-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-headers-4.15.0-240-tuxcare.els28-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-headers-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-headers-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-image-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-image-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-image-unsigned-4.15.0-240-tuxcare.els28-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-image-unsigned-4.15.0-240-tuxcare.els28-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-libc-devTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-modules-4.15.0-240-tuxcare.els28-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-modules-4.15.0-240-tuxcare.els28-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-modules-extra-4.15.0-240-tuxcare.els28-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-sourceTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-source-4.15.0TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-tools-4.15.0-240-tuxcare.els28TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-tools-4.15.0-240-tuxcare.els28-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-tools-4.15.0-240-tuxcare.els28-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-tools-commonTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-tools-genericTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-tools-hostTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0-240.251 | 4.15.0-240.251 |
linux-tools-lowlatencyTuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs |
before 4.15.0.240.251 | 4.15.0.240.251 |
linux-buildinfo-4.4.0-267-tuxcare.els38-genericTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0-267.301 | 4.4.0-267.301 |
linux-buildinfo-4.4.0-267-tuxcare.els38-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0-267.301 | 4.4.0-267.301 |
linux-cloud-tools-4.4.0-267-tuxcare.els38TuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0-267.301 | 4.4.0-267.301 |
linux-cloud-tools-4.4.0-267-tuxcare.els38-genericTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0-267.301 | 4.4.0-267.301 |
linux-cloud-tools-4.4.0-267-tuxcare.els38-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0-267.301 | 4.4.0-267.301 |
linux-cloud-tools-commonTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0-267.301 | 4.4.0-267.301 |
linux-cloud-tools-genericTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0.267.301 | 4.4.0.267.301 |
linux-cloud-tools-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0.267.301 | 4.4.0.267.301 |
linux-crashdumpTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0.267.301 | 4.4.0.267.301 |
linux-docTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0-267.301 | 4.4.0-267.301 |
linux-genericTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0.267.301 | 4.4.0.267.301 |
linux-headers-4.4.0-267-tuxcare.els38TuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0-267.301 | 4.4.0-267.301 |
linux-headers-4.4.0-267-tuxcare.els38-genericTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0-267.301 | 4.4.0-267.301 |
linux-headers-4.4.0-267-tuxcare.els38-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0-267.301 | 4.4.0-267.301 |
linux-headers-genericTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0.267.301 | 4.4.0.267.301 |
linux-headers-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0.267.301 | 4.4.0.267.301 |
linux-image-genericTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0.267.301 | 4.4.0.267.301 |
linux-image-lowlatencyTuxCare:Ubuntu:16.04 From an advisory covering 67 CVEs |
before 4.4.0.267.301 | 4.4.0.267.301 |
KernelLinux |
2.6.13 up to 4.19.319, 4.20.0 up to 5.4.281, 5.5.0 up to 5.10.223, 5.11.0 up to 5.15.164, 5.16.0 up to 6.1.101, 6.2.0 up to 6.6.42, 6.7.0 up to 6.9.9 | 4.19.3195.4.2815.10.2235.15.1646.1.1016.6.426.9.9 |
linuxDebian:12 |
before 6.1.106-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 21 moreShow less6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1 |
6.1.106-1 |
linuxDebian:13 |
before 6.9.9-1 | 6.9.9-1 |
linuxDebian:14 |
before 6.9.9-1 | 6.9.9-1 |
linux-6.1Debian:11 From an advisory covering 838 CVEs |
before 6.1.119-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u1 |
6.1.119-1~deb11u1 |
linuxDebian:11 From an advisory covering 60 CVEs |
before 5.10.223-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 37 moreShow less5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2 |
5.10.223-1 |
kernelopenEuler:22.03-LTS-SP1 From an advisory covering 33 CVEs |
before 5.10.0-136.89.0.170.oe2203sp1 | 5.10.0-136.89.0.170.oe2203sp1 |
kernelopenEuler:22.03-LTS-SP4 From an advisory covering 34 CVEs |
before 5.10.0-223.0.0.122.oe2203sp4 | 5.10.0-223.0.0.122.oe2203sp4 |
kernelopenEuler:22.03-LTS-SP3 From an advisory covering 34 CVEs |
before 5.10.0-223.0.0.126.oe2203sp3 | 5.10.0-223.0.0.126.oe2203sp3 |
kernelopenEuler:20.03-LTS-SP4 From an advisory covering 22 CVEs |
before 4.19.90-2408.3.0.0290.oe2003sp4 | 4.19.90-2408.3.0.0290.oe2003sp4 |
kernelopenEuler:24.03-LTS From an advisory covering 93 CVEs |
before 6.6.0-41.0.0.48.oe2403 | 6.6.0-41.0.0.48.oe2403 |
bpftoolRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
