Every CVE Search/ Get API key

CVE-2024-42305

ext4: check dot and dotdot of dx_root before making dir indexed

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

ext4: check dot and dotdot of dx_root before making dir indexed

Syzbot reports a issue as follows:

BUG: unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D 23ffee067 PUD 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 PID: 5079 Comm: syz-executor306 Not tainted 6.10.0-rc5-g55027e689933 #0 Call Trace: <TASK> make_indexed_dir+0xdaf/0x13c0 fs/ext4/namei.c:2341 ext4_add_entry+0x222a/0x25d0 fs/ext4/namei.c:2451 ext4_rename fs/ext4/namei.c:3936 [inline] ext4_rename2+0x26e5/0x4370 fs/ext4/namei.c:4214 [...]

The immediate cause of this problem is that there is only one valid dentry for the block to be split during do_split, so split==0 results in out of bounds accesses to the map triggering the issue.

do_split
  unsigned split
  dx_make_map
   count = 1
  split = count/2 = 0;
  continued = hash2 == map[split - 1].hash;
   ---> map[4294967295]

The maximum length of a filename is 255 and the minimum block size is 1024, so it is always guaranteed that the number of entries is greater than or equal to 2 when do_split() is called.

But syzbot's crafted image has no dot and dotdot in dir, and the dentry distribution in dirblock is as follows:

bus dentry1 hole dentry2 free |xx--|xx-------------|...............|xx-------------|...............| 0 12 (8+248)=256 268 256 524 (8+256)=264 788 236 1024

So when renaming dentry1 increases its name_len length by 1, neither hole nor free is sufficient to hold the new dentry, and make_indexed_dir() is called.

In make_indexed_dir() it is assumed that the first two entries of the dirblock must be dot and dotdot, so bus and dentry1 are left in dx_root because they are treated as dot and dotdot, and only dentry2 is moved to the new leaf block. That's why count is equal to 1.

Therefore add the ext4_check_dx_root() helper function to add more sanity checks to dot and dotdot before starting the conversion to avoid the above issue.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.23%Up 0.2 points since Aug 18, 2024
90%50%10%1%

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

ext4: check dot and dotdot of dx_root before making dir indexed

Syzbot reports a issue as follows:

BUG: unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D 23ffee067 PUD 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 PID: 5079 Comm: syz-executor306 Not tainted 6.10.0-rc5-g55027e689933 #0 Call Trace: <TASK> make_indexed_dir+0xdaf/0x13c0 fs/ext4/namei.c:2341 ext4_add_entry+0x222a/0x25d0 fs/ext4/namei.c:2451 ext4_rename fs/ext4/namei.c:3936 [inline] ext4_rename2+0x26e5/0x4370 fs/ext4/namei.c:4214 [...]

The immediate cause of this problem is that there is only one valid dentry for the block to be split during do_split, so split==0 results in out of bounds accesses to the map triggering the issue.

do_split
  unsigned split
  dx_make_map
   count = 1
  split = count/2 = 0;
  continued = hash2 == map[split - 1].hash;
   ---> map[4294967295]

The maximum length of a filename is 255 and the minimum block size is 1024, so it is always guaranteed that the number of entries is greater than or equal to 2 when do_split() is called.

But syzbot's crafted image has no dot and dotdot in dir, and the dentry distribution in dirblock is as follows:

bus dentry1 hole dentry2 free |xx--|xx-------------|...............|xx-------------|...............| 0 12 (8+248)=256 268 256 524 (8+256)=264 788 236 1024

So when renaming dentry1 increases its name_len length by 1, neither hole nor free is sufficient to hold the new dentry, and make_indexed_dir() is called.

In make_indexed_dir() it is assumed that the first two entries of the dirblock must be dot and dotdot, so bus and dentry1 are left in dx_root because they are treated as dot and dotdot, and only dentry2 is moved to the new leaf block. That's why count is equal to 1.

Therefore add the ext4_check_dx_root() helper function to add more sanity checks to dot and dotdot before starting the conversion to avoid the above issue.

Record
CVE-2024-42305
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

ext4: check dot and dotdot of dx_root before making dir indexed

In the Linux kernel, the following vulnerability has been resolved:

ext4: check dot and dotdot of dx_root before making dir indexed

Syzbot reports a issue as follows:

BUG: unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D 23ffee067 PUD 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 PID: 5079 Comm: syz-executor306 Not tainted 6.10.0-rc5-g55027e689933 #0 Call Trace: <TASK> make_indexed_dir+0xdaf/0x13c0 fs/ext4/namei.c:2341 ext4_add_entry+0x222a/0x25d0 fs/ext4/namei.c:2451 ext4_rename fs/ext4/namei.c:3936 [inline] ext4_rename2+0x26e5/0x4370 fs/ext4/namei.c:4214 [...]

The immediate cause of this problem is that there is only one valid dentry for the block to be split during do_split, so split==0 results in out of bounds accesses to the map triggering the issue.

do_split
  unsigned split
  dx_make_map
   count = 1
  split = count/2 = 0;
  continued = hash2 == map[split - 1].hash;
   ---> map[4294967295]

The maximum length of a filename is 255 and the minimum block size is 1024, so it is always guaranteed that the number of entries is greater than or equal to 2 when do_split() is called.

But syzbot's crafted image has no dot and dotdot in dir, and the dentry distribution in dirblock is as follows:

bus dentry1 hole dentry2 free |xx--|xx-------------|...............|xx-------------|...............| 0 12 (8+248)=256 268 256 524 (8+256)=264 788 236 1024

So when renaming dentry1 increases its name_len length by 1, neither hole nor free is sufficient to hold the new dentry, and make_indexed_dir() is called.

In make_indexed_dir() it is assumed that the first two entries of the dirblock must be dot and dotdot, so bus and dentry1 are left in dx_root because they are treated as dot and dotdot, and only dentry2 is moved to the new leaf block. That's why count is equal to 1.

Therefore add the ext4_check_dx_root() helper function to add more sanity checks to dot and dotdot before starting the conversion to avoid the above issue.

Record
CVE-2024-42305
Updated
2026-11-02
EUVDEUVD-2024-39528 No score

In the Linux kernel, the following vulnerability has been resolved:

ext4: check dot and dotdot of dx_root before making dir indexed

Syzbot reports a issue as follows:

BUG: unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D 23ffee067 PUD 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 PID: 5079 Comm: syz-executor306 Not tainted 6.10.0-rc5-g55027e689933 #0 Call Trace: <TASK> make_indexed_dir+0xdaf/0x13c0 fs/ext4/namei.c:2341 ext4_add_entry+0x222a/0x25d0 fs/ext4/namei.c:2451 ext4_rename fs/ext4/namei.c:3936 [inline] ext4_rename2+0x26e5/0x4370 fs/ext4/namei.c:4214 [...]

The immediate cause of this problem is that there is only one valid dentry for the block to be split during do_split, so split==0 results in out of bounds accesses to the map triggering the issue.

do_split
  unsigned split
  dx_make_map
   count = 1
  split = count/2 = 0;
  continued = hash2 == map[split - 1].hash;
   ---> map[4294967295]

The maximum length of a filename is 255 and the minimum block size is 1024, so it is always guaranteed that the number of entries is greater than or equal to 2 when do_split() is called.

But syzbot's crafted image has no dot and dotdot in dir, and the dentry distribution in dirblock is as follows:

bus dentry1 hole dentry2 free |xx--|xx-------------|...............|xx-------------|...............| 0 12 (8+248)=256 268 256 524 (8+256)=264 788 236 1024

So when renaming dentry1 increases its name_len length by 1, neither hole nor free is sufficient to hold the new dentry, and make_indexed_dir() is called.

In make_indexed_dir() it is assumed that the first two entries of the dirblock must be dot and dotdot, so bus and dentry1 are left in dx_root because they are treated as dot and dotdot, and only dentry2 is moved to the new leaf block. That's why count is equal to 1.

Therefore add the ext4_check_dx_root() helper function to add more sanity checks to dot and dotdot before starting the conversion to avoid the above issue.

Record
EUVD-2024-39528
Updated
2026-11-02
GitHub AdvisoriesGHSA-46jx-3cg2-9964 5.5

In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot...

In the Linux kernel, the following vulnerability has been resolved:

ext4: check dot and dotdot of dx_root before making dir indexed

Syzbot reports a issue as follows:

BUG: unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D 23ffee067 PUD 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 PID: 5079 Comm: syz-executor306 Not tainted 6.10.0-rc5-g55027e689933 #0 Call Trace: <TASK> make_indexed_dir+0xdaf/0x13c0 fs/ext4/namei.c:2341 ext4_add_entry+0x222a/0x25d0 fs/ext4/namei.c:2451 ext4_rename fs/ext4/namei.c:3936 [inline] ext4_rename2+0x26e5/0x4370 fs/ext4/namei.c:4214 [...]

The immediate cause of this problem is that there is only one valid dentry for the block to be split during do_split, so split==0 results in out of bounds accesses to the map triggering the issue.

do_split
  unsigned split
  dx_make_map
   count = 1
  split = count/2 = 0;
  continued = hash2 == map[split - 1].hash;
   ---> map[4294967295]

The maximum length of a filename is 255 and the minimum block size is 1024, so it is always guaranteed that the number of entries is greater than or equal to 2 when do_split() is called.

But syzbot's crafted image has no dot and dotdot in dir, and the dentry distribution in dirblock is as follows:

bus dentry1 hole dentry2 free |xx--|xx-------------|...............|xx-------------|...............| 0 12 (8+248)=256 268 256 524 (8+256)=264 788 236 1024

So when renaming dentry1 increases its name_len length by 1, neither hole nor free is sufficient to hold the new dentry, and make_indexed_dir() is called.

In make_indexed_dir() it is assumed that the first two entries of the dirblock must be dot and dotdot, so bus and dentry1 are left in dx_root because they are treated as dot and dotdot, and only dentry2 is moved to the new leaf block. That's why count is equal to 1.

Therefore add the ext4_check_dx_root() helper function to add more sanity checks to dot and dotdot before starting the conversion to avoid the above issue.

Record
GHSA-46jx-3cg2-9964
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVBELL-CVE-2024-42305 5.5
Record
BELL-CVE-2024-42305
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-42305 5.5

In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dx_root before making dir indexed Syzbot reports a issue as follows: ============================================ BUG: unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D 23ffee067 PUD 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 PID: 5079 Comm: syz-executor306 Not tainted 6.10.0-rc5-g55027e689933 #0 Call Trace: <TASK> make_indexed_dir+0xdaf/0x13c0 fs/ext4/namei.c:2341 ext4_add_entry+0x222a/0x25d0 fs/ext4/namei.c:2451 ext4_rename fs/ext4/namei.c:3936 [inline] ext4_rename2+0x26e5/0x4370 fs/ext4/namei.c:4214 [...] ============================================ The immediate cause of this problem is that there is only one valid dentry for the block to be split during do_split, so split==0 results in out of bounds accesses to the map triggering the issue. do_split unsigned split dx_make_map count = 1 split = count/2 = 0; continued = hash2 == map[split - 1].hash; ---> map[4294967295] The maximum length of a filename is 255 and the minimum block size is 1024, so it is always guaranteed that the number of entries is greater than or equal to 2 when do_split() is called. But syzbot's crafted image has no dot and dotdot in dir, and the dentry distribution in dirblock is as follows: bus dentry1 hole dentry2 free |xx--|xx-------------|...............|xx-------------|...............| 0 12 (8+248)=256 268 256 524 (8+256)=264 788 236 1024 So when renaming dentry1 increases its name_len length by 1, neither hole nor free is sufficient to hold the new dentry, and make_indexed_dir() is called. In make_indexed_dir() it is assumed that the first two entries of the dirblock must be dot and dotdot, so bus and dentry1 are left in dx_root because they are treated as dot and dotdot, and only dentry2 is moved to the new leaf block. That's why count is equal to 1. Therefore add the ext4_check_dx_root() helper function to add more sanity checks to dot and dotdot before starting the conversion to avoid the above issue.

