Every CVE Search/ Get API key

CVE-2024-42243

mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2.

Currently, xarray can't support arbitrary page cache size. More details can be found from the WARN_ON() statement in xas_split_alloc(). In our test whose code is attached below, we hit the WARN_ON() on ARM64 system where the base page size is 64KB and huge page size is 512MB. The issue was reported long time ago and some discussions on it can be found here [1].

[1] https://www.spinics.net/lists/linux-xfs/msg75404.html

In order to fix the issue, we need to adjust MAX_PAGECACHE_ORDER to one supported by xarray and avoid PMD-sized page cache if needed. The code changes are suggested by David Hildenbrand.

PATCH[1] adjusts MAX_PAGECACHE_ORDER to that supported by xarray PATCH[2-3] avoids PMD-sized page cache in the synchronous readahead path PATCH[4] avoids PMD-sized page cache for shmem files if needed

Test program

cat test.c

#define _GNU_SOURCE #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <string.h> #include <fcntl.h> #include <errno.h> #include <sys/syscall.h> #include <sys/mman.h>

#define TEST_XFS_FILENAME "/tmp/data" #define TEST_SHMEM_FILENAME "/dev/shm/data" #define TEST_MEM_SIZE 0x20000000

int main(int argc, char **argv) { const char *filename; int fd = 0; void *buf = (void *)-1, *p; int pgsize = getpagesize(); int ret;

if (pgsize != 0x10000) {
	fprintf(stderr, "64KB base page size is required\n");
	return -EPERM;
}

system("echo force > /sys/kernel/mm/transparent_hugepage/shmem_enabled");
system("rm -fr /tmp/data");
system("rm -fr /dev/shm/data");
system("echo 1 > /proc/sys/vm/drop_caches");

/* Open xfs or shmem file */
filename = TEST_XFS_FILENAME;
if (argc > 1 && !strcmp(argv[1], "shmem"))
	filename = TEST_SHMEM_FILENAME;

fd = open(filename, O_CREAT | O_RDWR | O_TRUNC);
if (fd < 0) {
	fprintf(stderr, "Unable to open <%s>\n", filename);
	return -EIO;
}

/* Extend file size */
ret = ftruncate(fd, TEST_MEM_SIZE);
if (ret) {
	fprintf(stderr, "Error %d to ftruncate()\n", ret);
	goto cleanup;
}

/* Create VMA */
buf = mmap(NULL, TEST_MEM_SIZE,
	   PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);
if (buf == (void *)-1) {
	fprintf(stderr, "Unable to mmap <%s>\n", filename);
	goto cleanup;
}

fprintf(stdout, "mapped buffer at 0x%p\n", buf);
ret = madvise(buf, TEST_MEM_SIZE, MADV_HUGEPAGE);
    if (ret) {
	fprintf(stderr, "Unable to madvise(MADV_HUGEPAGE)\n");
	goto cleanup;
}

/* Populate VMA */
ret = madvise(buf, TEST_MEM_SIZE, MADV_POPULATE_WRITE);
if (ret) {
	fprintf(stderr, "Error %d to madvise(MADV_POPULATE_WRITE)\n", ret);
	goto cleanup;
}

/* Punch the file to enforce xarray split */
ret = fallocate(fd, FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE,
    		TEST_MEM_SIZE - pgsize, pgsize);
if (ret)
	fprintf(stderr, "Error %d to fallocate()\n", ret);

cleanup: if (buf != (void *)-1) munmap(buf, TEST_MEM_SIZE); if (fd > 0) close(fd);

return 0;

}

gcc test.c -o test

cat /proc/1/smaps | grep KernelPageSize | head -n 1

KernelPageSize: 64 kB

./test shmem

: ------------[ cut here ]------------ WARNING: CPU: 17 PID: 5253 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128 Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib
nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct
nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4
ip_set nf_tables rfkill nfnetlink vfat fat virtio_balloon
drm fuse xfs libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64
virtio_net sha1_ce net_failover failover virtio_console virtio_blk
dimlib virtio_mmio CPU: 17 PID: 5253 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #12 Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024 pstate: 83400005 (Nzcv daif +PAN -UAO +TC ---truncated---

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.21%Up 0.2 points since Aug 13, 2024
90%50%10%1%

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2.

Currently, xarray can't support arbitrary page cache size. More details can be found from the WARN_ON() statement in xas_split_alloc(). In our test whose code is attached below, we hit the WARN_ON() on ARM64 system where the base page size is 64KB and huge page size is 512MB. The issue was reported long time ago and some discussions on it can be found here [1].

[1] https://www.spinics.net/lists/linux-xfs/msg75404.html

In order to fix the issue, we need to adjust MAX_PAGECACHE_ORDER to one supported by xarray and avoid PMD-sized page cache if needed. The code changes are suggested by David Hildenbrand.

PATCH[1] adjusts MAX_PAGECACHE_ORDER to that supported by xarray PATCH[2-3] avoids PMD-sized page cache in the synchronous readahead path PATCH[4] avoids PMD-sized page cache for shmem files if needed

Test program

cat test.c

#define _GNU_SOURCE #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <string.h> #include <fcntl.h> #include <errno.h> #include <sys/syscall.h> #include <sys/mman.h>

#define TEST_XFS_FILENAME "/tmp/data" #define TEST_SHMEM_FILENAME "/dev/shm/data" #define TEST_MEM_SIZE 0x20000000

int main(int argc, char **argv) { const char *filename; int fd = 0; void *buf = (void *)-1, *p; int pgsize = getpagesize(); int ret;

if (pgsize != 0x10000) {
	fprintf(stderr, "64KB base page size is required\n");
	return -EPERM;
}

system("echo force > /sys/kernel/mm/transparent_hugepage/shmem_enabled");
system("rm -fr /tmp/data");
system("rm -fr /dev/shm/data");
system("echo 1 > /proc/sys/vm/drop_caches");

/* Open xfs or shmem file */
filename = TEST_XFS_FILENAME;
if (argc > 1 && !strcmp(argv[1], "shmem"))
	filename = TEST_SHMEM_FILENAME;

fd = open(filename, O_CREAT | O_RDWR | O_TRUNC);
if (fd < 0) {
	fprintf(stderr, "Unable to open <%s>\n", filename);
	return -EIO;
}

/* Extend file size */
ret = ftruncate(fd, TEST_MEM_SIZE);
if (ret) {
	fprintf(stderr, "Error %d to ftruncate()\n", ret);
	goto cleanup;
}

/* Create VMA */
buf = mmap(NULL, TEST_MEM_SIZE,
	   PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);
if (buf == (void *)-1) {
	fprintf(stderr, "Unable to mmap <%s>\n", filename);
	goto cleanup;
}

fprintf(stdout, "mapped buffer at 0x%p\n", buf);
ret = madvise(buf, TEST_MEM_SIZE, MADV_HUGEPAGE);
    if (ret) {
	fprintf(stderr, "Unable to madvise(MADV_HUGEPAGE)\n");
	goto cleanup;
}

/* Populate VMA */
ret = madvise(buf, TEST_MEM_SIZE, MADV_POPULATE_WRITE);
if (ret) {
	fprintf(stderr, "Error %d to madvise(MADV_POPULATE_WRITE)\n", ret);
	goto cleanup;
}

/* Punch the file to enforce xarray split */
ret = fallocate(fd, FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE,
    		TEST_MEM_SIZE - pgsize, pgsize);
if (ret)
	fprintf(stderr, "Error %d to fallocate()\n", ret);

cleanup: if (buf != (void *)-1) munmap(buf, TEST_MEM_SIZE); if (fd > 0) close(fd);

return 0;

}

gcc test.c -o test

cat /proc/1/smaps | grep KernelPageSize | head -n 1

KernelPageSize: 64 kB

./test shmem

: ------------[ cut here ]------------ WARNING: CPU: 17 PID: 5253 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128 Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib
nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct
nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4
ip_set nf_tables rfkill nfnetlink vfat fat virtio_balloon
drm fuse xfs libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64
virtio_net sha1_ce net_failover failover virtio_console virtio_blk
dimlib virtio_mmio CPU: 17 PID: 5253 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #12 Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024 pstate: 83400005 (Nzcv daif +PAN -UAO +TC ---truncated---

Record
CVE-2024-42243
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
CVE List No score

mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

In the Linux kernel, the following vulnerability has been resolved:

mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2.

Currently, xarray can't support arbitrary page cache size. More details can be found from the WARN_ON() statement in xas_split_alloc(). In our test whose code is attached below, we hit the WARN_ON() on ARM64 system where the base page size is 64KB and huge page size is 512MB. The issue was reported long time ago and some discussions on it can be found here [1].

[1] https://www.spinics.net/lists/linux-xfs/msg75404.html

In order to fix the issue, we need to adjust MAX_PAGECACHE_ORDER to one supported by xarray and avoid PMD-sized page cache if needed. The code changes are suggested by David Hildenbrand.

PATCH[1] adjusts MAX_PAGECACHE_ORDER to that supported by xarray PATCH[2-3] avoids PMD-sized page cache in the synchronous readahead path PATCH[4] avoids PMD-sized page cache for shmem files if needed

Test program

cat test.c

#define _GNU_SOURCE #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <string.h> #include <fcntl.h> #include <errno.h> #include <sys/syscall.h> #include <sys/mman.h>

#define TEST_XFS_FILENAME "/tmp/data" #define TEST_SHMEM_FILENAME "/dev/shm/data" #define TEST_MEM_SIZE 0x20000000

int main(int argc, char **argv) { const char *filename; int fd = 0; void *buf = (void *)-1, *p; int pgsize = getpagesize(); int ret;

if (pgsize != 0x10000) {
	fprintf(stderr, "64KB base page size is required\n");
	return -EPERM;
}

system("echo force > /sys/kernel/mm/transparent_hugepage/shmem_enabled");
system("rm -fr /tmp/data");
system("rm -fr /dev/shm/data");
system("echo 1 > /proc/sys/vm/drop_caches");

/* Open xfs or shmem file */
filename = TEST_XFS_FILENAME;
if (argc > 1 && !strcmp(argv[1], "shmem"))
	filename = TEST_SHMEM_FILENAME;

fd = open(filename, O_CREAT | O_RDWR | O_TRUNC);
if (fd < 0) {
	fprintf(stderr, "Unable to open <%s>\n", filename);
	return -EIO;
}

/* Extend file size */
ret = ftruncate(fd, TEST_MEM_SIZE);
if (ret) {
	fprintf(stderr, "Error %d to ftruncate()\n", ret);
	goto cleanup;
}

/* Create VMA */
buf = mmap(NULL, TEST_MEM_SIZE,
	   PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);
if (buf == (void *)-1) {
	fprintf(stderr, "Unable to mmap <%s>\n", filename);
	goto cleanup;
}

fprintf(stdout, "mapped buffer at 0x%p\n", buf);
ret = madvise(buf, TEST_MEM_SIZE, MADV_HUGEPAGE);
    if (ret) {
	fprintf(stderr, "Unable to madvise(MADV_HUGEPAGE)\n");
	goto cleanup;
}