bpftool-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernelRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-abi-stablelistsRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-coreRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debugRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debug-coreRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debug-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debug-develRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debug-modulesRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debug-modules-extraRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-develRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-docRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-modulesRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-modules-extraRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-toolsRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-tools-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-tools-libsRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-zfcpdumpRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-zfcpdump-coreRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-zfcpdump-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-zfcpdump-develRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-zfcpdump-modulesRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-zfcpdump-modules-extraRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
perfRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
perf-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
python3-perfRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
python3-perf-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
bpftool-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debug-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-tools-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-tools-libs-develRed Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
perf-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
python3-perf-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-rtRed Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs |
before 0:4.18.0-553.22.1.rt7.363.el8_10 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-coreRed Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs |
before 0:4.18.0-553.22.1.rt7.363.el8_10 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debugRed Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs |
before 0:4.18.0-553.22.1.rt7.363.el8_10 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debug-coreRed Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs |
before 0:4.18.0-553.22.1.rt7.363.el8_10 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debug-debuginfoRed Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs |
before 0:4.18.0-553.22.1.rt7.363.el8_10 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debug-develRed Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs |
before 0:4.18.0-553.22.1.rt7.363.el8_10 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debug-kvmRed Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs |
before 0:4.18.0-553.22.1.rt7.363.el8_10 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debug-modulesRed Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs |
before 0:4.18.0-553.22.1.rt7.363.el8_10 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rt-debug-modules-extraRed Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs |
before 0:4.18.0-553.22.1.rt7.363.el8_10 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
kernelRocky Linux:8 From an advisory covering 147 CVEs |
before 0:4.18.0-553.22.1.el8_10 | 0:4.18.0-553.22.1.el8_10 |
kernel-rtRocky Linux:8 From an advisory covering 129 CVEs |
before 0:4.18.0-553.22.1.rt7.363.el8_10 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
kernel-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 310 CVEs |
before 5.14.21-150500.13.64.1 | 5.14.21-150500.13.64.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 310 CVEs |
before 5.14.21-150500.13.64.1 | 5.14.21-150500.13.64.1 |
kernel-livepatch-SLE15-SP5-RT_Update_18SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 310 CVEs |
before 1-150500.11.3.1 | 1-150500.11.3.1 |
kernel-rtSUSE:Real Time Module 15 SP5 From an advisory covering 310 CVEs |
before 5.14.21-150500.13.64.1 | 5.14.21-150500.13.64.1 |
kernel-rt_debugSUSE:Real Time Module 15 SP5 From an advisory covering 310 CVEs |
before 5.14.21-150500.13.64.1 | 5.14.21-150500.13.64.1 |
kernel-source-rtSUSE:Real Time Module 15 SP5 From an advisory covering 310 CVEs |
before 5.14.21-150500.13.64.1 | 5.14.21-150500.13.64.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP5 From an advisory covering 310 CVEs |
before 5.14.21-150500.13.64.1 | 5.14.21-150500.13.64.1 |
kernel-rtopenSUSE:Leap Micro 5.5 From an advisory covering 310 CVEs |
before 5.14.21-150500.13.64.1 | 5.14.21-150500.13.64.1 |
kernel-rtopenSUSE:Leap 15.5 From an advisory covering 310 CVEs |
before 5.14.21-150500.13.64.1 | 5.14.21-150500.13.64.1 |
kernel-rt_debugopenSUSE:Leap 15.5 From an advisory covering 310 CVEs |
before 5.14.21-150500.13.64.1 | 5.14.21-150500.13.64.1 |
kernel-source-rtopenSUSE:Leap 15.5 From an advisory covering 310 CVEs |
before 5.14.21-150500.13.64.1 | 5.14.21-150500.13.64.1 |
kernel-syms-rtopenSUSE:Leap 15.5 From an advisory covering 310 CVEs |
before 5.14.21-150500.13.64.1 | 5.14.21-150500.13.64.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 182 CVEs |
before 5.14.21-150400.15.88.1 | 5.14.21-150400.15.88.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 182 CVEs |
before 5.14.21-150400.15.88.1 | 5.14.21-150400.15.88.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 182 CVEs |
before 5.14.21-150400.15.88.1 | 5.14.21-150400.15.88.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 182 CVEs |