Record
DEBIAN-CVE-2024-42305
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 44 moreShow less
OSVOESA-2024-2077 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

btrfs: get rid of warning on transaction commit when using flushoncommit

When using the flushoncommit mount option, during almost every transaction commit we trigger a warning from __writeback_inodes_sb_nr():

$ cat fs/fs-writeback.c: (...) static void __writeback_inodes_sb_nr(struct super_block *sb, ... { (...) WARN_ON(!rwsem_is_locked(&sb->s_umount)); (...) } (...)

The trace produced in dmesg looks like the following:

[947.473890] WARNING: CPU: 5 PID: 930 at fs/fs-writeback.c:2610 __writeback_inodes_sb_nr+0x7e/0xb3 [947.481623] Modules linked in: nfsd nls_cp437 cifs asn1_decoder cifs_arc4 fscache cifs_md4 ipmi_ssif [947.489571] CPU: 5 PID: 930 Comm: btrfs-transacti Not tainted 95.16.3-srb-asrock-00001-g36437ad63879 #186 [947.497969] RIP: 0010:__writeback_inodes_sb_nr+0x7e/0xb3 [947.502097] Code: 24 10 4c 89 44 24 18 c6 (...) [947.519760] RSP: 0018:ffffc90000777e10 EFLAGS: 00010246 [947.523818] RAX: 0000000000000000 RBX: 0000000000963300 RCX: 0000000000000000 [947.529765] RDX: 0000000000000000 RSI: 000000000000fa51 RDI: ffffc90000777e50 [947.535740] RBP: ffff888101628a90 R08: ffff888100955800 R09: ffff888100956000 [947.541701] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888100963488 [947.547645] R13: ffff888100963000 R14: ffff888112fb7200 R15: ffff888100963460 [947.553621] FS: 0000000000000000(0000) GS:ffff88841fd40000(0000) knlGS:0000000000000000 [947.560537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [947.565122] CR2: 0000000008be50c4 CR3: 000000000220c000 CR4: 00000000001006e0 [947.571072] Call Trace: [947.572354] <TASK> [947.573266] btrfs_commit_transaction+0x1f1/0x998 [947.576785] ? start_transaction+0x3ab/0x44e [947.579867] ? schedule_timeout+0x8a/0xdd [947.582716] transaction_kthread+0xe9/0x156 [947.585721] ? btrfs_cleanup_transaction.isra.0+0x407/0x407 [947.590104] kthread+0x131/0x139 [947.592168] ? set_kthread_struct+0x32/0x32 [947.595174] ret_from_fork+0x22/0x30 [947.597561] </TASK> [947.598553] ---[ end trace 644721052755541c ]---

This is because we started using writeback_inodes_sb() to flush delalloc when committing a transaction (when using -o flushoncommit), in order to avoid deadlocks with filesystem freeze operations. This change was made by commit ce8ea7cc6eb313 ("btrfs: don't call btrfs_start_delalloc_roots in flushoncommit"). After that change we started producing that warning, and every now and then a user reports this since the warning happens too often, it spams dmesg/syslog, and a user is unsure if this reflects any problem that might compromise the filesystem's reliability.

We can not just lock the sb->s_umount semaphore before calling writeback_inodes_sb(), because that would at least deadlock with filesystem freezing, since at fs/super.c:freeze_super() sync_filesystem() is called while we are holding that semaphore in write mode, and that can trigger a transaction commit, resulting in a deadlock. It would also trigger the same type of deadlock in the unmount path. Possibly, it could also introduce some other locking dependencies that lockdep would report.

To fix this call try_to_writeback_inodes_sb() instead of writeback_inodes_sb(), because that will try to read lock sb->s_umount and then will only call writeback_inodes_sb() if it was able to lock it. This is fine because the cases where it can't read lock sb->s_umount are during a filesystem unmount or during a filesystem freeze - in those cases sb->s_umount is write locked and sync_filesystem() is called, which calls writeback_inodes_sb(). In other words, in all cases where we can't take a read lock on sb->s_umount, writeback is already being triggered elsewhere.

An alternative would be to call…

Record
OESA-2024-2077
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2078 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

btrfs: get rid of warning on transaction commit when using flushoncommit

When using the flushoncommit mount option, during almost every transaction commit we trigger a warning from __writeback_inodes_sb_nr():

$ cat fs/fs-writeback.c: (...) static void __writeback_inodes_sb_nr(struct super_block *sb, ... { (...) WARN_ON(!rwsem_is_locked(&sb->s_umount)); (...) } (...)

The trace produced in dmesg looks like the following:

[947.473890] WARNING: CPU: 5 PID: 930 at fs/fs-writeback.c:2610 __writeback_inodes_sb_nr+0x7e/0xb3 [947.481623] Modules linked in: nfsd nls_cp437 cifs asn1_decoder cifs_arc4 fscache cifs_md4 ipmi_ssif [947.489571] CPU: 5 PID: 930 Comm: btrfs-transacti Not tainted 95.16.3-srb-asrock-00001-g36437ad63879 #186 [947.497969] RIP: 0010:__writeback_inodes_sb_nr+0x7e/0xb3 [947.502097] Code: 24 10 4c 89 44 24 18 c6 (...) [947.519760] RSP: 0018:ffffc90000777e10 EFLAGS: 00010246 [947.523818] RAX: 0000000000000000 RBX: 0000000000963300 RCX: 0000000000000000 [947.529765] RDX: 0000000000000000 RSI: 000000000000fa51 RDI: ffffc90000777e50 [947.535740] RBP: ffff888101628a90 R08: ffff888100955800 R09: ffff888100956000 [947.541701] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888100963488 [947.547645] R13: ffff888100963000 R14: ffff888112fb7200 R15: ffff888100963460 [947.553621] FS: 0000000000000000(0000) GS:ffff88841fd40000(0000) knlGS:0000000000000000 [947.560537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [947.565122] CR2: 0000000008be50c4 CR3: 000000000220c000 CR4: 00000000001006e0 [947.571072] Call Trace: [947.572354] <TASK> [947.573266] btrfs_commit_transaction+0x1f1/0x998 [947.576785] ? start_transaction+0x3ab/0x44e [947.579867] ? schedule_timeout+0x8a/0xdd [947.582716] transaction_kthread+0xe9/0x156 [947.585721] ? btrfs_cleanup_transaction.isra.0+0x407/0x407 [947.590104] kthread+0x131/0x139 [947.592168] ? set_kthread_struct+0x32/0x32 [947.595174] ret_from_fork+0x22/0x30 [947.597561] </TASK> [947.598553] ---[ end trace 644721052755541c ]---

This is because we started using writeback_inodes_sb() to flush delalloc when committing a transaction (when using -o flushoncommit), in order to avoid deadlocks with filesystem freeze operations. This change was made by commit ce8ea7cc6eb313 ("btrfs: don't call btrfs_start_delalloc_roots in flushoncommit"). After that change we started producing that warning, and every now and then a user reports this since the warning happens too often, it spams dmesg/syslog, and a user is unsure if this reflects any problem that might compromise the filesystem's reliability.

We can not just lock the sb->s_umount semaphore before calling writeback_inodes_sb(), because that would at least deadlock with filesystem freezing, since at fs/super.c:freeze_super() sync_filesystem() is called while we are holding that semaphore in write mode, and that can trigger a transaction commit, resulting in a deadlock. It would also trigger the same type of deadlock in the unmount path. Possibly, it could also introduce some other locking dependencies that lockdep would report.

To fix this call try_to_writeback_inodes_sb() instead of writeback_inodes_sb(), because that will try to read lock sb->s_umount and then will only call writeback_inodes_sb() if it was able to lock it. This is fine because the cases where it can't read lock sb->s_umount are during a filesystem unmount or during a filesystem freeze - in those cases sb->s_umount is write locked and sync_filesystem() is called, which calls writeback_inodes_sb(). In other words, in all cases where we can't take a read lock on sb->s_umount, writeback is already being triggered elsewhere.

An alternative would be to call…

Record
OESA-2024-2078
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2079 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

parisc: Fix data TLB miss in sba_unmap_sg

Rolf Eike Beer reported the following bug:

[1274934.746891] Bad Address (null pointer deref?): Code=15 (Data TLB miss fault) at addr 0000004140000018 [1274934.746891] CPU: 3 PID: 5549 Comm: cmake Not tainted 5.15.4-gentoo-parisc64 #4 [1274934.746891] Hardware name: 9000/785/C8000 [1274934.746891] [1274934.746891] YZrvWESTHLNXBCVMcbcbcbcbOGFRQPDI [1274934.746891] PSW: 00001000000001001111111000001110 Not tainted [1274934.746891] r00-03 000000ff0804fe0e 0000000040bc9bc0 00000000406760e4 0000004140000000 [1274934.746891] r04-07 0000000040b693c0 0000004140000000 000000004a2b08b0 0000000000000001 [1274934.746891] r08-11 0000000041f98810 0000000000000000 000000004a0a7000 0000000000000001 [1274934.746891] r12-15 0000000040bddbc0 0000000040c0cbc0 0000000040bddbc0 0000000040bddbc0 [1274934.746891] r16-19 0000000040bde3c0 0000000040bddbc0 0000000040bde3c0 0000000000000007 [1274934.746891] r20-23 0000000000000006 000000004a368950 0000000000000000 0000000000000001 [1274934.746891] r24-27 0000000000001fff 000000000800000e 000000004a1710f0 0000000040b693c0 [1274934.746891] r28-31 0000000000000001 0000000041f988b0 0000000041f98840 000000004a171118 [1274934.746891] sr00-03 00000000066e5800 0000000000000000 0000000000000000 00000000066e5800 [1274934.746891] sr04-07 0000000000000000 0000000000000000 0000000000000000 0000000000000000 [1274934.746891] [1274934.746891] IASQ: 0000000000000000 0000000000000000 IAOQ: 00000000406760e8 00000000406760ec [1274934.746891] IIR: 48780030 ISR: 0000000000000000 IOR: 0000004140000018 [1274934.746891] CPU: 3 CR30: 00000040e3a9c000 CR31: ffffffffffffffff [1274934.746891] ORIG_R28: 0000000040acdd58 [1274934.746891] IAOQ[0]: sba_unmap_sg+0xb0/0x118 [1274934.746891] IAOQ[1]: sba_unmap_sg+0xb4/0x118 [1274934.746891] RP(r2): sba_unmap_sg+0xac/0x118 [1274934.746891] Backtrace: [1274934.746891] [<00000000402740cc>] dma_unmap_sg_attrs+0x6c/0x70 [1274934.746891] [<000000004074d6bc>] scsi_dma_unmap+0x54/0x60 [1274934.746891] [<00000000407a3488>] mptscsih_io_done+0x150/0xd70 [1274934.746891] [<0000000040798600>] mpt_interrupt+0x168/0xa68 [1274934.746891] [<0000000040255a48>] __handle_irq_event_percpu+0xc8/0x278 [1274934.746891] [<0000000040255c34>] handle_irq_event_percpu+0x3c/0xd8 [1274934.746891] [<000000004025ecb4>] handle_percpu_irq+0xb4/0xf0 [1274934.746891] [<00000000402548e0>] generic_handle_irq+0x50/0x70 [1274934.746891] [<000000004019a254>] call_on_stack+0x18/0x24 [1274934.746891] [1274934.746891] Kernel panic - not syncing: Bad Address (null pointer deref?)