/* Populate VMA */
ret = madvise(buf, TEST_MEM_SIZE, MADV_POPULATE_WRITE);
if (ret) {
	fprintf(stderr, "Error %d to madvise(MADV_POPULATE_WRITE)\n", ret);
	goto cleanup;
}

/* Punch the file to enforce xarray split */
ret = fallocate(fd, FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE,
    		TEST_MEM_SIZE - pgsize, pgsize);
if (ret)
	fprintf(stderr, "Error %d to fallocate()\n", ret);

cleanup: if (buf != (void *)-1) munmap(buf, TEST_MEM_SIZE); if (fd > 0) close(fd);

return 0;

}

gcc test.c -o test

cat /proc/1/smaps | grep KernelPageSize | head -n 1

KernelPageSize: 64 kB

./test shmem

: ------------[ cut here ]------------ WARNING: CPU: 17 PID: 5253 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128 Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib
nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct
nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4
ip_set nf_tables rfkill nfnetlink vfat fat virtio_balloon
drm fuse xfs libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64
virtio_net sha1_ce net_failover failover virtio_console virtio_blk
dimlib virtio_mmio CPU: 17 PID: 5253 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #12 Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024 pstate: 83400005 (Nzcv daif +PAN -UAO +TC ---truncated---

Record
CVE-2024-42243
Updated
2026-11-02
EUVDEUVD-2024-39466 No score

In the Linux kernel, the following vulnerability has been resolved:

mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2.

Currently, xarray can't support arbitrary page cache size. More details can be found from the WARN_ON() statement in xas_split_alloc(). In our test whose code is attached below, we hit the WARN_ON() on ARM64 system where the base page size is 64KB and huge page size is 512MB. The issue was reported long time ago and some discussions on it can be found here [1].

[1] https://www.spinics.net/lists/linux-xfs/msg75404.html

In order to fix the issue, we need to adjust MAX_PAGECACHE_ORDER to one supported by xarray and avoid PMD-sized page cache if needed. The code changes are suggested by David Hildenbrand.

PATCH[1] adjusts MAX_PAGECACHE_ORDER to that supported by xarray PATCH[2-3] avoids PMD-sized page cache in the synchronous readahead path PATCH[4] avoids PMD-sized page cache for shmem files if needed

Test program

cat test.c

#define _GNU_SOURCE #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <string.h> #include <fcntl.h> #include <errno.h> #include <sys/syscall.h> #include <sys/mman.h>

#define TEST_XFS_FILENAME "/tmp/data" #define TEST_SHMEM_FILENAME "/dev/shm/data" #define TEST_MEM_SIZE 0x20000000

int main(int argc, char **argv) { const char *filename; int fd = 0; void *buf = (void *)-1, *p; int pgsize = getpagesize(); int ret;

if (pgsize != 0x10000) {
	fprintf(stderr, "64KB base page size is required\n");
	return -EPERM;
}

system("echo force > /sys/kernel/mm/transparent_hugepage/shmem_enabled");
system("rm -fr /tmp/data");
system("rm -fr /dev/shm/data");
system("echo 1 > /proc/sys/vm/drop_caches");

/* Open xfs or shmem file */
filename = TEST_XFS_FILENAME;
if (argc > 1 && !strcmp(argv[1], "shmem"))
	filename = TEST_SHMEM_FILENAME;

fd = open(filename, O_CREAT | O_RDWR | O_TRUNC);
if (fd < 0) {
	fprintf(stderr, "Unable to open <%s>\n", filename);
	return -EIO;
}

/* Extend file size */
ret = ftruncate(fd, TEST_MEM_SIZE);
if (ret) {
	fprintf(stderr, "Error %d to ftruncate()\n", ret);
	goto cleanup;
}

/* Create VMA */
buf = mmap(NULL, TEST_MEM_SIZE,
	   PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);
if (buf == (void *)-1) {
	fprintf(stderr, "Unable to mmap <%s>\n", filename);
	goto cleanup;
}

fprintf(stdout, "mapped buffer at 0x%p\n", buf);
ret = madvise(buf, TEST_MEM_SIZE, MADV_HUGEPAGE);
    if (ret) {
	fprintf(stderr, "Unable to madvise(MADV_HUGEPAGE)\n");
	goto cleanup;
}

/* Populate VMA */
ret = madvise(buf, TEST_MEM_SIZE, MADV_POPULATE_WRITE);
if (ret) {
	fprintf(stderr, "Error %d to madvise(MADV_POPULATE_WRITE)\n", ret);
	goto cleanup;
}

/* Punch the file to enforce xarray split */
ret = fallocate(fd, FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE,
    		TEST_MEM_SIZE - pgsize, pgsize);
if (ret)
	fprintf(stderr, "Error %d to fallocate()\n", ret);

cleanup: if (buf != (void *)-1) munmap(buf, TEST_MEM_SIZE); if (fd > 0) close(fd);

return 0;

}

gcc test.c -o test

cat /proc/1/smaps | grep KernelPageSize | head -n 1

KernelPageSize: 64 kB

./test shmem

: ------------[ cut here ]------------ WARNING: CPU: 17 PID: 5253 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128 Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib
nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct
nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4
ip_set nf_tables rfkill nfnetlink vfat fat virtio_balloon
drm fuse xfs libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64
virtio_net sha1_ce net_failover failover virtio_console virtio_blk
dimlib virtio_mmio CPU: 17 PID: 5253 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #12 Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024 pstate: 83400005 (Nzcv daif +PAN -UAO +TC ---truncated---

Record
EUVD-2024-39466
Updated
2026-11-02
GitHub AdvisoriesGHSA-7j6j-8jww-jc3g 5.5

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: make...

In the Linux kernel, the following vulnerability has been resolved:

mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2.

Currently, xarray can't support arbitrary page cache size. More details can be found from the WARN_ON() statement in xas_split_alloc(). In our test whose code is attached below, we hit the WARN_ON() on ARM64 system where the base page size is 64KB and huge page size is 512MB. The issue was reported long time ago and some discussions on it can be found here [1].

[1] https://www.spinics.net/lists/linux-xfs/msg75404.html

In order to fix the issue, we need to adjust MAX_PAGECACHE_ORDER to one supported by xarray and avoid PMD-sized page cache if needed. The code changes are suggested by David Hildenbrand.

PATCH[1] adjusts MAX_PAGECACHE_ORDER to that supported by xarray PATCH[2-3] avoids PMD-sized page cache in the synchronous readahead path PATCH[4] avoids PMD-sized page cache for shmem files if needed

Test program

cat test.c

#define _GNU_SOURCE #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <string.h> #include <fcntl.h> #include <errno.h> #include <sys/syscall.h> #include <sys/mman.h>

#define TEST_XFS_FILENAME "/tmp/data" #define TEST_SHMEM_FILENAME "/dev/shm/data" #define TEST_MEM_SIZE 0x20000000

int main(int argc, char **argv) { const char *filename; int fd = 0; void *buf = (void *)-1, *p; int pgsize = getpagesize(); int ret;

if (pgsize != 0x10000) {
	fprintf(stderr, "64KB base page size is required\n");
	return -EPERM;
}

system("echo force > /sys/kernel/mm/transparent_hugepage/shmem_enabled");
system("rm -fr /tmp/data");
system("rm -fr /dev/shm/data");
system("echo 1 > /proc/sys/vm/drop_caches");

/* Open xfs or shmem file */
filename = TEST_XFS_FILENAME;
if (argc > 1 && !strcmp(argv[1], "shmem"))
	filename = TEST_SHMEM_FILENAME;

fd = open(filename, O_CREAT | O_RDWR | O_TRUNC);
if (fd < 0) {
	fprintf(stderr, "Unable to open <%s>\n", filename);
	return -EIO;
}

/* Extend file size */
ret = ftruncate(fd, TEST_MEM_SIZE);
if (ret) {
	fprintf(stderr, "Error %d to ftruncate()\n", ret);
	goto cleanup;
}

/* Create VMA */
buf = mmap(NULL, TEST_MEM_SIZE,
	   PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);
if (buf == (void *)-1) {
	fprintf(stderr, "Unable to mmap <%s>\n", filename);
	goto cleanup;
}

fprintf(stdout, "mapped buffer at 0x%p\n", buf);
ret = madvise(buf, TEST_MEM_SIZE, MADV_HUGEPAGE);
    if (ret) {
	fprintf(stderr, "Unable to madvise(MADV_HUGEPAGE)\n");
	goto cleanup;
}

/* Populate VMA */
ret = madvise(buf, TEST_MEM_SIZE, MADV_POPULATE_WRITE);
if (ret) {
	fprintf(stderr, "Error %d to madvise(MADV_POPULATE_WRITE)\n", ret);
	goto cleanup;
}

/* Punch the file to enforce xarray split */
ret = fallocate(fd, FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE,
    		TEST_MEM_SIZE - pgsize, pgsize);
if (ret)
	fprintf(stderr, "Error %d to fallocate()\n", ret);

cleanup: if (buf != (void *)-1) munmap(buf, TEST_MEM_SIZE); if (fd > 0) close(fd);

return 0;

}

gcc test.c -o test

cat /proc/1/smaps | grep KernelPageSize | head -n 1

KernelPageSize: 64 kB

./test shmem

: ------------[ cut here ]------------ WARNING: CPU: 17 PID: 5253 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128 Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib
nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct
nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4
ip_set nf_tables rfkill nfnetlink vfat fat virtio_balloon
drm fuse xfs libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64
virtio_net sha1_ce net_failover failover virtio_console virtio_blk
dimlib virtio_mmio CPU: 17 PID: 5253 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #12 Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024 pstate: 83400005 (Nzcv daif +PAN -UAO +TC ---truncated---

Record
GHSA-7j6j-8jww-jc3g
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-47516 5.5

CVE-2024-42243 affecting package kernel for versions less than 6.6.43.1-7

In the Linux kernel, the following vulnerability has been resolved:

mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2.

Currently, xarray can't support arbitrary page cache size. More details can be found from the WARN_ON() statement in xas_split_alloc(). In our test whose code is attached below, we hit the WARN_ON() on ARM64 system where the base page size is 64KB and huge page size is 512MB. The issue was reported long time ago and some discussions on it can be found here [1].

[1] https://www.spinics.net/lists/linux-xfs/msg75404.html

In order to fix the issue, we need to adjust MAX_PAGECACHE_ORDER to one supported by xarray and avoid PMD-sized page cache if needed. The code changes are suggested by David Hildenbrand.