before 5.14.21-150400.15.88.1 | 5.14.21-150400.15.88.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.3 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.3 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1.150400.24.62.1 | 5.14.21-150400.24.128.1.150400.24.62.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.4 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.4 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1.150400.24.62.1 | 5.14.21-150400.24.128.1.150400.24.62.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-livepatch-SLE15-SP4_Update_29SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 194 CVEs |
before 1-150400.9.3.1 | 1-150400.9.3.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1.150400.24.62.1 | 5.14.21-150400.24.128.1.150400.24.62.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1.150400.24.62.1 | 5.14.21-150400.24.128.1.150400.24.62.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1.150400.24.62.1 | 5.14.21-150400.24.128.1.150400.24.62.1 |
kernel-docsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1.150400.24.62.1 | 5.14.21-150400.24.128.1.150400.24.62.1 |
kernel-docsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-obs-buildSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-defaultSUSE:Manager Proxy 4.3 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-default-baseSUSE:Manager Proxy 4.3 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1.150400.24.62.1 | 5.14.21-150400.24.128.1.150400.24.62.1 |
kernel-sourceSUSE:Manager Proxy 4.3 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-symsSUSE:Manager Proxy 4.3 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-defaultSUSE:Manager Server 4.3 From an advisory covering 194 CVEs |
before 5.14.21-150400.24.128.1 | 5.14.21-150400.24.128.1 |
kernel-defaultopenSUSE:Leap Micro 5.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-default-baseopenSUSE:Leap Micro 5.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1.150500.6.33.8 | 5.14.21-150500.55.73.1.150500.6.33.8 |
dtb-aarch64openSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-64kbopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-debugopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-defaultopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-default-baseopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1.150500.6.33.8 | 5.14.21-150500.55.73.1.150500.6.33.8 |
kernel-docsopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.2 | 5.14.21-150500.55.73.2 |
kernel-kvmsmallopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-obs-buildopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-obs-qaopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-sourceopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-symsopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-zfcpdumpopenSUSE:Leap 15.5 From an advisory covering 531 CVEs |
before 5.14.21-150500.55.73.1 | 5.14.21-150500.55.73.1 |
kernel-azureopenSUSE:Leap 15.5 From an advisory covering 310 CVEs |
before 5.14.21-150500.33.63.1 | 5.14.21-150500.33.63.1 |
kernel-source-azureopenSUSE:Leap 15.5 From an advisory covering 310 CVEs |
before 5.14.21-150500.33.63.1 | 5.14.21-150500.33.63.1 |
kernel-syms-azureopenSUSE:Leap 15.5 From an advisory covering 310 CVEs |
before 5.14.21-150500.33.63.1 | 5.14.21-150500.33.63.1 |
kernel-azureopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.8.11.1 | 6.4.0-150600.8.11.1 |
kernel-source-azureopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.8.11.1 | 6.4.0-150600.8.11.1 |
kernel-syms-azureopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.8.11.1 | 6.4.0-150600.8.11.1 |
kernel-rtopenSUSE:Leap 15.6 From an advisory covering 393 CVEs |
before 6.4.0-150600.10.8.3 | 6.4.0-150600.10.8.3 |
kernel-rt_debugopenSUSE:Leap 15.6 From an advisory covering 393 CVEs |
before 6.4.0-150600.10.8.3 | 6.4.0-150600.10.8.3 |
kernel-source-rtopenSUSE:Leap 15.6 From an advisory covering 393 CVEs |
before 6.4.0-150600.10.8.3 | 6.4.0-150600.10.8.3 |
kernel-syms-rtopenSUSE:Leap 15.6 From an advisory covering 393 CVEs |
before 6.4.0-150600.10.8.1 | 6.4.0-150600.10.8.1 |
dtb-aarch64openSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1 | 6.4.0-150600.23.22.1 |
kernel-64kbopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1 | 6.4.0-150600.23.22.1 |
kernel-debugopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1 | 6.4.0-150600.23.22.1 |
kernel-defaultopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1 | 6.4.0-150600.23.22.1 |
kernel-default-baseopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1.150600.12.8.3 | 6.4.0-150600.23.22.1.150600.12.8.3 |
kernel-docsopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1 | 6.4.0-150600.23.22.1 |
kernel-kvmsmallopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1 | 6.4.0-150600.23.22.1 |
kernel-obs-buildopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1 | 6.4.0-150600.23.22.1 |
kernel-obs-qaopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1 | 6.4.0-150600.23.22.1 |
kernel-sourceopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1 | 6.4.0-150600.23.22.1 |
kernel-symsopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1 | 6.4.0-150600.23.22.1 |
kernel-zfcpdumpopenSUSE:Leap 15.6 From an advisory covering 394 CVEs |
before 6.4.0-150600.23.22.1 | 6.4.0-150600.23.22.1 |
linuxUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70 |
None known |
linux-awsUbuntu:Pro:14.04:LTS |
before 4.4.0-1140.146, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80 |
4.4.0-1140.146 |
linux-azureUbuntu:Pro:14.04:LTS |
before 4.15.0-1185.200~14.04.1, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1 |
4.15.0-1185.200~14.04.1 |
linux-lts-xenialUbuntu:Pro:14.04:LTS |