The bug is caused by overrunning the sglist and incorrectly testing sg_dma_len(sglist) before nents. Normally this doesn't cause a crash, but in this case sglist crossed a page boundary. This occurs in the following code:

while (sg_dma_len(sglist) &amp;&amp; nents--) {

The fix is simply to test nents first and move the decrement of nents into the loop.(CVE-2022-48795)

In the Linux kernel, the following vulnerability has been resolved:

drm/virtio: Fix GEM handle creation UAF

Userspace can guess the handle value and try to race GEM object creation with handle close, resulting in a use-after-free if we dereference the object after dropping the handle's reference. For that reason, dropping the handle's reference must be done after we are done dereferencing the object.(CVE-2022-48899)

In the Linux kernel, the following vulnerability has been resolved:

thermal: int340x: fix memory leak in int3400_notify()

It is easy to hit the below memory leaks in my TigerLake platform:

unreferenced object 0xffff927c8b91dbc0 (size 32): comm "kworker/0:2", pid 112, jiffies 4294893323 (age 83.604s) hex dump (first 32 bytes): 4e 41…

Record
OESA-2024-2079
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2080 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

io_uring: fix memleak in io_init_wq_offload()

I got memory leak report when doing fuzz test:

BUG: memory leak unreferenced object 0xffff888107310a80 (size 96): comm "syz-executor.6", pid 4610, jiffies 4295140240 (age 20.135s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... backtrace: [<000000001974933b>] kmalloc include/linux/slab.h:591 [inline] [<000000001974933b>] kzalloc include/linux/slab.h:721 [inline] [<000000001974933b>] io_init_wq_offload fs/io_uring.c:7920 [inline] [<000000001974933b>] io_uring_alloc_task_context+0x466/0x640 fs/io_uring.c:7955 [<0000000039d0800d>] __io_uring_add_tctx_node+0x256/0x360 fs/io_uring.c:9016 [<000000008482e78c>] io_uring_add_tctx_node fs/io_uring.c:9052 [inline] [<000000008482e78c>] __do_sys_io_uring_enter fs/io_uring.c:9354 [inline] [<000000008482e78c>] __se_sys_io_uring_enter fs/io_uring.c:9301 [inline] [<000000008482e78c>] __x64_sys_io_uring_enter+0xabc/0xc20 fs/io_uring.c:9301 [<00000000b875f18f>] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [<00000000b875f18f>] do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80 [<000000006b0a8484>] entry_SYSCALL_64_after_hwframe+0x44/0xae

CPU0 CPU1 io_uring_enter io_uring_enter io_uring_add_tctx_node io_uring_add_tctx_node __io_uring_add_tctx_node __io_uring_add_tctx_node io_uring_alloc_task_context io_uring_alloc_task_context io_init_wq_offload io_init_wq_offload hash = kzalloc hash = kzalloc ctx->hash_map = hash ctx->hash_map = hash <- one of the hash is leaked

When calling io_uring_enter() in parallel, the 'hash_map' will be leaked, add uring_lock to protect 'hash_map'.(CVE-2021-47292)

In the Linux kernel, the following vulnerability has been resolved:

io_uring: ensure task_work gets run as part of cancelations

If we successfully cancel a work item but that work item needs to be processed through task_work, then we can be sleeping uninterruptibly in io_uring_cancel_generic() and never process it. Hence we don't make forward progress and we end up with an uninterruptible sleep warning.

While in there, correct a comment that should be IFF, not IIF.(CVE-2021-47504)

In the Linux kernel, the following vulnerability has been resolved:

ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()

ethtool_set_coalesce() now uses both the .get_coalesce() and .set_coalesce() callbacks. But the check for their availability is buggy, so changing the coalesce settings on a device where the driver provides only one of the callbacks results in a NULL pointer dereference instead of an -EOPNOTSUPP.

Fix the condition so that the availability of both callbacks is ensured. This also matches the netlink code.

Note that reproducing this requires some effort - it only affects the legacy ioctl path, and needs a specific combination of driver options:

  • have .get_coalesce() and .coalesce_supported but no .set_coalesce(), or
  • have .set_coalesce() but no .get_coalesce(). Here eg. ethtool doesn't cause the crash as it first attempts to call ethtool_get_coalesce() and bails out on error.(CVE-2021-47556)

In the Linux kernel, the following vulnerability has been resolved:

drm/gma500: Fix BUG: sleeping function called from invalid context errors

gma_crtc_page_flip() was holding the event_lock spinlock while calling crtc_funcs->mode_set_base() which takes ww_mutex.

The only reason to hold event_lock is to clear gma_crtc->page_flip_event on mode_set_base() errors.

Instead unlock it after setting gma_crtc->page_flip_event and on errors re-take…

Record
OESA-2024-2080
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2296 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

apparmor: Fix null pointer deref when receiving skb during sock creation

The panic below is observed when receiving ICMP packets with secmark set while an ICMP raw socket is being created. SK_CTX(sk)->label is updated in apparmor_socket_post_create(), but the packet is delivered to the socket before that, causing the null pointer dereference. Drop the packet if label context is not set.

BUG: kernel NULL pointer dereference, address: 000000000000004c
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 0 PID: 407 Comm: a.out Not tainted 6.4.12-arch1-1 #1 3e6fa2753a2d75925c34ecb78e22e85a65d083df
Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020
RIP: 0010:aa_label_next_confined+0xb/0x40
Code: 00 00 48 89 ef e8 d5 25 0c 00 e9 66 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 0f 1f 44 00 00 89 f0 &lt;8b&gt; 77 4c 39 c6 7e 1f 48 63 d0 48 8d 14 d7 eb 0b 83 c0 01 48 83 c2
RSP: 0018:ffffa92940003b08 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000000e
RDX: ffffa92940003be8 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff8b57471e7800 R08: ffff8b574c642400 R09: 0000000000000002
R10: ffffffffbd820eeb R11: ffffffffbeb7ff00 R12: ffff8b574c642400
R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
FS:  00007fb092ea7640(0000) GS:ffff8b577bc00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000000004c CR3: 00000001020f2005 CR4: 00000000007706f0
PKRU: 55555554
Call Trace:
 &lt;IRQ&gt;
 ? __die+0x23/0x70
 ? page_fault_oops+0x171/0x4e0
 ? exc_page_fault+0x7f/0x180
 ? asm_exc_page_fault+0x26/0x30
 ? aa_label_next_confined+0xb/0x40
 apparmor_secmark_check+0xec/0x330
 security_sock_rcv_skb+0x35/0x50
 sk_filter_trim_cap+0x47/0x250
 sock_queue_rcv_skb_reason+0x20/0x60
 raw_rcv+0x13c/0x210
 raw_local_deliver+0x1f3/0x250
 ip_protocol_deliver_rcu+0x4f/0x2f0
 ip_local_deliver_finish+0x76/0xa0
 __netif_receive_skb_one_core+0x89/0xa0
 netif_receive_skb+0x119/0x170
 ? __netdev_alloc_skb+0x3d/0x140
 vmxnet3_rq_rx_complete+0xb23/0x1010 [vmxnet3 56a84f9c97178c57a43a24ec073b45a9d6f01f3a]
 vmxnet3_poll_rx_only+0x36/0xb0 [vmxnet3 56a84f9c97178c57a43a24ec073b45a9d6f01f3a]
 __napi_poll+0x28/0x1b0
 net_rx_action+0x2a4/0x380
 __do_softirq+0xd1/0x2c8
 __irq_exit_rcu+0xbb/0xf0
 common_interrupt+0x86/0xa0
 &lt;/IRQ&gt;
 &lt;TASK&gt;
 asm_common_interrupt+0x26/0x40
RIP: 0010:apparmor_socket_post_create+0xb/0x200
Code: 08 48 85 ff 75 a1 eb b1 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 41 54 &lt;55&gt; 48 89 fd 53 45 85 c0 0f 84 b2 00 00 00 48 8b 1d 80 56 3f 02 48
RSP: 0018:ffffa92940ce7e50 EFLAGS: 00000286
RAX: ffffffffbc756440 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000003 RSI: 0000000000000002 RDI: ffff8b574eaab740
RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
R10: ffff8b57444cec70 R11: 0000000000000000 R12: 0000000000000003
R13: 0000000000000002 R14: ffff8b574eaab740 R15: ffffffffbd8e4748
 ? __pfx_apparmor_socket_post_create+0x10/0x10
 security_socket_post_create+0x4b/0x80
 __sock_create+0x176/0x1f0
 __sys_socket+0x89/0x100
 __x64_sys_socket+0x17/0x20
 do_syscall_64+0x5d/0x90
 ? do_syscall_64+0x6c/0x90
 ? do_syscall_64+0x6c/0x90
 ? do_syscall_64+0x6c/0x90
 entry_SYSCALL_64_after_hwframe+0x72/0xdc(CVE-2023-52889)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: use…

Record
OESA-2024-2296
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:6966 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:6966
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-42305 7.1

In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dx_root before making dir indexed Syzbot reports a issue as follows: ============================================ BUG: unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D 23ffee067 PUD 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 PID: 5079 Comm: syz-executor306 Not tainted 6.10.0-rc5-g55027e689933 #0 Call Trace: <TASK> make_indexed_dir+0xdaf/0x13c0 fs/ext4/namei.c:2341 ext4_add_entry+0x222a/0x25d0 fs/ext4/namei.c:2451 ext4_rename fs/ext4/namei.c:3936 [inline] ext4_rename2+0x26e5/0x4370 fs/ext4/namei.c:4214 [...] ============================================ The immediate cause of this problem is that there is only one valid dentry for the block to be split during do_split, so split==0 results in out of bounds accesses to the map triggering the issue. do_split unsigned split dx_make_map count = 1 split = count/2 = 0; continued = hash2 == map[split - 1].hash; ---> map[4294967295] The maximum length of a filename is 255 and the minimum block size is 1024, so it is always guaranteed that the number of entries is greater than or equal to 2 when do_split() is called. But syzbot's crafted image has no dot and dotdot in dir, and the dentry distribution in dirblock is as follows: bus dentry1 hole dentry2 free |xx--|xx-------------|...............|xx-------------|...............| 0 12 (8+248)=256 268 256 524 (8+256)=264 788 236 1024 So when renaming dentry1 increases its name_len length by 1, neither hole nor free is sufficient to hold the new dentry, and make_indexed_dir() is called. In make_indexed_dir() it is assumed that the first two entries of the dirblock must be dot and dotdot, so bus and dentry1 are left in dx_root because they are treated as dot and dotdot, and only dentry2 is moved to the new leaf block. That's why count is equal to 1. Therefore add the ext4_check_dx_root() helper function to add more sanity checks to dot and dotdot before starting the conversion to avoid the above issue.

Record
UBUNTU-CVE-2024-42305
CVSS 4.0
7.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-10
OSVCLSA-2025-1747430034 No score

Fix of 54 CVEs

Record
CLSA-2025-1747430034
Updated
2026-11-02
OSVCLSA-2025-1747430081 No score

Fix of 47 CVEs

Record
CLSA-2025-1747430081
Updated
2026-11-02
OSVCLSA-2025-1747431461 No score

Fix of 39 CVEs

[ Ubuntu: 4.15.0-247.258 ]

Record
CLSA-2025-1747431461
Updated
2026-11-02
OSVCLSA-2025-1749480611 No score

kernel: Fix of 26 CVEs

  • rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow {CVE-2024-38577}
  • tcp: fix mptcp DSS corruption due to large pmtu xmit {CVE-2024-50083}
  • vsock: Keep the binding until socket destruction {CVE-2025-21756}
  • memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove {CVE-2025-22020}
  • drm/i915: Fix potential bit_17 double-free {CVE-2023-52930}
  • netfilter: nft_tunnel: fix geneve_opt type confusion addition {CVE-2025-22056}
  • mm: shmem: fix data-race in shmem_getattr() {CVE-2024-46828}
  • nvmet-auth: assign dh_key to NULL after kfree_sensitive {CVE-2024-50215}
  • net: explicitly clear the sk pointer, when pf->create fails {CVE-2024-50186}
  • net: wwan: fix global oob in wwan_rtnl_policy {CVE-2024-50128}
  • ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free {CVE-2024-49983}
  • vhost_vdpa: assign irq bypass producer token correctly {CVE-2024-47748}
  • wifi: rtw88: always wait for both firmware loading attempts {CVE-2024-47718}
  • sched: sch_cake: fix bulk flow accounting logic for host fairness {CVE-2024-46828}
  • fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF {CVE-2024-46786}
  • net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934}
  • vhost/vsock: always initialize seqpacket_allow {CVE-2024-43873}
  • ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305}
  • nfsd: make sure exp active before svc_export_show {CVE-2024-56558}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync {CVE-2024-53208}
  • wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one {CVE-2024-56663}
  • Bluetooth: fix use-after-free in device_for_each_child() {CVE-2024-53237}
  • hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029}
  • tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
  • net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014}
Record
CLSA-2025-1749480611
Updated
2026-11-02
OSVCLSA-2025-1757693980 No score