PATCH[1] adjusts MAX_PAGECACHE_ORDER to that supported by xarray PATCH[2-3] avoids PMD-sized page cache in the synchronous readahead path PATCH[4] avoids PMD-sized page cache for shmem files if needed

Test program

cat test.c

#define _GNU_SOURCE #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <string.h> #include <fcntl.h> #include <errno.h> #include <sys/syscall.h> #include <sys/mman.h>

#define TEST_XFS_FILENAME "/tmp/data" #define TEST_SHMEM_FILENAME "/dev/shm/data" #define TEST_MEM_SIZE 0x20000000

int main(int argc, char **argv) { const char *filename; int fd = 0; void *buf = (void *)-1, *p; int pgsize = getpagesize(); int ret;

if (pgsize != 0x10000) {
	fprintf(stderr, "64KB base page size is required\n");
	return -EPERM;
}

system("echo force > /sys/kernel/mm/transparent_hugepage/shmem_enabled");
system("rm -fr /tmp/data");
system("rm -fr /dev/shm/data");
system("echo 1 > /proc/sys/vm/drop_caches");

/* Open xfs or shmem file */
filename = TEST_XFS_FILENAME;
if (argc > 1 && !strcmp(argv[1], "shmem"))
	filename = TEST_SHMEM_FILENAME;

fd = open(filename, O_CREAT | O_RDWR | O_TRUNC);
if (fd < 0) {
	fprintf(stderr, "Unable to open <%s>\n", filename);
	return -EIO;
}

/* Extend file size */
ret = ftruncate(fd, TEST_MEM_SIZE);
if (ret) {
	fprintf(stderr, "Error %d to ftruncate()\n", ret);
	goto cleanup;
}

/* Create VMA */
buf = mmap(NULL, TEST_MEM_SIZE,
	   PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);
if (buf == (void *)-1) {
	fprintf(stderr, "Unable to mmap <%s>\n", filename);
	goto cleanup;
}

fprintf(stdout, "mapped buffer at 0x%p\n", buf);
ret = madvise(buf, TEST_MEM_SIZE, MADV_HUGEPAGE);
    if (ret) {
	fprintf(stderr, "Unable to madvise(MADV_HUGEPAGE)\n");
	goto cleanup;
}

/* Populate VMA */
ret = madvise(buf, TEST_MEM_SIZE, MADV_POPULATE_WRITE);
if (ret) {
	fprintf(stderr, "Error %d to madvise(MADV_POPULATE_WRITE)\n", ret);
	goto cleanup;
}

/* Punch the file to enforce xarray split */
ret = fallocate(fd, FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE,
    		TEST_MEM_SIZE - pgsize, pgsize);
if (ret)
	fprintf(stderr, "Error %d to fallocate()\n", ret);

cleanup: if (buf != (void *)-1) munmap(buf, TEST_MEM_SIZE); if (fd > 0) close(fd);

return 0;

}

gcc test.c -o test

cat /proc/1/smaps | grep KernelPageSize | head -n 1

KernelPageSize: 64 kB

./test shmem

: ------------[ cut here ]------------ WARNING: CPU: 17 PID: 5253 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128 Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib
nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct
nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4
ip_set nf_tables rfkill nfnetlink vfat fat virtio_balloon
drm fuse xfs libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64
virtio_net sha1_ce net_failover failover virtio_console virtio_blk
dimlib virtio_mmio CPU: 17 PID: 5253 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #12 Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024 pstate: 83400005 (Nzcv daif +PAN -UAO +TC ---truncated---

Record
AZL-47516
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2024-42243 5.5
Record
BELL-CVE-2024-42243
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-04
Show 24 moreShow less
OSVDEBIAN-CVE-2024-42243 5.5

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2. Currently, xarray can't support arbitrary page cache size. More details can be found from the WARN_ON() statement in xas_split_alloc(). In our test whose code is attached below, we hit the WARN_ON() on ARM64 system where the base page size is 64KB and huge page size is 512MB. The issue was reported long time ago and some discussions on it can be found here [1]. [1] https://www.spinics.net/lists/linux-xfs/msg75404.html In order to fix the issue, we need to adjust MAX_PAGECACHE_ORDER to one supported by xarray and avoid PMD-sized page cache if needed. The code changes are suggested by David Hildenbrand. PATCH[1] adjusts MAX_PAGECACHE_ORDER to that supported by xarray PATCH[2-3] avoids PMD-sized page cache in the synchronous readahead path PATCH[4] avoids PMD-sized page cache for shmem files if needed Test program ============ # cat test.c #define _GNU_SOURCE #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <string.h> #include <fcntl.h> #include <errno.h> #include <sys/syscall.h> #include <sys/mman.h> #define TEST_XFS_FILENAME "/tmp/data" #define TEST_SHMEM_FILENAME "/dev/shm/data" #define TEST_MEM_SIZE 0x20000000 int main(int argc, char **argv) { const char *filename; int fd = 0; void *buf = (void *)-1, p; int pgsize = getpagesize(); int ret; if (pgsize != 0x10000) { fprintf(stderr, "64KB base page size is required\n"); return -EPERM; } system("echo force > /sys/kernel/mm/transparent_hugepage/shmem_enabled"); system("rm -fr /tmp/data"); system("rm -fr /dev/shm/data"); system("echo 1 > /proc/sys/vm/drop_caches"); / Open xfs or shmem file / filename = TEST_XFS_FILENAME; if (argc > 1 && !strcmp(argv[1], "shmem")) filename = TEST_SHMEM_FILENAME; fd = open(filename, O_CREAT | O_RDWR | O_TRUNC); if (fd < 0) { fprintf(stderr, "Unable to open <%s>\n", filename); return -EIO; } / Extend file size / ret = ftruncate(fd, TEST_MEM_SIZE); if (ret) { fprintf(stderr, "Error %d to ftruncate()\n", ret); goto cleanup; } / Create VMA */ buf = mmap(NULL, TEST_MEM_SIZE, PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0); if (buf == (void )-1) { fprintf(stderr, "Unable to mmap <%s>\n", filename); goto cleanup; } fprintf(stdout, "mapped buffer at 0x%p\n", buf); ret = madvise(buf, TEST_MEM_SIZE, MADV_HUGEPAGE); if (ret) { fprintf(stderr, "Unable to madvise(MADV_HUGEPAGE)\n"); goto cleanup; } / Populate VMA / ret = madvise(buf, TEST_MEM_SIZE, MADV_POPULATE_WRITE); if (ret) { fprintf(stderr, "Error %d to madvise(MADV_POPULATE_WRITE)\n", ret); goto cleanup; } / Punch the file to enforce xarray split */ ret = fallocate(fd, FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE, TEST_MEM_SIZE - pgsize, pgsize); if (ret) fprintf(stderr, "Error %d to fallocate()\n", ret); cleanup: if (buf != (void *)-1) munmap(buf, TEST_MEM_SIZE); if (fd > 0) close(fd); return 0; } # gcc test.c -o test # cat /proc/1/smaps | grep KernelPageSize | head -n 1 KernelPageSize: 64 kB # ./test shmem : ------------[ cut here ]------------ WARNING: CPU: 17 PID: 5253 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128 Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib \ nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct \ nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 \ ip_set nf_tables rfkill nfnetlink vfat fat virtio_balloon \ drm fuse xfs libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64 \ virtio_net sha1_ce net_failover failover virtio_console virtio_blk \ dimlib virtio_mmio CPU: 17 PID: 5253 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #12 Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024 pstate: 83400005 (Nzcv daif +PAN -UAO +TC ---truncated---

Record
DEBIAN-CVE-2024-42243
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2124 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bna: ensure the copied buf is NUL terminated

Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.(CVE-2024-36934)

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix potential kernel bug due to lack of writeback flag waiting

Destructive writes to a block device on which nilfs2 is mounted can cause a kernel bug in the folio/page writeback start routine or writeback end routine (__folio_start_writeback in the log below):

kernel BUG at mm/page-writeback.c:3070! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI ... RIP: 0010:__folio_start_writeback+0xbaa/0x10e0 Code: 25 ff 0f 00 00 0f 84 18 01 00 00 e8 40 ca c6 ff e9 17 f6 ff ff e8 36 ca c6 ff 4c 89 f7 48 c7 c6 80 c0 12 84 e8 e7 b3 0f 00 90 <0f> 0b e8 1f ca c6 ff 4c 89 f7 48 c7 c6 a0 c6 12 84 e8 d0 b3 0f 00 ... Call Trace: <TASK> nilfs_segctor_do_construct+0x4654/0x69d0 [nilfs2] nilfs_segctor_construct+0x181/0x6b0 [nilfs2] nilfs_segctor_thread+0x548/0x11c0 [nilfs2] kthread+0x2f0/0x390 ret_from_fork+0x4b/0x80 ret_from_fork_asm+0x1a/0x30 </TASK>

This is because when the log writer starts a writeback for segment summary blocks or a super root block that use the backing device's page cache, it does not wait for the ongoing folio/page writeback, resulting in an inconsistent writeback state.

Fix this issue by waiting for ongoing writebacks when putting folios/pages on the backing device into writeback state.(CVE-2024-37078)

In the Linux kernel, the following vulnerability has been resolved:

xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()

ip6_dst_idev() can return NULL, xfrm6_get_saddr() must act accordingly.

syzbot reported:

Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 1 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker RIP: 0010:xfrm6_get_saddr+0x93/0x130 net/ipv6/xfrm6_policy.c:64 Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 97 00 00 00 4c 8b ab d8 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 86 00 00 00 4d 8b 6d 00 e8 ca 13 47 01 48 b8 00 RSP: 0018:ffffc90000117378 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: ffff88807b079dc0 RCX: ffffffff89a0d6d7 RDX: 0000000000000000 RSI: ffffffff89a0d6e9 RDI: ffff88807b079e98 RBP: ffff88807ad73248 R08: 0000000000000007 R09: fffffffffffff000 R10: ffff88807b079dc0 R11: 0000000000000007 R12: ffffc90000117480 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4586d00440 CR3: 0000000079042000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> xfrm_get_saddr net/xfrm/xfrm_policy.c:2452 [inline] xfrm_tmpl_resolve_one net/xfrm/xfrm_policy.c:2481 [inline] xfrm_tmpl_resolve+0xa26/0xf10 net/xfrm/xfrm_policy.c:2541 xfrm_resolve_and_create_bundle+0x140/0x2570 net/xfrm/xfrm_policy.c:2835 xfrm_bundle_lookup net/xfrm/xfrm_policy.c:3070 [inline] xfrm_lookup_with_ifid+0x4d1/0x1e60 net/xfrm/xfrm_policy.c:3201 xfrm_lookup net/xfrm/xfrm_policy.c:3298 [inline] …

Record
OESA-2024-2124
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:10771 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:10771
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:6744 6.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:6744
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:6745 6.1

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2024:6745
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2024-42243 5.5

CVE-2024-42243 in linux - Patched by Root

Root has patched CVE-2024-42243 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2024-42243
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-42243 5.5