before 4.4.0-263.297~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1 |
4.4.0-263.297~14.04.1 |
linuxUbuntu:Pro:16.04:LTS |
before 4.4.0-263.297, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96 |
4.4.0-263.297 |
linux-awsUbuntu:Pro:16.04:LTS |
before 4.4.0-1178.193, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93 |
4.4.0-1178.193 |
linux-aws-hweUbuntu:Pro:16.04:LTS |
before 4.15.0-1177.190~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1 |
4.15.0-1177.190~16.04.1 |
linux-azureUbuntu:Pro:16.04:LTS |
before 4.15.0-1185.200~16.04.1, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71 |
4.15.0-1185.200~16.04.1 |
linux-gcpUbuntu:Pro:16.04:LTS |
before 4.15.0-1170.187~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1 |
4.15.0-1170.187~16.04.1 |
linux-hweUbuntu:Pro:16.04:LTS |
before 4.15.0-233.245~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1 |
4.15.0-233.245~16.04.1 |
linux-kvmUbuntu:Pro:16.04:LTS |
before 4.4.0-1141.152, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84 |
4.4.0-1141.152 |
linux-oracleUbuntu:Pro:16.04:LTS |
before 4.15.0-1139.150~16.04.1, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1 |
4.15.0-1139.150~16.04.1 |
linux-hwe-edgeUbuntu:16.04:LTS |
All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 |
None known |
linux-fipsUbuntu:Pro:FIPS-updates:16.04:LTS |
before 4.4.0-1109.116, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78 |
4.4.0-1109.116 |
linux-fipsUbuntu:Pro:FIPS:16.04:LTS |
All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2 |
None known |
linuxUbuntu:Pro:18.04:LTS |
before 4.15.0-233.245, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107 |
4.15.0-233.245 |
linux-awsUbuntu:Pro:18.04:LTS |
before 4.15.0-1177.190, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87 |
4.15.0-1177.190 |
linux-aws-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 |
None known |
linux-aws-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 |
None known |
linux-aws-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1135.145~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2 |
5.4.0-1135.145~18.04.1 |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-azure-4.15Ubuntu:Pro:18.04:LTS |
before 4.15.0-1185.200, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176 |
4.15.0-1185.200 |
linux-azure-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 |
None known |
linux-azure-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1140.147~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1 |
5.4.0-1140.147~18.04.1 |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-gcp-4.15Ubuntu:Pro:18.04:LTS |
before 4.15.0-1170.187, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161 |
4.15.0-1170.187 |
linux-gcp-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 |
None known |
linux-gcp-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1139.148~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2 |
5.4.0-1139.148~18.04.1 |
linux-gke-4.15Ubuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 |
None known |
linux-gke-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 |
None known |
linux-gkeop-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-hwe-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-200.220~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1 |
5.4.0-200.220~18.04.1 |
linux-hwe-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 |
None known |
linux-ibm-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1082.87~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1 |
5.4.0-1082.87~18.04.1 |
linux-kvmUbuntu:Pro:18.04:LTS |
before 4.15.0-1160.165, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83 |
4.15.0-1160.165 |
linux-oemUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 |
None known |
linux-oracleUbuntu:Pro:18.04:LTS |
before 4.15.0-1139.150, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88 |
4.15.0-1139.150 |
linux-oracle-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 |
None known |
linux-oracle-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 |
None known |
linux-oracle-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1134.143~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1 |
5.4.0-1134.143~18.04.1 |
linux-raspi-5.4Ubuntu:Pro:18.04:LTS |
before 5.4.0-1119.131~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1 |
5.4.0-1119.131~18.04.1 |
linux-aws-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
before 4.15.0-2115.121, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93 |
4.15.0-2115.121 |
linux-azure-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
before 4.15.0-2094.100, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80 |
4.15.0-2094.100 |
linux-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
before 4.15.0-1131.142, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110 |
4.15.0-1131.142 |
linux-gcp-fipsUbuntu:Pro:FIPS-updates:18.04:LTS |
before 4.15.0-2078.84, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83 |
4.15.0-2078.84 |
linux-aws-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-2000.4 |
None known |
linux-azure-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.2 |
None known |
linux-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1011.12 |
None known |
linux-gcp-fipsUbuntu:Pro:FIPS:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | ||
| facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-41012 is a high vulnerability (CVSS 7.8) in Linux, published July 23, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 13th percentile. Fixed in linux-lts 6.1.104-r0.