kernel: Fix of 40 CVEs

  • x86/kvm: Disable kvmclock on all CPUs on shutdown {CVE-2021-47110}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
  • aio: mark AIO pseudo-fs noexec {CVE-2016-10044}
  • cifs: potential buffer overflow in handling symlinks {CVE-2022-49058}
  • NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232}
  • nfsd: register pernet ops last, unregister first {CVE-2025-38232}
  • do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498}
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • net: atm: add lec_mutex {CVE-2025-38180}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399}
  • scsi: target: Fix crash during SPEC_I_PT handling {CVE-2025-38399}
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
  • drivers:md:fix a potential use-after-free bug {CVE-2022-50022}
  • ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
  • HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
  • net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457}
  • misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788}
  • dlm: fix plock invalid read {CVE-2022-49407}
  • net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125}
  • scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}
  • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
  • HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495}
  • ext4: Fix possible corruption when moving a directory {CVE-2023-53137}
  • ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
  • vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}
  • HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
  • sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
  • ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305}
  • ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50229}
  • dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122}
  • net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
  • md-raid10: fix KASAN warning {CVE-2022-50211}
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
  • media: cxusb: no longer judge rbuf when the write fails {CVE-2025-38229}
  • ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212}
  • ext4: fix off-by-one error in do_split {CVE-2025-23150}
  • perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init {CVE-2025-37878}
  • sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
Record
CLSA-2025-1757693980
Updated
2026-11-02
OSVCLSA-2025-1757698145 No score

kernel: Fix of 42 CVEs

  • x86/kvm: Disable kvmclock on all CPUs on shutdown {CVE-2021-47110}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
  • aio: mark AIO pseudo-fs noexec {CVE-2016-10044}
  • cifs: potential buffer overflow in handling symlinks {CVE-2022-49058}
  • NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232}
  • nfsd: register pernet ops last, unregister first {CVE-2025-38232}
  • net: atm: fix use after free in lec_send() {CVE-2025-22004}
  • net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
  • do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498}
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • net: atm: add lec_mutex {CVE-2025-38180}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399}
  • scsi: target: Fix crash during SPEC_I_PT handling {CVE-2025-38399}
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
  • drivers:md:fix a potential use-after-free bug {CVE-2022-50022}
  • ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
  • HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
  • net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457}
  • misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788}
  • dlm: fix plock invalid read {CVE-2022-49407}
  • net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125}
  • scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}
  • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
  • HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495}
  • ext4: Fix possible corruption when moving a directory {CVE-2023-53137}
  • ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
  • vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}
  • HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
  • sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
  • ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305}
  • ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50229}
  • dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122}
  • net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
  • md-raid10: fix KASAN warning {CVE-2022-50211}
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
  • media: cxusb: no longer judge rbuf when the write fails {CVE-2025-38229}
  • ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212}
  • ext4: fix off-by-one error in do_split {CVE-2025-23150}
  • perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init {CVE-2025-37878}
  • sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
Record
CLSA-2025-1757698145
Updated
2026-11-02
OSVCLSA-2025-1757967705 No score

kernel: Fix of 42 CVEs

  • x86/kvm: Disable kvmclock on all CPUs on shutdown {CVE-2021-47110}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919}
  • aio: mark AIO pseudo-fs noexec {CVE-2016-10044}
  • cifs: potential buffer overflow in handling symlinks {CVE-2022-49058}
  • NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232}
  • nfsd: register pernet ops last, unregister first {CVE-2025-38232}
  • net: atm: fix use after free in lec_send() {CVE-2025-22004}
  • net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
  • do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498}
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • net: atm: add lec_mutex {CVE-2025-38180}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399}
  • scsi: target: Fix crash during SPEC_I_PT handling {CVE-2025-38399}
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
  • drivers:md:fix a potential use-after-free bug {CVE-2022-50022}
  • ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
  • HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
  • net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457}
  • misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788}
  • dlm: fix plock invalid read {CVE-2022-49407}
  • net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125}
  • scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114}
  • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
  • HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495}
  • ext4: Fix possible corruption when moving a directory {CVE-2023-53137}
  • ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
  • vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}
  • HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
  • sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
  • ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305}
  • ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50229}
  • dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122}
  • net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
  • md-raid10: fix KASAN warning {CVE-2022-50211}
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
  • media: cxusb: no longer judge rbuf when the write fails {CVE-2025-38229}
  • ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212}
  • ext4: fix off-by-one error in do_split {CVE-2025-23150}
  • perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init {CVE-2025-37878}
  • sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
Record
CLSA-2025-1757967705
Updated
2026-11-02
OSV No score

ext4: check dot and dotdot of dx_root before making dir indexed

In the Linux kernel, the following vulnerability has been resolved:

ext4: check dot and dotdot of dx_root before making dir indexed

Syzbot reports a issue as follows:

BUG: unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D 23ffee067 PUD 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 PID: 5079 Comm: syz-executor306 Not tainted 6.10.0-rc5-g55027e689933 #0 Call Trace: <TASK> make_indexed_dir+0xdaf/0x13c0 fs/ext4/namei.c:2341 ext4_add_entry+0x222a/0x25d0 fs/ext4/namei.c:2451 ext4_rename fs/ext4/namei.c:3936 [inline] ext4_rename2+0x26e5/0x4370 fs/ext4/namei.c:4214 [...]

The immediate cause of this problem is that there is only one valid dentry for the block to be split during do_split, so split==0 results in out of bounds accesses to the map triggering the issue.

do_split
  unsigned split
  dx_make_map
   count = 1
  split = count/2 = 0;
  continued = hash2 == map[split - 1].hash;
   ---> map[4294967295]

The maximum length of a filename is 255 and the minimum block size is 1024, so it is always guaranteed that the number of entries is greater than or equal to 2 when do_split() is called.

But syzbot's crafted image has no dot and dotdot in dir, and the dentry distribution in dirblock is as follows:

bus dentry1 hole dentry2 free |xx--|xx-------------|...............|xx-------------|...............| 0 12 (8+248)=256 268 256 524 (8+256)=264 788 236 1024

So when renaming dentry1 increases its name_len length by 1, neither hole nor free is sufficient to hold the new dentry, and make_indexed_dir() is called.

In make_indexed_dir() it is assumed that the first two entries of the dirblock must be dot and dotdot, so bus and dentry1 are left in dx_root because they are treated as dot and dotdot, and only dentry2 is moved to the new leaf block. That's why count is equal to 1.

Therefore add the ext4_check_dx_root() helper function to add more sanity checks to dot and dotdot before starting the conversion to avoid the above issue.

Record
CVE-2024-42305
Updated
2026-11-02
OSVMGASA-2024-0309 No score

Updated kernel, kmod-xtables-addons & kmod-virtualbox packages fix security vulnerabilities

Upstream kernel version 6.6.50 fix bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record
MGASA-2024-0309
Updated
2026-11-02
OSVMGASA-2024-0310 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.50 fix bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2024-0310
Updated
2026-11-02
OSVSUSE-SU-2024:3551-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
  • CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
  • CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
  • CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
  • CVE-2024-45017: net/mlx5: Fix…
Record
SUSE-SU-2024:3551-1
Updated
2026-11-02
OSVSUSE-SU-2024:3559-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47387: cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (bsc#1225316).
  • CVE-2022-48788: nvme-rdma: fix possible use-after-free in transport error_recovery work (bsc#1227952).
  • CVE-2022-48789: nvme-tcp: fix possible use-after-free in transport error_recovery work (bsc#1228000).
  • CVE-2022-48790: nvme: fix a possible use-after-free in controller reset during load (bsc#1227941).
  • CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002)
  • CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch() (bsc#1227953).
  • CVE-2022-48844: Bluetooth: hci_core: Fix leaking sent_cmd skb (bsc#1228068).
  • CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
  • CVE-2022-48943: KVM: x86/mmu: make apf token non-zero to fix bug (bsc#1229645).
  • CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398).
  • CVE-2023-52915: media: dvb-usb-v2: af9035: fix missing unlock (bsc#1230270).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-41073: nvme: avoid double free special payload (bsc#1228635).
  • CVE-2024-41079: nvmet: always initialize cqe.result (bsc#1228615).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44948: x86/mtrr: Check if fixed MTRRs exist before saving them (bsc#1230174).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
  • CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176).
  • CVE-2024-44969: s390/sclp: Prevent release of buffer in I/O (bsc#1230200).
  • CVE-2024-44982: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (bsc#1230204).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45008: Input: MT - limit max slots (bsc#1230248).
  • CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
  • CVE-2024-46675: usb: dwc3: core: Prevent USB core invalid event buffer address access (bsc#1230533).
  • CVE-2024-46676: nfc: pn533: Add poll mod list filling check (bsc#1230535).
  • CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
  • CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
  • CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515)
  • CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
  • CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589)
  • CVE-2024-46707: KVM: arm64: Make ICC_SGI_EL1 undef in the absence of a vGICv3 (bsc#1230582).
  • CVE-2024-46715: driver: iio: add…
Record
SUSE-SU-2024:3559-1
Updated
2026-11-02
OSVSUSE-SU-2024:3561-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
  • CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
  • CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
  • CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
  • CVE-2024-45017: net/mlx5: Fix IPsec…
Record
SUSE-SU-2024:3561-1
Updated
2026-11-02
OSVSUSE-SU-2024:3564-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
  • CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
  • CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
  • CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
  • CVE-2024-45017: net/mlx5: Fix IPsec…
Record
SUSE-SU-2024:3564-1
Updated
2026-11-02
OSVSUSE-SU-2024:3566-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-41073: nvme: avoid double free special payload (bsc#1228635).
  • CVE-2024-41079: nvmet: always initialize cqe.result (bsc#1228615).
  • CVE-2024-46859: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (bsc#1231089).
  • CVE-2024-46853: spi: nxp-fspi: fix the KASAN report out-of-bounds bug (bsc#1231083).
  • CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
  • CVE-2024-46822: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-46731: drm/amd/pm: fix the Out-of-bounds read warning (bsc#1230709).
  • CVE-2024-46772: drm/amd/display: Check denominator crb_pipes before used (bsc#1230772).
  • CVE-2024-46722: drm/amdgpu: fix mc_data out-of-bounds read warning (bsc#1230712).
  • CVE-2024-46787: userfaultfd: fix checks for huge PMDs (bsc#1230815).
  • CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
  • CVE-2024-46753: btrfs: handle errors from btrfs_dec_ref() properly (bsc#1230796).
  • CVE-2024-46761: pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (bsc#1230761).
  • CVE-2024-46759: hwmon: (adc128d818) Fix underflows seen when writing limit attributes (bsc#1230814).
  • CVE-2024-46745: Input: uinput - reject requests with unreasonable number of slots (bsc#1230748).
  • CVE-2024-46738: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (bsc#1230731).
  • CVE-2024-46783: tcp_bpf: fix return value of tcp_bpf_sendmsg() (bsc#1230810).
  • CVE-2024-44982: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (bsc#1230204).
  • CVE-2024-46723: drm/amdgpu: fix ucode out-of-bounds read warning (bsc#1230702).
  • CVE-2024-46750: PCI: Add missing bridge lock to pci_bus_lock() (bsc#1230783).
  • CVE-2024-46717: net/mlx5e: SHAMPO, Fix incorrect page release (bsc#1230719).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-46744: Squashfs: sanity check symbolic link size (bsc#1230747).
  • CVE-2024-46743: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756).
  • CVE-2024-46715: driver: iio: add missing checks on iio_info's callback access (bsc#1230700).
  • CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515)
  • CVE-2024-46675: usb: dwc3: core: Prevent USB core invalid event buffer address access (bsc#1230533).
  • CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589)
  • CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
  • CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
  • CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
  • CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
  • CVE-2024-46676: nfc: pn533: Add poll mod list filling check (bsc#1230535).
  • CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-46707: KVM: arm64: Make ICC_SGI_EL1 undef in the absence of a vGICv3 (bsc#1230582).
  • CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch() (bsc#1227953).
  • CVE-2022-48789: nvme-tcp: fix possible use-after-free in transport error_recovery work (bsc#1228000).
  • CVE-2022-48790: nvme: fix a possible use-after-free in…
Record
SUSE-SU-2024:3566-1
Updated
2026-11-02
OSVSUSE-SU-2024:3569-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
  • CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
  • CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
  • CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
  • CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit()…
Record
SUSE-SU-2024:3569-1
Updated
2026-11-02
OSVSUSE-SU-2024:3587-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
  • CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
  • CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
  • CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
  • CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in…
Record
SUSE-SU-2024:3587-1
Updated
2026-11-02
OSVSUSE-SU-2024:3591-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47387: cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (bsc#1225316).
  • CVE-2022-48788: nvme-rdma: fix possible use-after-free in transport error_recovery work (bsc#1227952).
  • CVE-2022-48789: nvme-tcp: fix possible use-after-free in transport error_recovery work (bsc#1228000).
  • CVE-2022-48790: nvme: fix a possible use-after-free in controller reset during load (bsc#1227941).
  • CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002)
  • CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch() (bsc#1227953).
  • CVE-2022-48844: Bluetooth: hci_core: Fix leaking sent_cmd skb (bsc#1228068).
  • CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
  • CVE-2022-48943: KVM: x86/mmu: make apf token non-zero to fix bug (bsc#1229645).
  • CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398).
  • CVE-2023-52915: media: dvb-usb-v2: af9035: fix missing unlock (bsc#1230270).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-41073: nvme: avoid double free special payload (bsc#1228635).
  • CVE-2024-41079: nvmet: always initialize cqe.result (bsc#1228615).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44948: x86/mtrr: Check if fixed MTRRs exist before saving them (bsc#1230174).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
  • CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176).
  • CVE-2024-44969: s390/sclp: Prevent release of buffer in I/O (bsc#1230200).
  • CVE-2024-44982: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (bsc#1230204).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45008: Input: MT - limit max slots (bsc#1230248).
  • CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
  • CVE-2024-46675: usb: dwc3: core: Prevent USB core invalid event buffer address access (bsc#1230533).
  • CVE-2024-46676: nfc: pn533: Add poll mod list filling check (bsc#1230535).
  • CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
  • CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
  • CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515)
  • CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
  • CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589)
  • CVE-2024-46707: KVM: arm64: Make ICC_SGI_EL1 undef in the absence of a vGICv3 (bsc#1230582).
  • CVE-2024-46715: driver: iio: add…
Record
SUSE-SU-2024:3591-1
Updated
2026-11-02
OSVSUSE-SU-2024:3592-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607).
  • CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633).
  • CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662)
  • CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619)
  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
  • CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830)
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178).
  • CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230)
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx()…
Record
SUSE-SU-2024:3592-1
Updated
2026-11-02
OSVSUSE-SU-2025:20073-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
  • CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
  • CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
  • CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
  • CVE-2024-45017: net/mlx5: Fix IPsec…
Record
SUSE-SU-2025:20073-1
Updated
2026-11-02
OSVSUSE-SU-2025:20077-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
  • CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
  • CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
  • CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
  • CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
  • CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
  • CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
  • CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
  • CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-42294: block: fix deadlock between sd_remove & sd_release (bsc#1229371).
  • CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
  • CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
  • CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
  • CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
  • CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
  • CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
  • CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
  • CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
  • CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
  • CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
  • CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
  • CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
  • CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
  • CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
  • CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
  • CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
  • CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
  • CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
  • CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
  • CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
  • CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
  • CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
  • CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
  • CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
  • CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
  • CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
  • CVE-2024-45017: net/mlx5: Fix…
Record
SUSE-SU-2025:20077-1
Updated
2026-11-02
OSVUSN-7088-1 No score