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2. Currently, xarray can't support arbitrary page cache size. More details can be found from the WARN_ON() statement in xas_split_alloc(). In our test whose code is attached below, we hit the WARN_ON() on ARM64 system where the base page size is 64KB and huge page size is 512MB. The issue was reported long time ago and some discussions on it can be found here [1]. [1] https://www.spinics.net/lists/linux-xfs/msg75404.html In order to fix the issue, we need to adjust MAX_PAGECACHE_ORDER to one supported by xarray and avoid PMD-sized page cache if needed. The code changes are suggested by David Hildenbrand. PATCH[1] adjusts MAX_PAGECACHE_ORDER to that supported by xarray PATCH[2-3] avoids PMD-sized page cache in the synchronous readahead path PATCH[4] avoids PMD-sized page cache for shmem files if needed Test program ============ # cat test.c #define _GNU_SOURCE #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <string.h> #include <fcntl.h> #include <errno.h> #include <sys/syscall.h> #include <sys/mman.h> #define TEST_XFS_FILENAME "/tmp/data" #define TEST_SHMEM_FILENAME "/dev/shm/data" #define TEST_MEM_SIZE 0x20000000 int main(int argc, char **argv) { const char *filename; int fd = 0; void *buf = (void *)-1, p; int pgsize = getpagesize(); int ret; if (pgsize != 0x10000) { fprintf(stderr, "64KB base page size is required\n"); return -EPERM; } system("echo force > /sys/kernel/mm/transparent_hugepage/shmem_enabled"); system("rm -fr /tmp/data"); system("rm -fr /dev/shm/data"); system("echo 1 > /proc/sys/vm/drop_caches"); / Open xfs or shmem file / filename = TEST_XFS_FILENAME; if (argc > 1 && !strcmp(argv[1], "shmem")) filename = TEST_SHMEM_FILENAME; fd = open(filename, O_CREAT | O_RDWR | O_TRUNC); if (fd < 0) { fprintf(stderr, "Unable to open <%s>\n", filename); return -EIO; } / Extend file size / ret = ftruncate(fd, TEST_MEM_SIZE); if (ret) { fprintf(stderr, "Error %d to ftruncate()\n", ret); goto cleanup; } / Create VMA */ buf = mmap(NULL, TEST_MEM_SIZE, PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0); if (buf == (void )-1) { fprintf(stderr, "Unable to mmap <%s>\n", filename); goto cleanup; } fprintf(stdout, "mapped buffer at 0x%p\n", buf); ret = madvise(buf, TEST_MEM_SIZE, MADV_HUGEPAGE); if (ret) { fprintf(stderr, "Unable to madvise(MADV_HUGEPAGE)\n"); goto cleanup; } / Populate VMA / ret = madvise(buf, TEST_MEM_SIZE, MADV_POPULATE_WRITE); if (ret) { fprintf(stderr, "Error %d to madvise(MADV_POPULATE_WRITE)\n", ret); goto cleanup; } / Punch the file to enforce xarray split */ ret = fallocate(fd, FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE, TEST_MEM_SIZE - pgsize, pgsize); if (ret) fprintf(stderr, "Error %d to fallocate()\n", ret); cleanup: if (buf != (void *)-1) munmap(buf, TEST_MEM_SIZE); if (fd > 0) close(fd); return 0; } # gcc test.c -o test # cat /proc/1/smaps | grep KernelPageSize | head -n 1 KernelPageSize: 64 kB # ./test shmem : ------------[ cut here ]------------ WARNING: CPU: 17 PID: 5253 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128 Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib \ nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct \ nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 \ ip_set nf_tables rfkill nfnetlink vfat fat virtio_balloon \ drm fuse xfs libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64 \ virtio_net sha1_ce net_failover failover virtio_console virtio_blk \ dimlib virtio_mmio CPU: 17 PID: 5253 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #12 Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024 pstate: 83400005 (Nzcv daif +PAN -UAO +TC ---truncated---

Record
UBUNTU-CVE-2024-42243
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2024-1728936982 No score

kernel: Fix of 86 CVEs

  • drm/amd/pm: Fix negative array index read {CVE-2024-46821}
  • drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818}
  • drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813}
  • drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box {CVE-2024-46811}
  • Squashfs: sanity check symbolic link size {CVE-2024-46744}
  • platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses {CVE-2024-46859}
  • net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() {CVE-2024-40995}
  • net/sched: act_api: rely on rcu in tcf_idr_check_alloc {CVE-2024-40995}
  • netfilter: bridge: confirm multicast packets before passing them up the stack {CVE-2024-27415}
  • netfilter: let reset rules clean out conntrack entries {CVE-2024-27415}
  • mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray {CVE-2024-42243}
  • gpiolib: cdev: Fix use after free in lineinfo_changed_notify {CVE-2024-36899}
  • bpf, sockmap: Prevent lock inversion deadlock in map delete elem {CVE-2024-35895}
  • bpf, sockmap: Fix preempt_rt splat when using raw_spin_lock_t {CVE-2024-35895}
  • mm/huge_memory: don't unpoison huge_zero_folio {CVE-2024-40914}
  • cxgb4: fix use after free bugs caused by circular dependency problem {CVE-2023-4133}
  • timers: Restore ABI Compatibility with timer_delete Functions {CVE-2023-4133}
  • timers: Provide timer_shutdown_sync {CVE-2023-4133}
  • timers: Add shutdown mechanism to the internal functions {CVE-2023-4133}
  • timers: Split [try_to_]del_timer_sync to prepare for shutdown mode {CVE-2023-4133}
  • timers: Silently ignore timers with a NULL function {CVE-2023-4133}
  • timers: Rename del_timer() to timer_delete() {CVE-2023-4133}
  • timers: Rename del_timer_sync() to timer_delete_sync() {CVE-2023-4133}
  • timers: Use del_timer_sync() even on UP {CVE-2023-4133}
  • timers: Update kernel-doc for various functions {CVE-2023-4133}
  • timers: Replace BUG_ON()s {CVE-2023-4133}
  • timers: Get rid of del_singleshot_timer_sync() {CVE-2023-4133}
  • clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function {CVE-2023-4133}
  • clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function {CVE-2023-4133}
  • mm: avoid overflows in dirty throttling logic {CVE-2024-42131}
  • ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601}
  • igc: avoid returning frame twice in XDP_REDIRECT {CVE-2024-26853}
  • igc: Avoid transmit queue timeout for XDP {CVE-2024-26853}
  • nfsd: fix RELEASE_LOCKOWNER {CVE-2024-26629}
  • tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc {CVE-2023-52880}
  • nvmet: fix a possible leak when destroy a ctrl during qp establishment {CVE-2024-42152}
  • net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() {CVE-2024-42110}
  • x86: stop playing stack games in profile_pc() {CVE-2024-42096}
  • xdp: Remove WARN() from __xdp_reg_mem_model() {CVE-2024-42082}
  • NFSv4: Fix memory leak in nfs4_set_security_label {CVE-2024-41076}
  • ppp: reject claimed-as-LCP but actually malformed packets {CVE-2024-41044}
  • udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). {CVE-2024-41041}
  • sched/deadline: Fix task_struct reference leak {CVE-2024-41023}
  • tipc: force a dst refcount before doing decryption {CVE-2024-40983}
  • scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
  • wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941}
  • wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  • xhci: Handle TD clearing for multiple streams case {CVE-2024-40927}
  • wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912}
  • wifi: cfg80211: Lock wiphy in cfg80211_get_station {CVE-2024-40911}
  • ipv6: fix possible race in __fib6_drop_pcpu_from() {CVE-2024-40905}
  • md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING {CVE-2024-39476}
  • usb-storage: alauda: Check whether the media is…
Record
CLSA-2024-1728936982
Updated
2026-11-02
OSV No score

mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

In the Linux kernel, the following vulnerability has been resolved:

mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2.

Currently, xarray can't support arbitrary page cache size. More details can be found from the WARN_ON() statement in xas_split_alloc(). In our test whose code is attached below, we hit the WARN_ON() on ARM64 system where the base page size is 64KB and huge page size is 512MB. The issue was reported long time ago and some discussions on it can be found here [1].

[1] https://www.spinics.net/lists/linux-xfs/msg75404.html

In order to fix the issue, we need to adjust MAX_PAGECACHE_ORDER to one supported by xarray and avoid PMD-sized page cache if needed. The code changes are suggested by David Hildenbrand.

PATCH[1] adjusts MAX_PAGECACHE_ORDER to that supported by xarray PATCH[2-3] avoids PMD-sized page cache in the synchronous readahead path PATCH[4] avoids PMD-sized page cache for shmem files if needed

Test program

cat test.c

#define _GNU_SOURCE #include <stdio.h> #include <stdlib.h> #include <unistd.h> #include <string.h> #include <fcntl.h> #include <errno.h> #include <sys/syscall.h> #include <sys/mman.h>

#define TEST_XFS_FILENAME "/tmp/data" #define TEST_SHMEM_FILENAME "/dev/shm/data" #define TEST_MEM_SIZE 0x20000000

int main(int argc, char **argv) { const char *filename; int fd = 0; void *buf = (void *)-1, *p; int pgsize = getpagesize(); int ret;

if (pgsize != 0x10000) {
	fprintf(stderr, "64KB base page size is required\n");
	return -EPERM;
}

system("echo force > /sys/kernel/mm/transparent_hugepage/shmem_enabled");
system("rm -fr /tmp/data");
system("rm -fr /dev/shm/data");
system("echo 1 > /proc/sys/vm/drop_caches");

/* Open xfs or shmem file */
filename = TEST_XFS_FILENAME;
if (argc > 1 && !strcmp(argv[1], "shmem"))
	filename = TEST_SHMEM_FILENAME;

fd = open(filename, O_CREAT | O_RDWR | O_TRUNC);
if (fd < 0) {
	fprintf(stderr, "Unable to open <%s>\n", filename);
	return -EIO;
}

/* Extend file size */
ret = ftruncate(fd, TEST_MEM_SIZE);
if (ret) {
	fprintf(stderr, "Error %d to ftruncate()\n", ret);
	goto cleanup;
}

/* Create VMA */
buf = mmap(NULL, TEST_MEM_SIZE,
	   PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);
if (buf == (void *)-1) {
	fprintf(stderr, "Unable to mmap <%s>\n", filename);
	goto cleanup;
}

fprintf(stdout, "mapped buffer at 0x%p\n", buf);
ret = madvise(buf, TEST_MEM_SIZE, MADV_HUGEPAGE);
    if (ret) {
	fprintf(stderr, "Unable to madvise(MADV_HUGEPAGE)\n");
	goto cleanup;
}