References
git.kernel.org/stable/c/d30ff33040834c3b9eee29740acd92f9c7ba2250
git.kernel.org/stable/c/dc2ce1dfceaa0767211a9d963ddb029ab21c4235
git.kernel.org/stable/c/5661b9c7ec189406c2dde00837aaa4672efb6240
git.kernel.org/stable/c/52c87ab18c76c14d7209646ccb3283b3f5d87b22
git.kernel.org/stable/c/ef8fc41cd6f95f9a4a3470f085aecf350569a0b3
git.kernel.org/stable/c/5f5d0799eb0a01d550c21b7894e26b2d9db55763
Show 194 moreShow less
git.kernel.org/stable/c/b6d223942c34057fdfd8f149e763fa823731b224
git.kernel.org/stable/c/3cad1bc010416c6dd780643476bc59ed742436b9
lists.debian.org/debian-lts-announce/2025/01/msg00001.html
nvd.nist.gov/vuln/detail/CVE-2024-41012
github.com/advisories/GHSA-c77m-wh63-vhch
access.redhat.com/errata/RHSA-2024:7000
access.redhat.com/security/cve/CVE-2021-46984
access.redhat.com/security/cve/CVE-2021-47097
access.redhat.com/security/cve/CVE-2021-47101
access.redhat.com/security/cve/CVE-2021-47287
access.redhat.com/security/cve/CVE-2021-47289
access.redhat.com/security/cve/CVE-2021-47321
access.redhat.com/security/cve/CVE-2021-47338
access.redhat.com/security/cve/CVE-2021-47352
access.redhat.com/security/cve/CVE-2021-47383
access.redhat.com/security/cve/CVE-2021-47384
access.redhat.com/security/cve/CVE-2021-47385
access.redhat.com/security/cve/CVE-2021-47386
access.redhat.com/security/cve/CVE-2021-47393
access.redhat.com/security/cve/CVE-2021-47412
access.redhat.com/security/cve/CVE-2021-47432
access.redhat.com/security/cve/CVE-2021-47441
bugzilla.redhat.com/2258012
bugzilla.redhat.com/2258013
bugzilla.redhat.com/2260038
bugzilla.redhat.com/2265799
bugzilla.redhat.com/2265838
bugzilla.redhat.com/2266358
bugzilla.redhat.com/2266750
bugzilla.redhat.com/2267036
bugzilla.redhat.com/2267041
bugzilla.redhat.com/2267795
bugzilla.redhat.com/2267916
bugzilla.redhat.com/2267925
bugzilla.redhat.com/2268295
bugzilla.redhat.com/2270103
bugzilla.redhat.com/2271648
bugzilla.redhat.com/2271796
bugzilla.redhat.com/2272793
errata.almalinux.org/8/ALSA-2024-7000.html
errata.almalinux.org/8/ALSA-2024-7001.html
docs.bell-sw.com/security/cves/CVE-2024-41012
errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1731602566.html
errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1731603213.html
errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1731605761.html
errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1731606243.html
github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41012.json
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
security-tracker.debian.org/tracker/CVE-2024-41012
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2024-1992
nvd.nist.gov/vuln/detail/CVE-2021-47582
nvd.nist.gov/vuln/detail/CVE-2022-48827
nvd.nist.gov/vuln/detail/CVE-2023-52888
nvd.nist.gov/vuln/detail/CVE-2024-39509
nvd.nist.gov/vuln/detail/CVE-2024-40942
nvd.nist.gov/vuln/detail/CVE-2024-40990
nvd.nist.gov/vuln/detail/CVE-2024-41034
nvd.nist.gov/vuln/detail/CVE-2024-41035
nvd.nist.gov/vuln/detail/CVE-2024-41042
nvd.nist.gov/vuln/detail/CVE-2024-41046
nvd.nist.gov/vuln/detail/CVE-2024-41065