linux, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4 vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • CPU frequency scaling framework;
  • Device frequency scaling framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • QCOM SoC drivers;
  • Direct Digital Synthesis drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB subsystem;
  • BTRFS file system;
  • File systems infrastructure;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • BPF subsystem;
  • Core kernel;
  • DMA mapping infrastructure;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • Objagg library;
  • Memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • MAC80211 subsystem;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Wireless networking;
  • AppArmor security module;
  • Simplified Mandatory Access Control Kernel framework;
  • SoC audio core drivers;
  • USB sound devices; (CVE-2024-43894, CVE-2024-46737, CVE-2024-46828, CVE-2024-42244, CVE-2024-46723, CVE-2024-41073, CVE-2024-46756, CVE-2024-42288, CVE-2024-46840, CVE-2024-46771, CVE-2024-46757, CVE-2024-43860, CVE-2024-46747, CVE-2024-41017, CVE-2024-42246, CVE-2024-44988, CVE-2024-42281, CVE-2024-36484, CVE-2024-43856, CVE-2024-47668, CVE-2024-46759, CVE-2024-46744, CVE-2024-42289, CVE-2024-42131, CVE-2024-46679, CVE-2024-42304, CVE-2024-46818, CVE-2024-43858, CVE-2024-44960, CVE-2024-45028, CVE-2024-26885, CVE-2024-46676, CVE-2024-46780, CVE-2024-42310, CVE-2024-44987, CVE-2024-41090, CVE-2024-44954, CVE-2024-45026, CVE-2024-42285, CVE-2023-52614, CVE-2024-27051, CVE-2024-43880, CVE-2024-43839, CVE-2024-43884, CVE-2024-42311, CVE-2024-43893, CVE-2024-41072, CVE-2024-41091, CVE-2024-46758, CVE-2024-41022, CVE-2024-46745, CVE-2024-42305, CVE-2024-46673, CVE-2024-42284, CVE-2024-46844, CVE-2024-46677, CVE-2024-45025, CVE-2024-43861, CVE-2024-43914, CVE-2024-46783, CVE-2024-41012, CVE-2024-44999, CVE-2024-44946, CVE-2024-42276, CVE-2024-46740, CVE-2024-42295, CVE-2024-44947, CVE-2024-41059, CVE-2024-26669, CVE-2024-38602, CVE-2024-42306, CVE-2023-52918, CVE-2024-42297, CVE-2024-42229, CVE-2024-43853, CVE-2024-45006, CVE-2024-44998, CVE-2024-42283, CVE-2024-44952, CVE-2024-46761, CVE-2024-43841, CVE-2024-44944, CVE-2024-42313, CVE-2024-45008, CVE-2024-46714, CVE-2024-41065, CVE-2024-43883, CVE-2024-43867, CVE-2024-42286, CVE-2024-43879, CVE-2024-43846, CVE-2024-42280, CVE-2024-43854, CVE-2021-47212, CVE-2024-35848, CVE-2024-41020, CVE-2024-41068, CVE-2024-45021, CVE-2024-41098, CVE-2024-44965, CVE-2024-43890,…
Record
USN-7088-1
Updated
2026-11-02
OSVUSN-7088-2 No score

linux-azure, linux-bluefield vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • CPU frequency scaling framework;
  • Device frequency scaling framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • QCOM SoC drivers;
  • Direct Digital Synthesis drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • BTRFS file system;
  • File systems infrastructure;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • BPF subsystem;
  • Core kernel;
  • DMA mapping infrastructure;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • Objagg library;
  • Memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • MAC80211 subsystem;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Wireless networking;
  • AppArmor security module;
  • Simplified Mandatory Access Control Kernel framework;
  • SoC audio core drivers;
  • USB sound devices; (CVE-2024-46714, CVE-2024-42288, CVE-2024-42290, CVE-2024-44987, CVE-2024-41090, CVE-2024-42313, CVE-2024-46689, CVE-2024-46737, CVE-2024-44946, CVE-2024-44999, CVE-2024-44935, CVE-2024-38602, CVE-2024-43883, CVE-2024-26607, CVE-2024-41091, CVE-2024-45025, CVE-2024-42305, CVE-2024-26891, CVE-2024-41073, CVE-2024-44969, CVE-2024-26641, CVE-2024-46719, CVE-2024-40929, CVE-2024-46721, CVE-2024-46740, CVE-2024-41012, CVE-2024-42280, CVE-2024-46738, CVE-2024-46722, CVE-2024-42246, CVE-2024-41063, CVE-2024-41072, CVE-2024-41068, CVE-2024-43884, CVE-2024-46758, CVE-2024-43861, CVE-2024-42306, CVE-2024-42285, CVE-2024-41065, CVE-2024-46818, CVE-2024-43894, CVE-2024-44954, CVE-2024-42310, CVE-2024-46829, CVE-2023-52614, CVE-2024-47663, CVE-2024-42281, CVE-2024-42297, CVE-2024-46800, CVE-2024-44960, CVE-2024-44952, CVE-2024-46747, CVE-2024-42286, CVE-2024-41071, CVE-2024-43893, CVE-2023-52531, CVE-2024-43860, CVE-2024-46840, CVE-2024-41011, CVE-2024-43890, CVE-2024-45026, CVE-2024-42292, CVE-2024-27051, CVE-2024-41015, CVE-2024-47668, CVE-2024-46817, CVE-2024-43846, CVE-2024-44988, CVE-2024-44944, CVE-2024-43829, CVE-2024-45021, CVE-2024-43914, CVE-2024-43856, CVE-2024-46673, CVE-2024-46771, CVE-2024-41081, CVE-2024-43830, CVE-2024-43839, CVE-2024-43853, CVE-2024-47669, CVE-2024-42244, CVE-2021-47212, CVE-2024-46844, CVE-2024-44965, CVE-2024-41059, CVE-2024-46783, CVE-2024-42295, CVE-2024-35848, CVE-2024-41017, CVE-2024-47659, CVE-2024-42309, CVE-2024-26800, CVE-2024-41064, CVE-2024-43879, CVE-2024-46679, CVE-2024-43854, CVE-2024-41022,…
Record
USN-7088-2
Updated
2026-11-02
OSVUSN-7088-3 No score

linux-aws-5.4, linux-oracle-5.4 vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • CPU frequency scaling framework;
  • Device frequency scaling framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • QCOM SoC drivers;
  • Direct Digital Synthesis drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • BTRFS file system;
  • File systems infrastructure;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • BPF subsystem;
  • Core kernel;
  • DMA mapping infrastructure;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • Objagg library;
  • Memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • MAC80211 subsystem;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Wireless networking;
  • AppArmor security module;
  • Simplified Mandatory Access Control Kernel framework;
  • SoC audio core drivers;
  • USB sound devices; (CVE-2021-47212, CVE-2024-44965, CVE-2024-46676, CVE-2024-41091, CVE-2024-44946, CVE-2024-43894, CVE-2024-26668, CVE-2024-42259, CVE-2024-42295, CVE-2024-46685, CVE-2024-46722, CVE-2024-45028, CVE-2024-46815, CVE-2024-41081, CVE-2024-41022, CVE-2024-44948, CVE-2024-42301, CVE-2024-43914, CVE-2024-46771, CVE-2024-42289, CVE-2024-43841, CVE-2024-41042, CVE-2024-44999, CVE-2024-43893, CVE-2024-46758, CVE-2024-46828, CVE-2024-36484, CVE-2024-26669, CVE-2024-44952, CVE-2024-42265, CVE-2024-42311, CVE-2024-43880, CVE-2024-41070, CVE-2024-46829, CVE-2024-42292, CVE-2024-46719, CVE-2024-41020, CVE-2024-41015, CVE-2024-42283, CVE-2024-46744, CVE-2024-46679, CVE-2024-46800, CVE-2024-46777, CVE-2024-43835, CVE-2024-42271, CVE-2024-43882, CVE-2024-41072, CVE-2024-35848, CVE-2024-43860, CVE-2024-38611, CVE-2024-26607, CVE-2024-47663, CVE-2024-46780, CVE-2024-46675, CVE-2024-45003, CVE-2024-44969, CVE-2024-42244, CVE-2024-43856, CVE-2024-46755, CVE-2024-42286, CVE-2024-41063, CVE-2024-41068, CVE-2024-46743, CVE-2024-43839, CVE-2024-41065, CVE-2023-52531, CVE-2024-41090, CVE-2024-46747, CVE-2023-52614, CVE-2024-43853, CVE-2024-46737, CVE-2024-45021, CVE-2024-41012, CVE-2024-41064, CVE-2024-26800, CVE-2024-42246, CVE-2024-43908, CVE-2024-46723, CVE-2024-42310, CVE-2024-46781, CVE-2023-52918, CVE-2024-42313, CVE-2024-45006, CVE-2024-43890, CVE-2024-44954, CVE-2024-43858, CVE-2024-41098, CVE-2024-41071, CVE-2024-26641, CVE-2024-42280, CVE-2024-46673, CVE-2024-43846, CVE-2024-46721, CVE-2024-47667, CVE-2024-26885, CVE-2024-42304, CVE-2024-46745,…
Record
USN-7088-3
Updated
2026-11-02
OSVUSN-7088-4 No score