/* Populate VMA */
ret = madvise(buf, TEST_MEM_SIZE, MADV_POPULATE_WRITE);
if (ret) {
	fprintf(stderr, "Error %d to madvise(MADV_POPULATE_WRITE)\n", ret);
	goto cleanup;
}

/* Punch the file to enforce xarray split */
ret = fallocate(fd, FALLOC_FL_KEEP_SIZE | FALLOC_FL_PUNCH_HOLE,
    		TEST_MEM_SIZE - pgsize, pgsize);
if (ret)
	fprintf(stderr, "Error %d to fallocate()\n", ret);

cleanup: if (buf != (void *)-1) munmap(buf, TEST_MEM_SIZE); if (fd > 0) close(fd);

return 0;

}

gcc test.c -o test

cat /proc/1/smaps | grep KernelPageSize | head -n 1

KernelPageSize: 64 kB

./test shmem

: ------------[ cut here ]------------ WARNING: CPU: 17 PID: 5253 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128 Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib
nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct
nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4
ip_set nf_tables rfkill nfnetlink vfat fat virtio_balloon
drm fuse xfs libcrc32c crct10dif_ce ghash_ce sha2_ce sha256_arm64
virtio_net sha1_ce net_failover failover virtio_console virtio_blk
dimlib virtio_mmio CPU: 17 PID: 5253 Comm: test Kdump: loaded Tainted: G W 6.10.0-rc5-gavin+ #12 Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20240524-1.el9 05/24/2024 pstate: 83400005 (Nzcv daif +PAN -UAO +TC ---truncated---

Record
CVE-2024-42243
Updated
2026-11-02
OSVSUSE-SU-2024:3551-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
  • CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
  • CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
  • CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
  • CVE-2024-45017: net/mlx5: Fix…
Record
SUSE-SU-2024:3551-1
Updated
2026-11-02
OSVSUSE-SU-2024:3561-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
  • CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
  • CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
  • CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
  • CVE-2024-45017: net/mlx5: Fix IPsec…
Record
SUSE-SU-2024:3561-1
Updated
2026-11-02
OSVSUSE-SU-2024:3564-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
  • CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
  • CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
  • CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
  • CVE-2024-45017: net/mlx5: Fix IPsec…
Record
SUSE-SU-2024:3564-1
Updated
2026-11-02
OSVSUSE-SU-2025:20073-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
  • CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
  • CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
  • CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
  • CVE-2024-45017: net/mlx5: Fix IPsec…
Record
SUSE-SU-2025:20073-1
Updated
2026-11-02
OSVSUSE-SU-2025:20077-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
  • CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
  • CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
  • CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
  • CVE-2024-45017: net/mlx5: Fix…
Record
SUSE-SU-2025:20077-1
Updated
2026-11-02
OSVUSN-7089-1 No score

linux, linux-gcp-6.8, linux-hwe-6.8 vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Null block device driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Cirrus firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • S/390 drivers;
  • SCSI drivers;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • VFIO drivers;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Memory management;
  • Netfilter;
  • Tracing infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Bluetooth subsystem;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Network traffic control;
  • Sun RPC protocol;
  • Wireless networking;
  • AMD SoC Alsa drivers;
  • SoC Audio for Freescale CPUs drivers;
  • MediaTek ASoC drivers;
  • SoC audio core drivers;
  • SOF drivers;
  • Sound sequencer drivers; (CVE-2024-42104, CVE-2024-42084, CVE-2024-42252, CVE-2024-41096, CVE-2024-42237, CVE-2024-42140, CVE-2024-42150, CVE-2024-41031, CVE-2024-41059, CVE-2024-41062, CVE-2024-41051, CVE-2024-41028, CVE-2024-41090, CVE-2024-41092, CVE-2024-43855, CVE-2024-41021, CVE-2024-42229, CVE-2024-41056, CVE-2024-41048, CVE-2024-41036, CVE-2024-42094, CVE-2024-41089, CVE-2024-41068, CVE-2024-41039, CVE-2024-41095, CVE-2024-41069, CVE-2024-42234, CVE-2024-42136, CVE-2024-41025, CVE-2024-42157, CVE-2024-42248, CVE-2024-42087, CVE-2024-41041, CVE-2024-42230, CVE-2024-42151, CVE-2024-42130, CVE-2024-42244, CVE-2024-41079, CVE-2024-42253, CVE-2024-42092, CVE-2024-41022, CVE-2024-42137, CVE-2024-42132, CVE-2024-42108, CVE-2024-42155, CVE-2024-42127, CVE-2024-41060, CVE-2024-42074, CVE-2024-41081, CVE-2024-42066, CVE-2024-42098, CVE-2024-42082, CVE-2024-42093, CVE-2024-42245, CVE-2024-41072, CVE-2024-41052, CVE-2024-42161, CVE-2024-42096, CVE-2024-42115, CVE-2024-41074, CVE-2024-42120, CVE-2024-41046, CVE-2024-42239, CVE-2024-41063, CVE-2024-42090, CVE-2024-41023, CVE-2024-42069, CVE-2024-41087, CVE-2024-42158, CVE-2024-41067, CVE-2024-41084, CVE-2024-41077, CVE-2024-42240, CVE-2024-42145, CVE-2024-42102, CVE-2024-41020, CVE-2024-42231, CVE-2024-41053, CVE-2024-42131, CVE-2024-42089, CVE-2024-41083, CVE-2024-42247, CVE-2024-42105, CVE-2024-41044, CVE-2024-42128, CVE-2024-42271, CVE-2024-41037, CVE-2024-42114, CVE-2024-42106, CVE-2024-41076, CVE-2024-42088, CVE-2024-41057, CVE-2024-41091, CVE-2024-42152, CVE-2024-41070, CVE-2024-41035, CVE-2024-41050, CVE-2024-39487, CVE-2024-42113, CVE-2024-42250, CVE-2024-41047,…
Record
USN-7089-1
Updated
2026-11-02
OSVUSN-7089-2 No score

linux-azure, linux-gcp, linux-ibm vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Null block device driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Cirrus firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • S/390 drivers;
  • SCSI drivers;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • VFIO drivers;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Memory management;
  • Netfilter;
  • Tracing infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Bluetooth subsystem;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Network traffic control;
  • Sun RPC protocol;
  • Wireless networking;
  • AMD SoC Alsa drivers;
  • SoC Audio for Freescale CPUs drivers;
  • MediaTek ASoC drivers;
  • SoC audio core drivers;
  • SOF drivers;
  • Sound sequencer drivers; (CVE-2024-42104, CVE-2024-42101, CVE-2024-41052, CVE-2024-42157, CVE-2024-41020, CVE-2024-41055, CVE-2024-42124, CVE-2023-52888, CVE-2024-42079, CVE-2024-43858, CVE-2024-41075, CVE-2024-42073, CVE-2024-42113, CVE-2024-42110, CVE-2024-41080, CVE-2024-42097, CVE-2024-41046, CVE-2024-42076, CVE-2024-41010, CVE-2024-41018, CVE-2024-42115, CVE-2024-41048, CVE-2024-42231, CVE-2024-42241, CVE-2024-41034, CVE-2024-42065, CVE-2024-42140, CVE-2024-42094, CVE-2024-41029, CVE-2024-42225, CVE-2024-41096, CVE-2024-42088, CVE-2024-41087, CVE-2023-52887, CVE-2024-42141, CVE-2024-42135, CVE-2024-42247, CVE-2024-39487, CVE-2024-42229, CVE-2024-42147, CVE-2024-42252, CVE-2024-41038, CVE-2024-41083, CVE-2024-42091, CVE-2024-42156, CVE-2024-42149, CVE-2024-41015, CVE-2024-41047, CVE-2024-42129, CVE-2024-42120, CVE-2024-41097, CVE-2024-42243, CVE-2024-42084, CVE-2024-42250, CVE-2024-41023, CVE-2024-41028, CVE-2024-42108, CVE-2024-41045, CVE-2024-42098, CVE-2024-41064, CVE-2024-42087, CVE-2024-42080, CVE-2024-41049, CVE-2024-42271, CVE-2024-41037, CVE-2024-42114, CVE-2024-41044, CVE-2024-42126, CVE-2024-42119, CVE-2024-42223, CVE-2024-42280, CVE-2024-42112, CVE-2024-41019, CVE-2024-42133, CVE-2024-42152, CVE-2024-41074, CVE-2024-41042, CVE-2024-41093, CVE-2024-41025, CVE-2024-42253, CVE-2024-42136, CVE-2024-42127, CVE-2024-41036, CVE-2024-42237, CVE-2024-42111, CVE-2024-41031, CVE-2024-41069, CVE-2024-41084, CVE-2024-41076, CVE-2024-41090, CVE-2024-41088, CVE-2024-41070, CVE-2024-42118, CVE-2024-42238, CVE-2024-42234, CVE-2024-41089, CVE-2024-41095, CVE-2024-41085, CVE-2024-42106, CVE-2024-42155, CVE-2024-42146,…
Record
USN-7089-2
Updated
2026-11-02
OSVUSN-7089-3 No score

linux-aws, linux-aws-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Null block device driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Cirrus firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • S/390 drivers;
  • SCSI drivers;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • VFIO drivers;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Memory management;
  • Netfilter;
  • Tracing infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Bluetooth subsystem;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Network traffic control;
  • Sun RPC protocol;
  • Wireless networking;
  • AMD SoC Alsa drivers;
  • SoC Audio for Freescale CPUs drivers;
  • MediaTek ASoC drivers;
  • SoC audio core drivers;
  • SOF drivers;
  • Sound sequencer drivers; (CVE-2024-42239, CVE-2024-42079, CVE-2024-41080, CVE-2024-42064, CVE-2024-42127, CVE-2024-41049, CVE-2024-41086, CVE-2024-42142, CVE-2024-42244, CVE-2024-41060, CVE-2024-42131, CVE-2024-42085, CVE-2024-42246, CVE-2024-41062, CVE-2024-42115, CVE-2024-42234, CVE-2024-42080, CVE-2024-41095, CVE-2024-41063, CVE-2024-42227, CVE-2024-41089, CVE-2024-42133, CVE-2024-43858, CVE-2024-42135, CVE-2024-42113, CVE-2024-42120, CVE-2024-42149, CVE-2024-42132, CVE-2024-41038, CVE-2024-41069, CVE-2024-41090, CVE-2024-41059, CVE-2024-41028, CVE-2024-42126, CVE-2024-42121, CVE-2024-42155, CVE-2024-42110, CVE-2024-41021, CVE-2024-41044, CVE-2024-42098, CVE-2024-42235, CVE-2024-41083, CVE-2024-41065, CVE-2024-42094, CVE-2024-42229, CVE-2024-42240, CVE-2024-42225, CVE-2024-42230, CVE-2024-41088, CVE-2024-42073, CVE-2024-42145, CVE-2024-42076, CVE-2024-42087, CVE-2024-42241, CVE-2024-41019, CVE-2024-41052, CVE-2024-42093, CVE-2024-42063, CVE-2024-41039, CVE-2024-42106, CVE-2024-42108, CVE-2024-42237, CVE-2024-41048, CVE-2024-41033, CVE-2023-52888, CVE-2024-41096, CVE-2024-41032, CVE-2024-41091, CVE-2024-42238, CVE-2024-41056, CVE-2024-42091, CVE-2024-42088, CVE-2024-41047, CVE-2024-42271, CVE-2024-41064, CVE-2024-42223, CVE-2024-42129, CVE-2024-42102, CVE-2024-42146, CVE-2024-42138, CVE-2024-41079, CVE-2024-42232, CVE-2024-42112, CVE-2024-39487, CVE-2024-42245, CVE-2024-41093, CVE-2024-41066, CVE-2024-43855, CVE-2024-41055, CVE-2024-42100, CVE-2024-41053, CVE-2024-42069, CVE-2024-42252, CVE-2024-42243, CVE-2024-42124, CVE-2024-41054, CVE-2024-42151, CVE-2024-42118, CVE-2024-42251, CVE-2024-42137, CVE-2024-41071,…
Record
USN-7089-3
Updated
2026-11-02
OSVUSN-7089-4 No score