nvd.nist.gov/vuln/detail/CVE-2024-41078
nvd.nist.gov/vuln/detail/CVE-2024-41092
nvd.nist.gov/vuln/detail/CVE-2024-42087
nvd.nist.gov/vuln/detail/CVE-2024-42095
nvd.nist.gov/vuln/detail/CVE-2024-42096
nvd.nist.gov/vuln/detail/CVE-2024-42098
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2024-1994
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2024-1995
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2024-1996
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2024-2124
issues.redhat.com/browse/RHEL-31515
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7000.json
cve.org/CVERecord?id=CVE-2021-46984
lore.kernel.org/linux-cve-announce/2024022824-CVE-2021-46984-e55e@gregkh/T
cve.org/CVERecord?id=CVE-2021-47097
lore.kernel.org/linux-cve-announce/2024030415-CVE-2021-47097-e7f4@gregkh/T
cve.org/CVERecord?id=CVE-2021-47101
lore.kernel.org/linux-cve-announce/2024030415-CVE-2021-47101-f3fa@gregkh/T
cve.org/CVERecord?id=CVE-2021-47287
lore.kernel.org/linux-cve-announce/2024052121-CVE-2021-47287-6345@gregkh/T
cve.org/CVERecord?id=CVE-2021-47289
lore.kernel.org/linux-cve-announce/2024052122-CVE-2021-47289-7cbb@gregkh/T
cve.org/CVERecord?id=CVE-2021-47321
lore.kernel.org/linux-cve-announce/2024052132-CVE-2021-47321-1b9b@gregkh/T
cve.org/CVERecord?id=CVE-2021-47338
lore.kernel.org/linux-cve-announce/2024052137-CVE-2021-47338-cd10@gregkh/T
cve.org/CVERecord?id=CVE-2021-47352
lore.kernel.org/linux-cve-announce/2024052141-CVE-2021-47352-df50@gregkh/T
cve.org/CVERecord?id=CVE-2021-47383
lore.kernel.org/linux-cve-announce/2024052144-CVE-2021-47383-a8f4@gregkh/T
cve.org/CVERecord?id=CVE-2021-47384
lore.kernel.org/linux-cve-announce/2024052144-CVE-2021-47384-f311@gregkh/T
cve.org/CVERecord?id=CVE-2021-47385
lore.kernel.org/linux-cve-announce/2024052144-CVE-2021-47385-a7e7@gregkh/T
cve.org/CVERecord?id=CVE-2021-47386
lore.kernel.org/linux-cve-announce/2024052145-CVE-2021-47386-2701@gregkh/T
cve.org/CVERecord?id=CVE-2021-47393
lore.kernel.org/linux-cve-announce/2024052147-CVE-2021-47393-ea1c@gregkh/T
cve.org/CVERecord?id=CVE-2021-47412
lore.kernel.org/linux-cve-announce/2024052152-CVE-2021-47412-b362@gregkh/T
cve.org/CVERecord?id=CVE-2021-47432
lore.kernel.org/linux-cve-announce/2024052143-CVE-2021-47432-5e69@gregkh/T
cve.org/CVERecord?id=CVE-2021-47441
cve.org/CVERecord?id=CVE-2021-47455
lore.kernel.org/linux-cve-announce/2024052244-CVE-2021-47455-c4a1@gregkh/T
lore.kernel.org/linux-cve-announce/2024052227-CVE-2021-47466-ff03@gregkh/T
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.10
github.com/torvalds/linux/commit/409353cbe9fe48f6bc196114c442b1cff05a39bc
openwall.com/lists/oss-security/2024/01/12/1
git.kernel.org/stable/c/0b813a6a0087451cb702b6eb841f10856f49d088
git.kernel.org/stable/c/14bbfaa5df273b26cde6707f6e655585700e6fe1
git.kernel.org/stable/c/21b1645660717d6126dd4866c850fcc5c4703a41
git.kernel.org/stable/c/57ca7984806d79b38af528de88fd803babf27feb
git.kernel.org/stable/c/5d12c5d75f7c78b83a738025947651ec5c95b4d4
git.kernel.org/stable/c/7a2464fac80d42f6f8819fed97a553e9c2f43310