linux-aws, linux-azure-5.4, linux-kvm, linux-oracle, linux-xilinx-zynqmp vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • CPU frequency scaling framework;
  • Device frequency scaling framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • QCOM SoC drivers;
  • Direct Digital Synthesis drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Serial drivers;
  • BTRFS file system;
  • File systems infrastructure;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • BPF subsystem;
  • Core kernel;
  • DMA mapping infrastructure;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • Objagg library;
  • Memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • MAC80211 subsystem;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Wireless networking;
  • AppArmor security module;
  • Simplified Mandatory Access Control Kernel framework;
  • SoC audio core drivers;
  • USB sound devices; (CVE-2024-35848, CVE-2024-43853, CVE-2024-41017, CVE-2024-26607, CVE-2024-43839, CVE-2024-41072, CVE-2024-46815, CVE-2023-52614, CVE-2024-46798, CVE-2024-46676, CVE-2024-43914, CVE-2024-43841, CVE-2024-41012, CVE-2024-27051, CVE-2024-46738, CVE-2024-47663, CVE-2024-46723, CVE-2024-46740, CVE-2024-42287, CVE-2024-46750, CVE-2024-43894, CVE-2023-52531, CVE-2024-47668, CVE-2024-47669, CVE-2024-46685, CVE-2024-41011, CVE-2024-41064, CVE-2024-42305, CVE-2024-41073, CVE-2024-46829, CVE-2024-43860, CVE-2024-46679, CVE-2024-44999, CVE-2024-46817, CVE-2024-26800, CVE-2024-46689, CVE-2024-43908, CVE-2024-46739, CVE-2024-43893, CVE-2024-46828, CVE-2024-46777, CVE-2024-46721, CVE-2024-36484, CVE-2024-46822, CVE-2024-46840, CVE-2024-43880, CVE-2024-46781, CVE-2024-46673, CVE-2024-26669, CVE-2024-41098, CVE-2024-46737, CVE-2024-43871, CVE-2024-42281, CVE-2024-42301, CVE-2024-44995, CVE-2024-43879, CVE-2024-26668, CVE-2024-44965, CVE-2024-41068, CVE-2024-41059, CVE-2024-42229, CVE-2024-44987, CVE-2024-46745, CVE-2024-26891, CVE-2024-46719, CVE-2024-42292, CVE-2024-44952, CVE-2024-46756, CVE-2024-45028, CVE-2024-42283, CVE-2024-45025, CVE-2024-46743, CVE-2024-43867, CVE-2024-46771, CVE-2024-41081, CVE-2024-42244, CVE-2024-42284, CVE-2024-43858, CVE-2024-44998, CVE-2024-46758, CVE-2024-46800, CVE-2024-45003, CVE-2024-44935, CVE-2024-38611, CVE-2024-46844, CVE-2024-44954, CVE-2024-42313, CVE-2024-46783, CVE-2024-42311, CVE-2024-46761, CVE-2024-41022, CVE-2024-43829, CVE-2024-43835, CVE-2024-43846, CVE-2024-46755, CVE-2024-47667, CVE-2024-42259,…
Record
USN-7088-4
Updated
2026-11-02
OSVUSN-7088-5 No score

linux-raspi, linux-raspi-5.4 vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • CPU frequency scaling framework;
  • Device frequency scaling framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • QCOM SoC drivers;
  • Direct Digital Synthesis drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Serial drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • BTRFS file system;
  • File systems infrastructure;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • BPF subsystem;
  • Core kernel;
  • DMA mapping infrastructure;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • Objagg library;
  • Memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • MAC80211 subsystem;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Wireless networking;
  • AppArmor security module;
  • Simplified Mandatory Access Control Kernel framework;
  • SoC audio core drivers;
  • USB sound devices; (CVE-2024-42289, CVE-2024-26640, CVE-2024-42246, CVE-2024-43914, CVE-2024-46744, CVE-2024-45026, CVE-2024-41071, CVE-2024-43893, CVE-2024-46689, CVE-2024-41073, CVE-2024-42292, CVE-2024-43884, CVE-2024-42301, CVE-2024-43856, CVE-2024-46756, CVE-2024-46759, CVE-2024-27051, CVE-2024-26668, CVE-2024-46840, CVE-2024-42306, CVE-2024-41042, CVE-2024-45006, CVE-2024-42309, CVE-2024-26891, CVE-2024-42283, CVE-2024-46782, CVE-2024-44948, CVE-2024-43839, CVE-2024-47667, CVE-2024-44965, CVE-2024-42284, CVE-2024-44987, CVE-2024-46777, CVE-2024-41017, CVE-2024-46722, CVE-2024-41015, CVE-2024-46817, CVE-2024-46740, CVE-2024-43894, CVE-2024-26800, CVE-2024-45003, CVE-2024-46822, CVE-2024-26641, CVE-2024-44960, CVE-2024-44935, CVE-2024-42229, CVE-2024-42285, CVE-2024-44988, CVE-2024-46829, CVE-2024-41012, CVE-2024-46750, CVE-2024-43835, CVE-2024-43883, CVE-2024-43882, CVE-2024-46844, CVE-2024-41011, CVE-2024-44999, CVE-2024-46757, CVE-2024-42131, CVE-2024-46714, CVE-2024-41081, CVE-2024-45021, CVE-2024-46747, CVE-2024-46673, CVE-2024-46737, CVE-2024-43841, CVE-2024-42304, CVE-2024-45008, CVE-2024-42259, CVE-2024-42276, CVE-2024-46685, CVE-2024-46743, CVE-2023-52614, CVE-2024-42313, CVE-2024-41090, CVE-2024-46677, CVE-2024-43861, CVE-2024-42288, CVE-2024-43890, CVE-2024-41063, CVE-2024-43860, CVE-2024-47669, CVE-2024-42305, CVE-2024-43879, CVE-2024-42281, CVE-2024-46798, CVE-2024-42280, CVE-2024-42297, CVE-2024-42310,…
Record
USN-7088-5
Updated
2026-11-02
OSVUSN-7100-1 No score

linux, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi, linux-xilinx-zynqmp vulnerabilities

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • Null block device driver;
  • Character device driver;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • QCOM SoC drivers;
  • Direct Digital Synthesis drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • Core kernel;
  • DMA mapping infrastructure;
  • RCU subsystem;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • Objagg library;
  • Memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Wireless networking;
  • AppArmor security module;
  • Landlock security;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • SoC audio core drivers;
  • USB sound devices; (CVE-2024-43817, CVE-2024-42304, CVE-2024-46756, CVE-2024-42318, CVE-2024-41090, CVE-2024-41063, CVE-2024-44987, CVE-2024-46844, CVE-2024-46677, CVE-2024-44988, CVE-2024-42297, CVE-2024-26893, CVE-2024-46673, CVE-2024-26800, CVE-2024-42305, CVE-2024-46731, CVE-2024-41091, CVE-2024-46810, CVE-2024-41072, CVE-2022-48666, CVE-2024-38602, CVE-2024-46780, CVE-2024-46750, CVE-2024-43858, CVE-2024-41020, CVE-2024-46755, CVE-2024-46829, CVE-2024-41068, CVE-2024-45003, CVE-2024-42280, CVE-2024-42283, CVE-2024-43873, CVE-2024-46746, CVE-2024-44969, CVE-2024-46807, CVE-2024-41081, CVE-2024-44971, CVE-2024-26607, CVE-2024-43880, CVE-2024-42281, CVE-2024-42274, CVE-2024-43908, CVE-2024-42267, CVE-2024-47665, CVE-2024-45011, CVE-2024-46707, CVE-2024-42310, CVE-2024-42309, CVE-2024-44965, CVE-2024-46747, CVE-2024-42259, CVE-2024-46804, CVE-2024-46679, CVE-2024-45007, CVE-2024-45009, CVE-2024-46771, CVE-2024-46739, CVE-2024-41060, CVE-2024-46676, CVE-2024-46822, CVE-2024-42272, CVE-2024-41059, CVE-2024-43839, CVE-2024-46817, CVE-2024-47669,…
Record
USN-7100-1
Updated
2026-11-02
OSVUSN-7100-2 No score

linux-aws vulnerabilities

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • Null block device driver;
  • Character device driver;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • QCOM SoC drivers;
  • Direct Digital Synthesis drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • Core kernel;
  • DMA mapping infrastructure;
  • RCU subsystem;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • Objagg library;
  • Memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Wireless networking;
  • AppArmor security module;
  • Landlock security;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • SoC audio core drivers;
  • USB sound devices; (CVE-2024-42288, CVE-2024-41098, CVE-2024-43849, CVE-2024-46689, CVE-2024-44987, CVE-2024-40915, CVE-2024-46844, CVE-2024-45009, CVE-2024-46780, CVE-2024-41081, CVE-2024-43817, CVE-2024-44965, CVE-2024-46832, CVE-2024-41072, CVE-2024-45011, CVE-2024-46814, CVE-2024-45026, CVE-2024-44982, CVE-2024-46723, CVE-2024-46771, CVE-2024-46759, CVE-2024-41063, CVE-2024-46673, CVE-2023-52889, CVE-2024-41020, CVE-2024-46677, CVE-2024-46798, CVE-2024-45021, CVE-2024-46676, CVE-2024-47668, CVE-2024-42289, CVE-2024-45018, CVE-2024-46724, CVE-2024-41090, CVE-2024-43853, CVE-2024-42272, CVE-2024-43828, CVE-2024-42292, CVE-2024-26800, CVE-2024-43871, CVE-2024-46758, CVE-2024-36484, CVE-2024-46755, CVE-2024-46782, CVE-2024-43889, CVE-2024-46763, CVE-2024-41015, CVE-2024-43858, CVE-2024-41012, CVE-2024-44960, CVE-2024-46747, CVE-2024-42311, CVE-2024-47660, CVE-2024-42267, CVE-2024-44998, CVE-2024-43839, CVE-2024-43914, CVE-2024-46783, CVE-2024-47659, CVE-2024-46725, CVE-2024-46840, CVE-2024-43873, CVE-2024-46737, CVE-2024-44946, CVE-2024-43841,…
Record
USN-7100-2
Updated
2026-11-02
OSVUSN-7119-1 No score

linux-iot vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • CPU frequency scaling framework;
  • Device frequency scaling framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • Modular ISDN driver;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • EEPROM drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • QCOM SoC drivers;
  • Direct Digital Synthesis drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Serial drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • Watchdog drivers;
  • BTRFS file system;
  • File systems infrastructure;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • NILFS2 file system;
  • Netfilter;
  • BPF subsystem;
  • Core kernel;
  • DMA mapping infrastructure;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • Objagg library;
  • Memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • MAC80211 subsystem;
  • RxRPC session sockets;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Wireless networking;
  • AppArmor security module;
  • Integrity Measurement Architecture(IMA) framework;
  • Simplified Mandatory Access Control Kernel framework;
  • SoC audio core drivers;
  • USB sound devices; (CVE-2024-46750, CVE-2024-43853, CVE-2024-46722, CVE-2024-42311, CVE-2024-46679, CVE-2023-52918, CVE-2024-42309, CVE-2024-42160, CVE-2024-26668, CVE-2024-42271, CVE-2024-40929, CVE-2024-46747, CVE-2024-41064, CVE-2024-43839, CVE-2024-46757, CVE-2024-41059, CVE-2024-42301, CVE-2024-46737, CVE-2024-42297, CVE-2024-41015, CVE-2024-43854, CVE-2024-42289, CVE-2024-41017, CVE-2024-26787, CVE-2024-47667, CVE-2024-46675, CVE-2024-42246, CVE-2024-46723, CVE-2024-46817, CVE-2024-43841, CVE-2024-26800, CVE-2024-41098, CVE-2022-48863, CVE-2023-52531, CVE-2024-42265, CVE-2024-46828, CVE-2024-41020, CVE-2024-42305, CVE-2024-46755, CVE-2024-46744, CVE-2024-43871, CVE-2024-43884, CVE-2024-41042, CVE-2024-43914, CVE-2024-43856, CVE-2024-27397, CVE-2024-26607, CVE-2024-42228, CVE-2024-41091, CVE-2024-26677, CVE-2024-38611, CVE-2024-43867, CVE-2024-46829, CVE-2021-47188, CVE-2024-46756, CVE-2024-45025, CVE-2024-42313, CVE-2024-44947, CVE-2024-26669, CVE-2024-47668, CVE-2024-44987, CVE-2024-42295, CVE-2024-42281, CVE-2024-43880, CVE-2024-46777, CVE-2024-46780, CVE-2024-42285, CVE-2024-26891, CVE-2024-46714, CVE-2024-44999, CVE-2024-41068, CVE-2024-44944, CVE-2024-43882, CVE-2024-27051, CVE-2024-41072, CVE-2024-46783, CVE-2024-46781, CVE-2024-26885, CVE-2024-46844, CVE-2024-47669,…
Record
USN-7119-1
Updated
2026-11-02
OSVUSN-7123-1 No score

linux-azure vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain SMB messages, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-6610)