linux-oem-6.8 vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Null block device driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Cirrus firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • S/390 drivers;
  • SCSI drivers;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • VFIO drivers;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Memory management;
  • Netfilter;
  • Tracing infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Bluetooth subsystem;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Network traffic control;
  • Sun RPC protocol;
  • Wireless networking;
  • AMD SoC Alsa drivers;
  • SoC Audio for Freescale CPUs drivers;
  • MediaTek ASoC drivers;
  • SoC audio core drivers;
  • SOF drivers;
  • Sound sequencer drivers; (CVE-2024-41064, CVE-2024-41087, CVE-2023-52888, CVE-2024-42098, CVE-2024-42111, CVE-2024-42076, CVE-2024-42088, CVE-2024-42135, CVE-2024-42145, CVE-2024-42142, CVE-2024-41036, CVE-2024-41071, CVE-2024-41012, CVE-2024-42091, CVE-2024-42253, CVE-2024-42119, CVE-2024-42097, CVE-2024-42243, CVE-2024-39487, CVE-2024-42235, CVE-2024-42120, CVE-2024-42149, CVE-2024-41015, CVE-2024-41074, CVE-2024-42067, CVE-2024-42090, CVE-2024-42128, CVE-2024-41038, CVE-2024-42113, CVE-2024-42102, CVE-2024-42231, CVE-2024-42080, CVE-2024-42241, CVE-2024-42106, CVE-2024-42130, CVE-2024-42073, CVE-2024-42153, CVE-2024-42156, CVE-2024-42118, CVE-2024-41007, CVE-2024-41049, CVE-2024-39486, CVE-2024-42240, CVE-2024-41018, CVE-2024-42251, CVE-2024-42280, CVE-2024-42096, CVE-2024-42121, CVE-2024-42246, CVE-2024-42092, CVE-2024-41090, CVE-2024-42157, CVE-2024-43858, CVE-2024-42150, CVE-2024-42110, CVE-2024-41010, CVE-2024-41081, CVE-2024-41061, CVE-2024-41078, CVE-2024-41094, CVE-2024-41039, CVE-2024-42114, CVE-2024-42109, CVE-2024-41030, CVE-2024-42066, CVE-2024-41035, CVE-2024-42146, CVE-2024-42131, CVE-2024-41059, CVE-2024-41067, CVE-2024-42138, CVE-2024-41050, CVE-2024-41034, CVE-2024-41077, CVE-2024-41076, CVE-2024-41088, CVE-2024-41096, CVE-2024-41073, CVE-2024-41037, CVE-2024-42232, CVE-2024-41063, CVE-2024-42117, CVE-2024-42155, CVE-2024-41080, CVE-2024-42132, CVE-2024-42084, CVE-2024-42136, CVE-2024-42223, CVE-2024-41068, CVE-2024-42225, CVE-2024-42065, CVE-2024-41051, CVE-2024-43855, CVE-2024-42238, CVE-2024-42250, CVE-2024-42112, CVE-2024-41070, CVE-2023-52887, CVE-2024-42094, CVE-2024-42095, CVE-2024-41086,…
Record
USN-7089-4
Updated
2026-11-02
OSVUSN-7089-5 No score

linux-raspi vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Null block device driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Cirrus firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • S/390 drivers;
  • SCSI drivers;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • VFIO drivers;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Memory management;
  • Netfilter;
  • Tracing infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Bluetooth subsystem;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Network traffic control;
  • Sun RPC protocol;
  • Wireless networking;
  • AMD SoC Alsa drivers;
  • SoC Audio for Freescale CPUs drivers;
  • MediaTek ASoC drivers;
  • SoC audio core drivers;
  • SOF drivers;
  • Sound sequencer drivers; (CVE-2024-42223, CVE-2024-42244, CVE-2024-42105, CVE-2024-42100, CVE-2024-42235, CVE-2024-41007, CVE-2024-41047, CVE-2024-42088, CVE-2024-42079, CVE-2024-41053, CVE-2024-41094, CVE-2024-42227, CVE-2024-42253, CVE-2024-42150, CVE-2024-41049, CVE-2024-42096, CVE-2024-42093, CVE-2024-41079, CVE-2024-41037, CVE-2024-42129, CVE-2024-41031, CVE-2024-39486, CVE-2024-41065, CVE-2024-42101, CVE-2024-41082, CVE-2024-42135, CVE-2024-42236, CVE-2024-41078, CVE-2024-42098, CVE-2024-41056, CVE-2024-41096, CVE-2024-41074, CVE-2024-42246, CVE-2024-42137, CVE-2024-42232, CVE-2024-42121, CVE-2024-41093, CVE-2024-41076, CVE-2024-42157, CVE-2024-41062, CVE-2024-42104, CVE-2024-42085, CVE-2024-41092, CVE-2024-41034, CVE-2024-41036, CVE-2024-41072, CVE-2024-41012, CVE-2024-39487, CVE-2024-42124, CVE-2024-42065, CVE-2024-41061, CVE-2024-41064, CVE-2024-41091, CVE-2024-42119, CVE-2024-41088, CVE-2024-42089, CVE-2024-41048, CVE-2024-41032, CVE-2024-41020, CVE-2024-42066, CVE-2024-42068, CVE-2024-42238, CVE-2024-41069, CVE-2024-41044, CVE-2024-41025, CVE-2024-42161, CVE-2023-52887, CVE-2024-42127, CVE-2024-42239, CVE-2024-42149, CVE-2024-42091, CVE-2024-42097, CVE-2024-41054, CVE-2024-41041, CVE-2024-42131, CVE-2024-41089, CVE-2024-41018, CVE-2024-42067, CVE-2024-41039, CVE-2024-42128, CVE-2024-42248, CVE-2024-41090, CVE-2024-42073, CVE-2024-43858, CVE-2024-42225, CVE-2024-42077, CVE-2024-42247, CVE-2024-42109, CVE-2024-41045, CVE-2024-41019, CVE-2024-42231, CVE-2024-41017, CVE-2024-42145, CVE-2024-41046, CVE-2024-42063, CVE-2024-41087, CVE-2024-41033, CVE-2024-41021, CVE-2024-42241, CVE-2024-42229, CVE-2024-41015,…
Record
USN-7089-5
Updated
2026-11-02
OSVUSN-7089-6 No score

linux-gke vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Null block device driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Cirrus firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • S/390 drivers;
  • SCSI drivers;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • VFIO drivers;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Memory management;
  • Netfilter;
  • Tracing infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Bluetooth subsystem;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Network traffic control;
  • Sun RPC protocol;
  • Wireless networking;
  • AMD SoC Alsa drivers;
  • SoC Audio for Freescale CPUs drivers;
  • MediaTek ASoC drivers;
  • SoC audio core drivers;
  • SOF drivers;
  • Sound sequencer drivers; (CVE-2024-41062, CVE-2024-41029, CVE-2024-42142, CVE-2024-41070, CVE-2024-41066, CVE-2024-42150, CVE-2024-42120, CVE-2023-52888, CVE-2024-42141, CVE-2024-41032, CVE-2024-42245, CVE-2024-41053, CVE-2024-42247, CVE-2024-42161, CVE-2024-42094, CVE-2024-41072, CVE-2024-42076, CVE-2024-42091, CVE-2024-42103, CVE-2024-41007, CVE-2024-42064, CVE-2024-41075, CVE-2024-42157, CVE-2024-42069, CVE-2024-41045, CVE-2024-42068, CVE-2024-42090, CVE-2024-41071, CVE-2024-42082, CVE-2024-42146, CVE-2024-41018, CVE-2024-42238, CVE-2024-41079, CVE-2024-42241, CVE-2024-42067, CVE-2024-42132, CVE-2024-42121, CVE-2024-41025, CVE-2024-42231, CVE-2024-42225, CVE-2024-41080, CVE-2024-41086, CVE-2024-41012, CVE-2024-42234, CVE-2024-41088, CVE-2024-42129, CVE-2024-42158, CVE-2024-41078, CVE-2024-41038, CVE-2024-41055, CVE-2024-42106, CVE-2024-42227, CVE-2024-42102, CVE-2024-41082, CVE-2024-42108, CVE-2024-41085, CVE-2024-41020, CVE-2024-41054, CVE-2024-42085, CVE-2024-42140, CVE-2024-42089, CVE-2024-41047, CVE-2024-42092, CVE-2024-41044, CVE-2024-42246, CVE-2024-41035, CVE-2024-42250, CVE-2024-42070, CVE-2024-41039, CVE-2024-41061, CVE-2024-42147, CVE-2024-42104, CVE-2024-41090, CVE-2024-41096, CVE-2024-41063, CVE-2024-41084, CVE-2024-41059, CVE-2024-41097, CVE-2024-41089, CVE-2024-42093, CVE-2024-42126, CVE-2024-42135, CVE-2024-42128, CVE-2024-42098, CVE-2024-42105, CVE-2024-42124, CVE-2024-42101, CVE-2024-41091, CVE-2024-42127, CVE-2024-41077, CVE-2024-42111, CVE-2024-41037, CVE-2024-42136, CVE-2024-41083, CVE-2024-42243, CVE-2024-41033, CVE-2024-41046, CVE-2024-42230, CVE-2024-42080, CVE-2024-42096, CVE-2024-42100,…
Record
USN-7089-6
Updated
2026-11-02
OSVUSN-7089-7 No score

linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Null block device driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Cirrus firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • S/390 drivers;
  • SCSI drivers;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • VFIO drivers;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Memory management;
  • Netfilter;
  • Tracing infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Bluetooth subsystem;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Network traffic control;
  • Sun RPC protocol;
  • Wireless networking;
  • AMD SoC Alsa drivers;
  • SoC Audio for Freescale CPUs drivers;
  • MediaTek ASoC drivers;
  • SoC audio core drivers;
  • SOF drivers;
  • Sound sequencer drivers; (CVE-2024-42104, CVE-2024-42084, CVE-2024-42252, CVE-2024-41096, CVE-2024-42237, CVE-2024-42140, CVE-2024-42150, CVE-2024-41031, CVE-2024-41059, CVE-2024-41062, CVE-2024-41051, CVE-2024-41028, CVE-2024-41090, CVE-2024-41092, CVE-2024-43855, CVE-2024-41021, CVE-2024-42229, CVE-2024-41056, CVE-2024-41048, CVE-2024-41036, CVE-2024-42094, CVE-2024-41089, CVE-2024-41068, CVE-2024-41039, CVE-2024-41095, CVE-2024-41069, CVE-2024-42234, CVE-2024-42136, CVE-2024-41025, CVE-2024-42157, CVE-2024-42248, CVE-2024-42087, CVE-2024-41041, CVE-2024-42230, CVE-2024-42151, CVE-2024-42130, CVE-2024-42244, CVE-2024-41079, CVE-2024-42253, CVE-2024-42092, CVE-2024-41022, CVE-2024-42137, CVE-2024-42132, CVE-2024-42108, CVE-2024-42155, CVE-2024-42127, CVE-2024-41060, CVE-2024-42074, CVE-2024-41081, CVE-2024-42066, CVE-2024-42098, CVE-2024-42082, CVE-2024-42093, CVE-2024-42245, CVE-2024-41072, CVE-2024-41052, CVE-2024-42161, CVE-2024-42096, CVE-2024-42115, CVE-2024-41074, CVE-2024-42120, CVE-2024-41046, CVE-2024-42239, CVE-2024-41063, CVE-2024-42090, CVE-2024-41023, CVE-2024-42069, CVE-2024-41087, CVE-2024-42158, CVE-2024-41067, CVE-2024-41084, CVE-2024-41077, CVE-2024-42240, CVE-2024-42145, CVE-2024-42102, CVE-2024-41020, CVE-2024-42231, CVE-2024-41053, CVE-2024-42131, CVE-2024-42089, CVE-2024-41083, CVE-2024-42247, CVE-2024-42105, CVE-2024-41044, CVE-2024-42128, CVE-2024-42271, CVE-2024-41037, CVE-2024-42114, CVE-2024-42106, CVE-2024-41076, CVE-2024-42088, CVE-2024-41057, CVE-2024-41091, CVE-2024-42152, CVE-2024-41070, CVE-2024-41035, CVE-2024-41050, CVE-2024-39487, CVE-2024-42113, CVE-2024-42250, CVE-2024-41047,…
Record
USN-7089-7
Updated
2026-11-02
OSVUSN-7090-1 No score

linux-azure-6.8 vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Null block device driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Cirrus firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • S/390 drivers;
  • SCSI drivers;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • VFIO drivers;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Memory management;
  • Netfilter;
  • Tracing infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Bluetooth subsystem;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Network traffic control;
  • Sun RPC protocol;
  • Wireless networking;
  • AMD SoC Alsa drivers;
  • SoC Audio for Freescale CPUs drivers;
  • MediaTek ASoC drivers;
  • SoC audio core drivers;
  • SOF drivers;
  • Sound sequencer drivers; (CVE-2024-42064, CVE-2024-43858, CVE-2024-42251, CVE-2024-42113, CVE-2024-41020, CVE-2024-41093, CVE-2024-45016, CVE-2024-42150, CVE-2024-42069, CVE-2024-42157, CVE-2024-42126, CVE-2024-42144, CVE-2024-42093, CVE-2024-41035, CVE-2024-41032, CVE-2024-41077, CVE-2024-42097, CVE-2024-41071, CVE-2024-42227, CVE-2024-42253, CVE-2024-42237, CVE-2024-41060, CVE-2024-42080, CVE-2024-42068, CVE-2024-41058, CVE-2024-42140, CVE-2024-42231, CVE-2024-42127, CVE-2024-42243, CVE-2023-52887, CVE-2024-39486, CVE-2024-41063, CVE-2024-42128, CVE-2024-42074, CVE-2024-41028, CVE-2024-42110, CVE-2024-45001, CVE-2024-41090, CVE-2024-41084, CVE-2024-41088, CVE-2024-42118, CVE-2024-41094, CVE-2024-41091, CVE-2024-41007, CVE-2024-42280, CVE-2024-41044, CVE-2024-41012, CVE-2024-42063, CVE-2024-41078, CVE-2024-42082, CVE-2024-41055, CVE-2024-41031, CVE-2024-42142, CVE-2024-41083, CVE-2024-42145, CVE-2024-41039, CVE-2024-41019, CVE-2024-42149, CVE-2024-42248, CVE-2024-42111, CVE-2024-41074, CVE-2024-42096, CVE-2024-42100, CVE-2024-41010, CVE-2024-43855, CVE-2024-42136, CVE-2024-41054, CVE-2024-41053, CVE-2024-41061, CVE-2024-42104, CVE-2024-41025, CVE-2024-42129, CVE-2024-41086, CVE-2024-42133, CVE-2024-42115, CVE-2024-42158, CVE-2024-42091, CVE-2024-42088, CVE-2024-42161, CVE-2024-42236, CVE-2024-41065, CVE-2024-41062, CVE-2024-42153, CVE-2024-41030, CVE-2024-41079, CVE-2023-52888, CVE-2024-42223, CVE-2024-42119, CVE-2024-42238, CVE-2024-41052, CVE-2024-41064, CVE-2024-42138, CVE-2024-41081, CVE-2024-41034, CVE-2024-42147, CVE-2024-41095, CVE-2024-42132, CVE-2024-42137, CVE-2024-42106, CVE-2024-41041, CVE-2024-41073,…
Record
USN-7090-1
Updated
2026-11-02
OSVUSN-7095-1 No score

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Null block device driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Cirrus firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • S/390 drivers;
  • SCSI drivers;
  • Thermal drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • VFIO drivers;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system client;
  • NILFS2 file system;
  • NTFS3 file system;
  • SMB network file system;
  • Memory management;
  • Netfilter;
  • Tracing infrastructure;
  • io_uring subsystem;
  • BPF subsystem;
  • Core kernel;
  • Bluetooth subsystem;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Network traffic control;
  • Sun RPC protocol;
  • Wireless networking;
  • AMD SoC Alsa drivers;
  • SoC Audio for Freescale CPUs drivers;
  • MediaTek ASoC drivers;
  • SoC audio core drivers;
  • SOF drivers;
  • Sound sequencer drivers; (CVE-2024-42271, CVE-2024-42068, CVE-2024-42086, CVE-2024-42132, CVE-2024-42074, CVE-2024-41017, CVE-2024-42090, CVE-2024-42280, CVE-2024-41030, CVE-2024-41037, CVE-2024-42248, CVE-2024-42084, CVE-2024-41057, CVE-2024-42252, CVE-2024-41055, CVE-2024-42158, CVE-2024-42097, CVE-2024-42101, CVE-2024-42095, CVE-2024-41084, CVE-2024-41051, CVE-2024-41032, CVE-2024-41046, CVE-2024-42231, CVE-2024-42133, CVE-2024-42089, CVE-2024-41062, CVE-2024-41033, CVE-2024-41012, CVE-2024-41077, CVE-2024-41064, CVE-2024-41082, CVE-2024-41090, CVE-2024-42065, CVE-2024-41096, CVE-2024-42119, CVE-2024-41054, CVE-2024-42064, CVE-2024-42253, CVE-2024-42237, CVE-2024-42120, CVE-2024-41066, CVE-2024-41083, CVE-2024-42129, CVE-2024-41085, CVE-2024-41058, CVE-2024-42146, CVE-2024-42156, CVE-2024-42076, CVE-2024-42149, CVE-2024-42069, CVE-2024-41039, CVE-2024-42110, CVE-2024-42150, CVE-2024-41015, CVE-2024-39486, CVE-2024-42144, CVE-2024-42131, CVE-2024-42087, CVE-2024-42091, CVE-2024-42236, CVE-2024-42088, CVE-2024-42112, CVE-2024-42142, CVE-2024-42082, CVE-2024-42111, CVE-2024-41028, CVE-2024-45001, CVE-2024-42077, CVE-2024-42102, CVE-2024-42239, CVE-2024-42140, CVE-2024-41091, CVE-2024-41050, CVE-2024-41034, CVE-2024-43858, CVE-2024-42145, CVE-2024-42227, CVE-2024-41029, CVE-2024-42230, CVE-2024-42096, CVE-2024-42238, CVE-2024-41027, CVE-2024-42063, CVE-2024-41023, CVE-2024-41041, CVE-2024-41038, CVE-2024-41073, CVE-2024-41067, CVE-2024-41025, CVE-2024-42152, CVE-2024-42247, CVE-2024-41065, CVE-2024-42121, CVE-2024-42157, CVE-2024-42080, CVE-2024-41076, CVE-2024-41059, CVE-2024-42108, CVE-2024-42251, CVE-2024-42093,…
Record
USN-7095-1
Updated
2026-11-02
OSVUSN-7156-1 No score