git.kernel.org/stable/c/c4ff55408187f2595066967047363ca84e76db85
git.kernel.org/stable/c/fb2d8bc9b5e55848b8a7c3c028e2ee8d49f28f97
openwall.com/lists/oss-security/2024/07/24/4
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7001.json
docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
issues.redhat.com/browse/RHEL-17714
issues.redhat.com/browse/RHEL-23575
issues.redhat.com/browse/RHEL-26081
issues.redhat.com/browse/RHEL-29437
issues.redhat.com/browse/RHEL-31876
issues.redhat.com/browse/RHEL-32199
issues.redhat.com/browse/RHEL-35853
issues.redhat.com/browse/RHEL-36182
issues.redhat.com/browse/RHEL-36224
issues.redhat.com/browse/RHEL-45158
issues.redhat.com/browse/RHEL-7990
issues.redhat.com/browse/RHEL-9096
issues.redhat.com/browse/RHEL-9148
issues.redhat.com/browse/RHEL-9429
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9315.json
francozappa.github.io/about-bias
kb.cert.org/vuls/id/647177
git.kernel.org/stable/c/3171e46d677a668eed3086da78671f1e4f5b8405
bugzilla.openanolis.cn/show_bug.cgi?id=7975
patchwork.kernel.org/project/linux-raid/patch/[email protected]
errata.rockylinux.org/RLSA-2024:7000
errata.rockylinux.org/RLSA-2024:7001
suse.com/support/update/announcement/2024/suse-su-20242894-1
bugzilla.suse.com/1082555
bugzilla.suse.com/1193454
bugzilla.suse.com/1193554
bugzilla.suse.com/1193787
bugzilla.suse.com/1194324
bugzilla.suse.com/1194869
bugzilla.suse.com/1195357
bugzilla.suse.com/1195668
bugzilla.suse.com/1195927
bugzilla.suse.com/1195957
bugzilla.suse.com/1196018
bugzilla.suse.com/1196823
bugzilla.suse.com/1197146
bugzilla.suse.com/1197246
bugzilla.suse.com/1197762
bugzilla.suse.com/1202346
bugzilla.suse.com/1202686
suse.com/security/cve/CVE-2021-47086
suse.com/security/cve/CVE-2021-47103
suse.com/security/cve/CVE-2021-47186
suse.com/security/cve/CVE-2021-47402
suse.com/security/cve/CVE-2021-47546
suse.com/security/cve/CVE-2021-47547
suse.com/security/cve/CVE-2021-47588
suse.com/security/cve/CVE-2021-47590
suse.com/security/cve/CVE-2021-47591
suse.com/security/cve/CVE-2021-47593
suse.com/security/cve/CVE-2021-47598
suse.com/security/cve/CVE-2021-47599
suse.com/security/cve/CVE-2021-47606
suse.com/security/cve/CVE-2021-47622
suse.com/security/cve/CVE-2021-47623
suse.com/security/cve/CVE-2021-47624
ubuntu.com/security/CVE-2024-41012
ubuntu.com/security/notices/USN-7088-1
ubuntu.com/security/notices/USN-7089-1
ubuntu.com/security/notices/USN-7090-1
ubuntu.com/security/notices/USN-7088-2
ubuntu.com/security/notices/USN-7089-2
ubuntu.com/security/notices/USN-7088-3
ubuntu.com/security/notices/USN-7089-3
ubuntu.com/security/notices/USN-7095-1
ubuntu.com/security/notices/USN-7088-4
ubuntu.com/security/notices/USN-7100-1
ubuntu.com/security/notices/USN-7100-2
ubuntu.com/security/notices/USN-7089-4
ubuntu.com/security/notices/USN-7089-5
ubuntu.com/security/notices/USN-7088-5
ubuntu.com/security/notices/USN-7089-6
ubuntu.com/security/notices/USN-7119-1
Left out here: 481 package rows, 1,579 versions, 6,380 references and the rest of 35 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 11 source records.