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • Null block device driver;
  • Character device driver;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Network drivers;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI drivers;
  • QCOM SoC drivers;
  • Direct Digital Synthesis drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VHOST drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • Core kernel;
  • DMA mapping infrastructure;
  • RCU subsystem;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • Objagg library;
  • Memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Wireless networking;
  • AppArmor security module;
  • Landlock security;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • SoC audio core drivers;
  • USB sound devices; (CVE-2023-52751, CVE-2024-43902, CVE-2024-46791, CVE-2024-45018, CVE-2024-44987, CVE-2024-46763, CVE-2024-46724, CVE-2024-26893, CVE-2024-42283, CVE-2024-46738, CVE-2024-46819, CVE-2024-44982, CVE-2023-52889, CVE-2024-45025, CVE-2023-52918, CVE-2024-46800, CVE-2024-46756, CVE-2024-46719, CVE-2024-39472, CVE-2024-42292, CVE-2024-45006, CVE-2024-46675, CVE-2024-44971, CVE-2024-46731, CVE-2024-42286, CVE-2024-44954, CVE-2024-42274, CVE-2024-46746, CVE-2024-42276, CVE-2024-43869, CVE-2024-43830, CVE-2024-42288, CVE-2024-41042, CVE-2024-42126, CVE-2024-43870, CVE-2024-46805, CVE-2024-41078, CVE-2024-44966, CVE-2024-44989, CVE-2024-46795, CVE-2024-44988, CVE-2024-38577, CVE-2024-43839, CVE-2024-43909, CVE-2024-46745, CVE-2024-42285,…
Record
USN-7123-1
Updated
2026-11-02
OSVUSN-7144-1 No score

linux-intel-iotg, linux-intel-iotg-5.15 vulnerabilities

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • Null block device driver;
  • Character device driver;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • Direct Digital Synthesis drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • Virtio Host (VHOST) subsystem;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • Bitmap API;
  • Objagg library;
  • Perf events;
  • Virtio network driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Network traffic control;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • Locking primitives;
  • Padata parallel execution mechanism;
  • RCU subsystem;
  • Scheduler infrastructure;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • Memory management;
  • Amateur Radio drivers;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • SCTP protocol;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Wireless networking;
  • AppArmor security module;
  • Landlock security;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • SoC audio core drivers;
  • USB sound devices; (CVE-2024-42280, CVE-2024-46759, CVE-2024-42286, CVE-2024-41042, CVE-2024-42276, CVE-2024-46732, CVE-2024-43902, CVE-2024-47665, CVE-2024-46675, CVE-2024-43873, CVE-2024-46761, CVE-2024-42281, CVE-2024-46795, CVE-2024-43869, CVE-2024-39472, CVE-2024-46800, CVE-2024-44998, CVE-2024-46746, CVE-2024-46747, CVE-2024-41011, CVE-2024-43871, CVE-2024-46737, CVE-2024-42318, CVE-2024-46731, CVE-2024-41022, CVE-2024-42285, CVE-2024-46752, CVE-2024-46818, CVE-2024-44935, CVE-2024-44946, CVE-2024-44944, CVE-2024-41015, CVE-2024-42312, CVE-2024-46676, CVE-2024-43834, CVE-2024-44966, CVE-2024-46743, CVE-2024-45026, CVE-2024-46805, CVE-2024-26607, CVE-2024-46771, CVE-2024-43905, CVE-2024-43884, CVE-2024-41070, CVE-2024-43829, CVE-2024-46725, CVE-2024-45028,…
Record
USN-7144-1
Updated
2026-11-02
OSVUSN-7154-1 No score

linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gke, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oem-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Android drivers;
  • ATM drivers;
  • Drivers core;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • Bitmap API;
  • BPF subsystem;
  • Memory Management;
  • Objagg library;
  • Perf events;
  • Virtio network driver;
  • VMware vSockets driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • Locking primitives;
  • Padata parallel execution mechanism;
  • Scheduler infrastructure;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • KUnit for arithmetic overflow checks;
  • Memory management;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • TIPC protocol;
  • Wireless networking;
  • AppArmor security module;
  • Landlock security;
  • SELinux security module;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • AMD SoC Alsa drivers;
  • Texas InstrumentS Audio (ASoC/HDA) drivers;
  • SoC Audio for Freescale CPUs drivers;
  • Intel ASoC drivers;
  • Amlogic Meson SoC drivers;
  • SoC audio core drivers;
  • USB sound devices;
  • Real-Time Linux Analysis tools; (CVE-2024-46783, CVE-2024-44960, CVE-2024-46743, CVE-2024-45009, CVE-2024-43820, CVE-2024-43888, CVE-2024-45010, CVE-2024-43839, CVE-2024-42304, CVE-2024-43846, CVE-2024-42258, CVE-2024-45005, CVE-2024-46709, CVE-2024-46774, CVE-2024-43883, CVE-2024-43859, CVE-2024-46721, CVE-2024-44944, CVE-2024-43913, CVE-2024-43843, CVE-2024-43845, CVE-2024-45018, CVE-2024-43909,…
Record
USN-7154-1
Updated
2026-11-02
OSVUSN-7154-2 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Android drivers;
  • ATM drivers;
  • Drivers core;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • Bitmap API;
  • BPF subsystem;
  • Memory Management;
  • Objagg library;
  • Perf events;
  • Virtio network driver;
  • VMware vSockets driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • Locking primitives;
  • Padata parallel execution mechanism;
  • Scheduler infrastructure;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • KUnit for arithmetic overflow checks;
  • Memory management;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • TIPC protocol;
  • Wireless networking;
  • AppArmor security module;
  • Landlock security;
  • SELinux security module;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • AMD SoC Alsa drivers;
  • Texas InstrumentS Audio (ASoC/HDA) drivers;
  • SoC Audio for Freescale CPUs drivers;
  • Intel ASoC drivers;
  • Amlogic Meson SoC drivers;
  • SoC audio core drivers;
  • USB sound devices;
  • Real-Time Linux Analysis tools; (CVE-2024-46783, CVE-2024-44960, CVE-2024-46743, CVE-2024-45009, CVE-2024-43820, CVE-2024-43888, CVE-2024-45010, CVE-2024-43839, CVE-2024-42304, CVE-2024-43846, CVE-2024-42258, CVE-2024-45005, CVE-2024-46709, CVE-2024-46774, CVE-2024-43883, CVE-2024-43859, CVE-2024-46721, CVE-2024-44944, CVE-2024-43913, CVE-2024-43843, CVE-2024-43845, CVE-2024-45018, CVE-2024-43909,…
Record
USN-7154-2
Updated
2026-11-02
OSVUSN-7155-1 No score

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Android drivers;
  • ATM drivers;
  • Drivers core;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • Bitmap API;
  • BPF subsystem;
  • Memory Management;
  • Objagg library;
  • Perf events;
  • Virtio network driver;
  • VMware vSockets driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • Locking primitives;
  • Padata parallel execution mechanism;
  • Scheduler infrastructure;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • KUnit for arithmetic overflow checks;
  • Memory management;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • TIPC protocol;
  • Wireless networking;
  • AppArmor security module;
  • Landlock security;
  • SELinux security module;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • AMD SoC Alsa drivers;
  • Texas InstrumentS Audio (ASoC/HDA) drivers;
  • SoC Audio for Freescale CPUs drivers;
  • Intel ASoC drivers;
  • Amlogic Meson SoC drivers;
  • SoC audio core drivers;
  • USB sound devices;
  • Real-Time Linux Analysis tools; (CVE-2024-43845, CVE-2024-42311, CVE-2024-46757, CVE-2024-46738, CVE-2024-44961, CVE-2024-44935, CVE-2024-46845, CVE-2024-46783, CVE-2024-42315, CVE-2023-52918, CVE-2024-46708, CVE-2024-44934, CVE-2024-42298, CVE-2024-46786, CVE-2024-46778, CVE-2024-44960, CVE-2024-42295, CVE-2024-43881, CVE-2024-44971, CVE-2024-43849, CVE-2024-43914, CVE-2024-44962, CVE-2024-43841,…
Record
USN-7155-1
Updated
2026-11-02
OSVUSN-7156-1 No score

linux-gkeop vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • Null block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Cdrom driver;
  • Character device driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • Cirrus firmware drivers;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • USB DSL drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Serial drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • Bitmap API;
  • BPF subsystem;
  • Syscall compatibility layer;
  • Memory Management;
  • Memory management;
  • Objagg library;
  • Perf events;
  • Syscall interfaces;
  • Virtio network driver;
  • VMware vSockets driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Netfilter;
  • Tracing infrastructure;
  • io_uring subsystem;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • Locking primitives;
  • Padata parallel execution mechanism;
  • Scheduler infrastructure;
  • Closures library;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • KUnit for arithmetic overflow checks;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • IUCV driver;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Network traffic control;…
Record
USN-7156-1
Updated
2026-11-02
OSVUSN-7194-1 No score

linux-azure-5.15 vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-12351)

Andy Nguyen discovered that the Bluetooth A2MP implementation in the Linux kernel did not properly initialize memory in some situations. A physically proximate remote attacker could use this to expose sensitive information (kernel memory). (CVE-2020-12352)

Andy Nguyen discovered that the Bluetooth HCI event packet parser in the Linux kernel did not properly handle event advertisements of certain sizes, leading to a heap-based buffer overflow. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-24490)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain SMB messages, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-6610)

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • ACPI drivers;
  • Android drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Null block device driver;
  • TPM device driver;
  • Character device driver;
  • Clock framework and drivers;
  • Buffer Sharing and Synchronization framework;
  • ARM SCMI message protocol;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Near Field Communication (NFC) drivers;
  • NTB driver;
  • Virtio pmem driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • 9P distributed file system;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file…
Record
USN-7194-1
Updated
2026-11-02
OSVUSN-7196-1 No score