linux-gkeop vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • Null block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • Cirrus firmware drivers;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Serial drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • Bitmap API;
  • BPF subsystem;
  • Syscall compatibility layer;
  • Memory Management;
  • Memory management;
  • Objagg library;
  • Perf events;
  • Syscall interfaces;
  • Virtio network driver;
  • VMware vSockets driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Netfilter;
  • Tracing infrastructure;
  • io_uring subsystem;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • Locking primitives;
  • Padata parallel execution mechanism;
  • Scheduler infrastructure;
  • Closures library;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • KUnit for arithmetic overflow checks;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Network traffic control;…
Record
USN-7156-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Azure Linux:3
 before 6.6.43.1-7
6.6.43.1-7
linux-lts
Alpaquita:23
 6.1.189-r0 up to 6.1.191-r0
6.1.191-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 7.0.0-284.30.1.el9_2.tuxcare.els8
7.0.0-284.30.1.el9_2.tuxcare.els8
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 86 CVEs
 before 5.14.0-284.30.1.el9_2.tuxcare.els8
5.14.0-284.30.1.el9_2.tuxcare.els8
Kernel
Linux
 5.18.0 up to 6.1.191, 6.2.0 up to 6.6.41, 6.7.0 up to 6.9.10
6.1.1916.6.416.9.10
linux
Debian:12
 All versions, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.190-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1
 None known
linux
Debian:13
 before 6.9.10-1
6.9.10-1
linux
Debian:14
 before 6.9.10-1
6.9.10-1
kernel
openEuler:24.03-LTS
From an advisory covering 93 CVEs
 before 6.6.0-41.0.0.48.oe2403
6.6.0-41.0.0.48.oe2403
bpftool-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:7.3.0-427.47.1.el9_4
0:7.3.0-427.47.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-debug-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-debug-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debug-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debug-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-doc
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-rt-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-rt-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-tools-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-zfcpdump-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-zfcpdump-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
libperf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
perf
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
perf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
python3-perf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
rtla
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
rv
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
bpftool
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:7.3.0-427.47.1.el9_4
0:7.3.0-427.47.1.el9_4
bpftool-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:7.3.0-427.47.1.el9_4
0:7.3.0-427.47.1.el9_4
kernel
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-debug
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-debug-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-debug-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-debug-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-debug-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-abi-stablelists
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debug
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debug-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debug-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debug-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debug-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debug-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debug-uki-virt
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-rt-debug-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-rt-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-tools
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-tools-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-tools-libs
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-uki-virt
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-zfcpdump
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-zfcpdump-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-zfcpdump-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-zfcpdump-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-zfcpdump-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
libperf-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
perf-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
python3-perf
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
python3-perf-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
bpftool-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:7.3.0-427.47.1.el9_4
0:7.3.0-427.47.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-64k-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debug-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-rt-debug-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-rt-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-tools-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-tools-libs-devel
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
libperf
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
libperf-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
perf-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
python3-perf-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
bpftool-debuginfo
Red Hat:rhel_eus:9.4::nfv
From an advisory covering 36 CVEs
 before 0:7.3.0-427.47.1.el9_4
0:7.3.0-427.47.1.el9_4
kernel-debug-debuginfo
Red Hat:rhel_eus:9.4::nfv
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo
Red Hat:rhel_eus:9.4::nfv
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.4::nfv
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-rt
Red Hat:rhel_eus:9.4::nfv
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-rt-core
Red Hat:rhel_eus:9.4::nfv
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-rt-debug
Red Hat:rhel_eus:9.4::nfv
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
kernel-rt-debug-core
Red Hat:rhel_eus:9.4::nfv
From an advisory covering 36 CVEs
 before 0:5.14.0-427.47.1.el9_4
0:5.14.0-427.47.1.el9_4
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1.150600.12.10.2
6.4.0-150600.23.25.1.150600.12.10.2
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.2
6.4.0-150600.23.25.2
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.2
6.4.0-150600.23.25.2
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-livepatch-SLE15-SP6_Update_5
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 162 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1.150600.12.10.2
6.4.0-150600.23.25.1.150600.12.10.2
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.2
6.4.0-150600.23.25.2
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.2
6.4.0-150600.23.25.2
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-livepatch-SLE15-SP6-RT_Update_4
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 162 CVEs
 before 1-150600.1.3.1
1-150600.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 162 CVEs
 before 6.4.0-20.1
6.4.0-20.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 162 CVEs
 before 6.4.0-17.1.1.51
6.4.0-17.1.1.51
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 162 CVEs
 before 6.4.0-20.1
6.4.0-20.1
kernel-livepatch-MICRO-6-0_Update_3
SUSE:Linux Micro 6.0
From an advisory covering 162 CVEs
 before 1-1.2
1-1.2
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 162 CVEs
 before 6.4.0-20.1
6.4.0-20.1
kernel-livepatch-MICRO-6-0-RT_Update_3
SUSE:Linux Micro 6.0
From an advisory covering 162 CVEs
 before 1-1.2
1-1.2
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 162 CVEs
 before 6.4.0-11.1
6.4.0-11.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 162 CVEs
 before 6.4.0-11.1
6.4.0-11.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1018.19~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.1
6.8.0-1018.19~22.04.1
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1017.20~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.16.8.0-1014.16~22.04.16.8.0-1015.17~22.04.2
6.8.0-1017.20~22.04.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-gcp-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
 None known
linux-gcp-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1017.19~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.16.8.0-1015.17~22.04.16.8.0-1016.18~22.04.1
6.8.0-1017.19~22.04.1
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
 None known
linux-hwe-6.8
Ubuntu:22.04:LTS
 before 6.8.0-48.48~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
6.8.0-48.48~22.04.1
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
 None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-lowlatency-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1
Show 8 moreShow less
6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-lowlatency-hwe-6.8
Ubuntu:22.04:LTS
 before 6.8.0-48.48.3~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1
6.8.0-48.48.3~22.04.1
linux-nvidia-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
 None known
linux-nvidia-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15
Show 6 moreShow less
6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25
 None known
linux-nvidia-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1017.19~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.1
6.8.0-1017.19~22.04.1
linux-oem-5.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
 None known
linux-oem-6.0
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
 None known
linux-oem-6.1
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
 None known
linux-oem-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8
Show 14 moreShow less
6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28
 None known
linux-oracle-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1
Show 8 moreShow less
6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1
 None known
linux-oracle-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1015.15~22.04.1, plus listed versions
6.8.0-1006.6~22.04.36.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.16.8.0-1014.14~22.04.1
6.8.0-1015.15~22.04.1
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-riscv-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
 None known
linux-riscv-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1
Show 5 moreShow less
6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-riscv-6.8
Ubuntu:22.04:LTS
 before 6.8.0-48.48.1~22.04.2, plus listed versions
6.8.0-38.38.1~22.04.16.8.0-39.39.1~22.04.16.8.0-40.40.1~22.04.16.8.0-41.41.1~22.04.16.8.0-44.44.1~22.04.16.8.0-47.47.1~22.04.1
6.8.0-48.48.1~22.04.2
linux-starfive-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
 None known
linux-starfive-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1
 None known
linux-starfive-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1
Show 6 moreShow less
6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1
 None known
linux
Ubuntu:24.04:LTS
 before 6.8.0-48.48, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 11 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.47
6.8.0-48.48
linux-aws
Ubuntu:24.04:LTS
 before 6.8.0-1018.20, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 9 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.18
6.8.0-1018.20
linux-azure
Ubuntu:24.04:LTS
 before 6.8.0-1017.20, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 9 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.18
6.8.0-1017.20
linux-gcp
Ubuntu:24.04:LTS
 before 6.8.0-1017.19, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 10 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.18
6.8.0-1017.19
linux-gke
Ubuntu:24.04:LTS
 before 6.8.0-1013.17, plus listed versions
6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10
Show 5 moreShow less
6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.15
6.8.0-1013.17
linux-gkeop
Ubuntu:24.04:LTS
 before 6.8.0-1002.4, plus listed versions
6.8.0-1001.3
6.8.0-1002.4
linux-ibm
Ubuntu:24.04:LTS
 before 6.8.0-1015.15, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 9 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.14
6.8.0-1015.15
linux-lowlatency
Ubuntu:24.04:LTS
 before 6.8.0-48.48.3, plus listed versions
6.5.0-9.9.16.6.0-14.14.16.8.0-7.7.16.8.0-25.25.36.8.0-28.28.1
Show 10 moreShow less
6.8.0-31.31.16.8.0-35.35.16.8.0-36.36.16.8.0-38.38.16.8.0-39.39.16.8.0-40.40.16.8.0-41.41.16.8.0-44.44.16.8.0-45.45.16.8.0-47.47.1
6.8.0-48.48.3
linux-nvidia
Ubuntu:24.04:LTS
 before 6.8.0-1017.19, plus listed versions
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.11
Show 4 moreShow less
6.8.0-1012.126.8.0-1013.146.8.0-1014.156.8.0-1015.16
6.8.0-1017.19
linux-nvidia-lowlatency
Ubuntu:24.04:LTS
 before 6.8.0-1017.19.1, plus listed versions
6.8.0-1009.9.16.8.0-1011.11.16.8.0-1012.12.16.8.0-1013.14.16.8.0-1014.15.16.8.0-1015.16.1
6.8.0-1017.19.1
linux-oem-6.8
Ubuntu:24.04:LTS
 before 6.8.0-1016.16, plus listed versions
6.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.7
Show 7 moreShow less
6.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.14
6.8.0-1016.16
linux-oracle
Ubuntu:24.04:LTS
 before 6.8.0-1015.16, plus listed versions
6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5
Show 7 moreShow less
6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.14
6.8.0-1015.16
linux-raspi
Ubuntu:24.04:LTS
 before 6.8.0-1014.16, plus listed versions
6.5.0-1005.76.7.0-1001.16.8.0-1001.16.8.0-1002.26.8.0-1003.3
Show 10 moreShow less
6.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.14
6.8.0-1014.16
linux-riscv
Ubuntu:24.04:LTS
 before 6.8.0-48.48.1, plus listed versions
6.5.0-9.9.16.8.0-20.20.16.8.0-28.28.16.8.0-31.31.16.8.0-35.35.1
Show 7 moreShow less
6.8.0-36.36.16.8.0-38.38.16.8.0-39.39.16.8.0-40.40.16.8.0-41.41.16.8.0-44.44.16.8.0-47.47.1
6.8.0-48.48.1
linux-raspi-realtime
Ubuntu:Pro:Realtime:24.04:LTS
 before 6.8.0-2013.14, plus listed versions
6.7.0-2001.16.8.0-2001.16.8.0-2002.26.8.0-2004.46.8.0-2005.5
Show 7 moreShow less
6.8.0-2006.66.8.0-2007.76.8.0-2008.86.8.0-2009.96.8.0-2010.106.8.0-2011.116.8.0-2012.12
6.8.0-2013.14
linux-realtime
Ubuntu:Pro:Realtime:24.04:LTS
 before 6.8.1-1011.11, plus listed versions
6.8.0-1008.196.8.1-1001.16.8.1-1002.26.8.1-1003.36.8.1-1004.4
Show 6 moreShow less
6.8.1-1005.56.8.1-1006.66.8.1-1007.76.8.1-1008.86.8.1-1009.96.8.1-1010.10
6.8.1-1011.11
linux-gcp-6.8
Ubuntu:22.04:LTS
From an advisory covering 196 CVEs
 before 6.8.0-1017.19~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.16.8.0-1015.17~22.04.16.8.0-1016.18~22.04.1
6.8.0-1017.19~22.04.1
linux-hwe-6.8
Ubuntu:22.04:LTS
From an advisory covering 196 CVEs
 before 6.8.0-48.48~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
6.8.0-48.48~22.04.1
linux
Ubuntu:24.04:LTS
From an advisory covering 196 CVEs
 before 6.8.0-48.48, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 11 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.47
6.8.0-48.48
linux-azure
Ubuntu:24.04:LTS
From an advisory covering 196 CVEs
 before 6.8.0-1017.20, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 9 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.18
6.8.0-1017.20

History

History
RecordedChangedSources
affected
affectedOSV
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-42243 is a medium vulnerability (CVSS 5.5) in Linux, published August 7, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. Fixed in kernel 6.6.43.1-7.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 170 package rows, 322 versions, 1,127 references and the rest of 17 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open