linux-azure, linux-azure-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Android drivers;
  • ATM drivers;
  • Drivers core;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Character device driver;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Near Field Communication (NFC) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Direct Digital Synthesis drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • Tracing file system;
  • Bitmap API;
  • BPF subsystem;
  • Memory Management;
  • Objagg library;
  • Perf events;
  • Virtio network driver;
  • VMware vSockets driver;
  • KCM (Kernel Connection Multiplexor) sockets driver;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • Locking primitives;
  • Padata parallel execution mechanism;
  • Scheduler infrastructure;
  • Tracing infrastructure;
  • Radix Tree data structure library;
  • Kernel userspace event delivery library;
  • KUnit for arithmetic overflow checks;
  • Memory management;
  • Bluetooth subsystem;
  • Ethernet bridge;
  • CAN network layer;
  • Networking core;
  • Ethtool driver;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • Network traffic control;
  • SCTP protocol;
  • TIPC protocol;
  • Wireless networking;
  • AppArmor security module;
  • Landlock security;
  • SELinux security module;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • AMD SoC Alsa drivers;
  • Texas InstrumentS Audio (ASoC/HDA) drivers;
  • SoC Audio for Freescale CPUs drivers;
  • Intel ASoC drivers;
  • Amlogic Meson SoC drivers;
  • SoC audio core drivers;
  • USB sound devices;
  • Real-Time Linux Analysis tools; (CVE-2024-44979, CVE-2024-47658, CVE-2024-44970, CVE-2024-43913, CVE-2024-46816, CVE-2024-46738, CVE-2024-46777, CVE-2024-46730, CVE-2024-46811, CVE-2024-44954, CVE-2024-42317, CVE-2024-42279, CVE-2024-45002, CVE-2024-43826, CVE-2024-44967, CVE-2024-46721, CVE-2024-46763, CVE-2024-43856, CVE-2024-42284, CVE-2024-42289, CVE-2024-46806, CVE-2024-46776, CVE-2024-43843,…
Record
USN-7196-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-lts
Alpaquita:23
 6.1.99-r0 up to 6.1.104-r0
6.1.104-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
linux-buildinfo-4.4.0-274-tuxcare.els45-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-buildinfo-4.4.0-274-tuxcare.els45-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-cloud-tools-4.4.0-274-tuxcare.els45
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-cloud-tools-4.4.0-274-tuxcare.els45-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-cloud-tools-4.4.0-274-tuxcare.els45-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-cloud-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-cloud-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
Show 290 moreShow less
Affected packages
PackageAffectedFixed
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
linux-crashdump
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
linux-doc
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
linux-headers-4.4.0-274-tuxcare.els45
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-headers-4.4.0-274-tuxcare.els45-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-headers-4.4.0-274-tuxcare.els45-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-headers-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
linux-headers-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
linux-image-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
linux-image-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
linux-image-unsigned-4.4.0-274-tuxcare.els45-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-image-unsigned-4.4.0-274-tuxcare.els45-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-libc-dev
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
linux-modules-4.4.0-274-tuxcare.els45-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-modules-4.4.0-274-tuxcare.els45-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-modules-extra-4.4.0-274-tuxcare.els45-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-source
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
linux-source-4.4.0
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-tools-4.4.0-274-tuxcare.els45
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-tools-4.4.0-274-tuxcare.els45-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-tools-4.4.0-274-tuxcare.els45-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
linux-tools-host
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0-274.308
4.4.0-274.308
linux-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 54 CVEs
 before 4.4.0.274.308
4.4.0.274.308
linux-buildinfo-4.15.0-247-tuxcare.els35-generic
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-buildinfo-4.15.0-247-tuxcare.els35-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-cloud-tools-4.15.0-247-tuxcare.els35
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-cloud-tools-4.15.0-247-tuxcare.els35-generic
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-cloud-tools-4.15.0-247-tuxcare.els35-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-headers-4.15.0-247-tuxcare.els35
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-headers-4.15.0-247-tuxcare.els35-generic
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-headers-4.15.0-247-tuxcare.els35-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-image-unsigned-4.15.0-247-tuxcare.els35-generic
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-image-unsigned-4.15.0-247-tuxcare.els35-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-modules-4.15.0-247-tuxcare.els35-generic
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-modules-4.15.0-247-tuxcare.els35-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-modules-extra-4.15.0-247-tuxcare.els35-generic
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-tools-4.15.0-247-tuxcare.els35
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-tools-4.15.0-247-tuxcare.els35-generic
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-tools-4.15.0-247-tuxcare.els35-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-tools-host
TuxCare:Ubuntu:18.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258
4.15.0-247.258
linux-buildinfo-4.15.0-247-tuxcare.els45-generic
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258~16.04.1
4.15.0-247.258~16.04.1
linux-buildinfo-4.15.0-247-tuxcare.els45-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258~16.04.1
4.15.0-247.258~16.04.1
linux-cloud-tools-4.15.0-247-tuxcare.els45-generic
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258~16.04.1
4.15.0-247.258~16.04.1
linux-cloud-tools-4.15.0-247-tuxcare.els45-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258~16.04.1
4.15.0-247.258~16.04.1
linux-headers-4.15.0-247-tuxcare.els45
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258~16.04.1
4.15.0-247.258~16.04.1
linux-headers-4.15.0-247-tuxcare.els45-generic
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258~16.04.1
4.15.0-247.258~16.04.1
linux-headers-4.15.0-247-tuxcare.els45-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258~16.04.1
4.15.0-247.258~16.04.1
linux-hwe-cloud-tools-4.15.0-247-tuxcare.els45
TuxCare:Ubuntu:16.04
From an advisory covering 50 CVEs
 before 4.15.0-247.258~16.04.1
4.15.0-247.258~16.04.1
Kernel
Linux
 2.6.19 up to 4.19.320, 4.20.0 up to 5.4.282, 5.5.0 up to 5.10.224, 5.11.0 up to 5.15.165, 5.16.0 up to 6.1.103, 6.2.0 up to 6.6.44, 6.7.0 up to 6.10.3
4.19.3205.4.2825.10.2245.15.1656.1.1036.6.446.10.3
linux
Debian:12
 before 6.1.106-1, plus listed versions
6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1
Show 21 moreShow less
6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.106-1
linux
Debian:13
 before 6.10.3-1
6.10.3-1
linux
Debian:14
 before 6.10.3-1
6.10.3-1
linux
Debian:11
From an advisory covering 147 CVEs
 before 5.10.226-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 38 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.226-1
linux-6.1
Debian:11
From an advisory covering 838 CVEs
 before 6.1.119-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u1
6.1.119-1~deb11u1
kernel
Mageia:9
From an advisory covering 172 CVEs
 before 6.6.50-1.mga9
6.6.50-1.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 172 CVEs
 before 3.24-61.mga9
3.24-61.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 172 CVEs
 before 7.0.20-53.mga9
7.0.20-53.mga9
kernel-linus
Mageia:9
From an advisory covering 172 CVEs
 before 6.6.50-1.mga9
6.6.50-1.mga9
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 28 CVEs
 before 5.10.0-225.0.0.124.oe2203sp4
5.10.0-225.0.0.124.oe2203sp4
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 32 CVEs
 before 5.10.0-225.0.0.128.oe2203sp3
5.10.0-225.0.0.128.oe2203sp3
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 23 CVEs
 before 4.19.90-2408.5.0.0292.oe2003sp4
4.19.90-2408.5.0.0292.oe2003sp4
kernel
openEuler:22.03-LTS-SP1
From an advisory covering 54 CVEs
 before 5.10.0-136.91.0.172.oe2203sp1
5.10.0-136.91.0.172.oe2203sp1
kernel
openEuler:24.03-LTS
From an advisory covering 96 CVEs
 before 6.6.0-47.0.0.52.oe2403
6.6.0-47.0.0.52.oe2403
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
python3-perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 406 CVEs
 before 0:5.14.0-570.12.1.el9_6
0:5.14.0-570.12.1.el9_6
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.8.14.1
6.4.0-150600.8.14.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-122.231.1
4.12.14-122.231.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-122.231.1
4.12.14-122.231.1
kgraft-patch-SLE12-SP5_Update_61
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 71 CVEs
 before 1-8.3.1
1-8.3.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-122.231.1
4.12.14-122.231.1
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-122.231.1
4.12.14-122.231.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-122.231.1
4.12.14-122.231.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-122.231.1
4.12.14-122.231.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-122.231.1
4.12.14-122.231.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-122.231.1
4.12.14-122.231.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-122.231.1
4.12.14-122.231.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-122.231.1
4.12.14-122.231.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-122.231.1
4.12.14-122.231.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1.150600.12.10.2
6.4.0-150600.23.25.1.150600.12.10.2
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.2
6.4.0-150600.23.25.2
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.2
6.4.0-150600.23.25.2
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-livepatch-SLE15-SP6_Update_5
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 162 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1.150600.12.10.2
6.4.0-150600.23.25.1.150600.12.10.2
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.2
6.4.0-150600.23.25.2
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.2
6.4.0-150600.23.25.2
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.23.25.1
6.4.0-150600.23.25.1
kernel-livepatch-SLE15-SP6-RT_Update_4
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 162 CVEs
 before 1-150600.1.3.1
1-150600.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 162 CVEs
 before 6.4.0-150600.10.14.1
6.4.0-150600.10.14.1
kernel-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 90 CVEs
 before 4.12.14-10.203.1
4.12.14-10.203.1
kernel-rt_debug
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 90 CVEs
 before 4.12.14-10.203.1
4.12.14-10.203.1
kernel-source-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 90 CVEs
 before 4.12.14-10.203.1
4.12.14-10.203.1
kernel-syms-rt
SUSE:Linux Enterprise Real Time 12 SP5
From an advisory covering 90 CVEs
 before 4.12.14-10.203.1
4.12.14-10.203.1
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1.150500.6.37.1
5.14.21-150500.55.83.1.150500.6.37.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1.150500.6.37.1
5.14.21-150500.55.83.1.150500.6.37.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-livepatch-SLE15-SP5_Update_20
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 130 CVEs
 before 1-150500.11.3.1
1-150500.11.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-default
openSUSE:Leap Micro 5.5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1
5.14.21-150500.55.83.1
kernel-default-base
openSUSE:Leap Micro 5.5
From an advisory covering 130 CVEs
 before 5.14.21-150500.55.83.1.150500.6.37.1
5.14.21-150500.55.83.1.150500.6.37.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 132 CVEs
 before 5.14.21-150500.33.69.1
5.14.21-150500.33.69.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 132 CVEs
 before 5.14.21-150500.33.69.1
5.14.21-150500.33.69.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 132 CVEs
 before 5.14.21-150500.33.69.1
5.14.21-150500.33.69.1
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 132 CVEs
 before 5.14.21-150500.33.69.1
5.14.21-150500.33.69.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 132 CVEs
 before 5.14.21-150500.33.69.1
5.14.21-150500.33.69.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 132 CVEs
 before 5.14.21-150500.33.69.1
5.14.21-150500.33.69.1
kernel-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-16.200.1
4.12.14-16.200.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-16.200.1
4.12.14-16.200.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-16.200.1
4.12.14-16.200.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-16.200.1
4.12.14-16.200.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-16.200.1
4.12.14-16.200.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 71 CVEs
 before 4.12.14-16.200.1
4.12.14-16.200.1
kernel-rt
openSUSE:Leap Micro 5.5
From an advisory covering 130 CVEs
 before 5.14.21-150500.13.73.1
5.14.21-150500.13.73.1
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 130 CVEs
 before 5.14.21-150500.13.73.1
5.14.21-150500.13.73.1
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 130 CVEs
 before 5.14.21-150500.13.73.1
5.14.21-150500.13.73.1
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 130 CVEs
 before 5.14.21-150500.13.73.1
5.14.21-150500.13.73.1
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 130 CVEs
 before 5.14.21-150500.13.73.1
5.14.21-150500.13.73.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1135.145~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
5.4.0-1135.145~18.04.1
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1140.147~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
5.4.0-1140.147~18.04.1
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1139.148~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
5.4.0-1139.148~18.04.1
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-200.220~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-200.220~18.04.1
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1082.87~18.04.1, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
5.4.0-1082.87~18.04.1
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1134.143~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
5.4.0-1134.143~18.04.1
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1119.131~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
5.4.0-1119.131~18.04.1
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:20.04:LTS
 before 5.4.0-200.220, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-200.220
linux-aws
Ubuntu:20.04:LTS
 before 5.4.0-1135.145, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1135.145
linux-aws-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1072.78~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 42 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.1
5.15.0-1072.78~20.04.1
linux-azure
Ubuntu:20.04:LTS
 before 5.4.0-1140.147, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
5.4.0-1140.147
linux-azure-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1078.87~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1078.87~20.04.1
linux-bluefield
Ubuntu:20.04:LTS
 before 5.4.0-1095.102, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
5.4.0-1095.102
linux-gcp
Ubuntu:20.04:LTS
 before 5.4.0-1139.148, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
5.4.0-1139.148
linux-gcp-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1071.79~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 41 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.1
5.15.0-1071.79~20.04.1
linux-gkeop
Ubuntu:20.04:LTS
 before 5.4.0-1102.106, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
5.4.0-1102.106
linux-gkeop-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1055.62~20.04.1, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 39 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.1
5.15.0-1055.62~20.04.1
linux-hwe-5.15
Ubuntu:20.04:LTS
 before 5.15.0-125.135~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 42 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.1
5.15.0-125.135~20.04.1
linux-ibm
Ubuntu:20.04:LTS
 before 5.4.0-1082.87, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
5.4.0-1082.87

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-42305 is a medium vulnerability (CVSS 5.5) in Linux, published August 17, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 13th percentile. Fixed in linux-lts 6.1.104-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 386 package rows, 2,322 versions, 3,417 references and the rest of 35 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open