CVE-2024-43871

devres: Fix memory leakage caused by driver API devm_free_percpu()

5.5 MediumFix available

What does this mean?

: 5.5v3.1, from NVD
: 0.24%15th percentile
Fixed in: 5.15.167.1-1kernel
Published: August 21, 2024
Modified: November 10, 2026
Weakness: CWE-401
Also known as: ALSA-2024:7000ALSA-2024:7001AZL-48471BELL-CVE-2024-43871CLSA-2024-1731602566CLSA-2024-1731603213CLSA-2026-1782151303DEBIAN-CVE-2024-43871
Show 45 moreShow less
DLA-3912-1DLA-4008-1EUVD-2024-40521GHSA-x2xj-658j-798fMGASA-2024-0309MGASA-2024-0310OESA-2024-2122OESA-2024-2321OESA-2024-2322OESA-2024-2324OESA-2024-2325RHSA-2024:7000RHSA-2024:7001RHSA-2025:4509RHSA-2025:6966RLSA-2024:7000RLSA-2024:7001SUSE-SU-2024:3189-1SUSE-SU-2024:3190-1SUSE-SU-2024:3194-1SUSE-SU-2024:3195-1SUSE-SU-2024:3209-1SUSE-SU-2024:3251-1SUSE-SU-2024:3252-1SUSE-SU-2024:3383-1SUSE-SU-2024:3483-1SUSE-SU-2025:20044-1SUSE-SU-2025:20047-1UBUNTU-CVE-2024-43871USN-7088-1USN-7088-2USN-7088-3USN-7088-4USN-7088-5USN-7100-1USN-7100-2USN-7119-1USN-7123-1USN-7144-1USN-7154-1USN-7154-2USN-7155-1USN-7156-1USN-7194-1USN-7196-1

In the Linux kernel, the following vulnerability has been resolved:

devres: Fix memory leakage caused by driver API devm_free_percpu()

It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed by using devres_release() instead of devres_destroy() within devm_free_percpu().

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.24%Up 0.2 points since Aug 21, 2024

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

devres: Fix memory leakage caused by driver API devm_free_percpu()

Record: CVE-2024-43871
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-401
Updated: 2026-11-02

CVE List No score

devres: Fix memory leakage caused by driver API devm_free_percpu()

In the Linux kernel, the following vulnerability has been resolved:

devres: Fix memory leakage caused by driver API devm_free_percpu()

Record: CVE-2024-43871
Updated: 2026-11-02

EUVDEUVD-2024-40521 No score

In the Linux kernel, the following vulnerability has been resolved:

devres: Fix memory leakage caused by driver API devm_free_percpu()

Record: EUVD-2024-40521
Updated: 2026-11-02

GitHub AdvisoriesGHSA-x2xj-658j-798f 5.5

In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage...

In the Linux kernel, the following vulnerability has been resolved:

devres: Fix memory leakage caused by driver API devm_free_percpu()

Record: GHSA-x2xj-658j-798f
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-401
Updated: 2026-11-02

OSVAZL-48471 5.5

CVE-2024-43871 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved:

devres: Fix memory leakage caused by driver API devm_free_percpu()

Record: AZL-48471
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2024-43871 5.5

Record: BELL-CVE-2024-43871
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 46 moreShow less

OSVDEBIAN-CVE-2024-43871 5.5

In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed by using devres_release() instead of devres_destroy() within devm_free_percpu().

Record: DEBIAN-CVE-2024-43871
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2122 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ibmvnic: free reset-work-item when flushing

Fix a tiny memory leak when flushing the reset work queue.(CVE-2022-48905)

In the Linux kernel, the following vulnerability has been resolved:

xen/netfront: destroy queues before real_num_tx_queues is zeroed

xennet_destroy_queues() relies on info->netdev->real_num_tx_queues to delete queues. Since d7dac083414eb5bb99a6d2ed53dc2c1b405224e5 ("net-sysfs: update the queue counts in the unregistration path"), unregister_netdev() indirectly sets real_num_tx_queues to 0. Those two facts together means, that xennet_destroy_queues() called from xennet_remove() cannot do its job, because it's called after unregister_netdev(). This results in kfree-ing queues that are still linked in napi, which ultimately crashes:

BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP PTI
CPU: 1 PID: 52 Comm: xenwatch Tainted: G        W         5.16.10-1.32.fc32.qubes.x86_64+ #226
RIP: 0010:free_netdev+0xa3/0x1a0
Code: ff 48 89 df e8 2e e9 00 00 48 8b 43 50 48 8b 08 48 8d b8 a0 fe ff ff 48 8d a9 a0 fe ff ff 49 39 c4 75 26 eb 47 e8 ed c1 66 ff &lt;48&gt; 8b 85 60 01 00 00 48 8d 95 60 01 00 00 48 89 ef 48 2d 60 01 00
RSP: 0000:ffffc90000bcfd00 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff88800edad000 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffc90000bcfc30 RDI: 00000000ffffffff
RBP: fffffffffffffea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800edad050
R13: ffff8880065f8f88 R14: 0000000000000000 R15: ffff8880066c6680
FS:  0000000000000000(0000) GS:ffff8880f3300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 00000000e998c006 CR4: 00000000003706e0
Call Trace:
 &lt;TASK&gt;
 xennet_remove+0x13d/0x300 [xen_netfront]
 xenbus_dev_remove+0x6d/0xf0
 __device_release_driver+0x17a/0x240
 device_release_driver+0x24/0x30
 bus_remove_device+0xd8/0x140
 device_del+0x18b/0x410
 ? _raw_spin_unlock+0x16/0x30
 ? klist_iter_exit+0x14/0x20
 ? xenbus_dev_request_and_reply+0x80/0x80
 device_unregister+0x13/0x60
 xenbus_dev_changed+0x18e/0x1f0
 xenwatch_thread+0xc0/0x1a0
 ? do_wait_intr_irq+0xa0/0xa0
 kthread+0x16b/0x190
 ? set_kthread_struct+0x40/0x40
 ret_from_fork+0x22/0x30
 &lt;/TASK&gt;

Fix this by calling xennet_destroy_queues() from xennet_uninit(), when real_num_tx_queues is still available. This ensures that queues are destroyed when real_num_tx_queues is set to 0, regardless of how unregister_netdev() was called.

Originally reported at https://github.com/QubesOS/qubes-issues/issues/7257(CVE-2022-48914)

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: rndis: add spinlock for rndis response list

There's no lock for rndis response list. It could cause list corruption if there're two different list_add at the same time like below. It's better to add in rndis_add_response / rndis_free_response / rndis_get_next_response to prevent any race condition on response list.

[ 361.894299] [1: irq/191-dwc3:16979] list_add corruption. next->prev should be prev (ffffff80651764d0), but was ffffff883dc36f80. (next=ffffff80651764d0).

[ 361.904380] [1: irq/191-dwc3:16979] Call trace: [ 361.904391] [1: irq/191-dwc3:16979] __list_add_valid+0x74/0x90 [ 361.904401] [1: irq/191-dwc3:16979] rndis_msg_parser+0x168/0x8c0 [ 361.904409] [1: irq/191-dwc3:16979] rndis_command_complete+0x24/0x84 [ 361.904417] [1: irq/191-dwc3:16979] usb_gadget_giveback_request+0x20/0xe4 [ 361.904426]…

Record: OESA-2024-2122
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2321 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix double list_add when enabling VMD in scalable mode

When enabling VMD and IOMMU scalable mode, the following kernel panic call trace/kernel log is shown in Eagle Stream platform (Sapphire Rapids CPU) during booting:

pci 0000:59:00.5: Adding to iommu group 42 ... vmd 0000:59:00.5: PCI host bridge to bus 10000:80 pci 10000:80:01.0: [8086:352a] type 01 class 0x060400 pci 10000:80:01.0: reg 0x10: [mem 0x00000000-0x0001ffff 64bit] pci 10000:80:01.0: enabling Extended Tags pci 10000:80:01.0: PME# supported from D0 D3hot D3cold pci 10000:80:01.0: DMAR: Setup RID2PASID failed pci 10000:80:01.0: Failed to add to iommu group 42: -16 pci 10000:80:03.0: [8086:352b] type 01 class 0x060400 pci 10000:80:03.0: reg 0x10: [mem 0x00000000-0x0001ffff 64bit] pci 10000:80:03.0: enabling Extended Tags pci 10000:80:03.0: PME# supported from D0 D3hot D3cold ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:29! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.17.0-rc3+ #7 Hardware name: Lenovo ThinkSystem SR650V3/SB27A86647, BIOS ESE101Y-1.00 01/13/2022 Workqueue: events work_for_cpu_fn RIP: 0010:__list_add_valid.cold+0x26/0x3f Code: 9a 4a ab ff 4c 89 c1 48 c7 c7 40 0c d9 9e e8 b9 b1 fe ff 0f 0b 48 89 f2 4c 89 c1 48 89 fe 48 c7 c7 f0 0c d9 9e e8 a2 b1 fe ff <0f> 0b 48 89 d1 4c 89 c6 4c 89 ca 48 c7 c7 98 0c d9 9e e8 8b b1 fe RSP: 0000:ff5ad434865b3a40 EFLAGS: 00010246 RAX: 0000000000000058 RBX: ff4d61160b74b880 RCX: ff4d61255e1fffa8 RDX: 0000000000000000 RSI: 00000000fffeffff RDI: ffffffff9fd34f20 RBP: ff4d611d8e245c00 R08: 0000000000000000 R09: ff5ad434865b3888 R10: ff5ad434865b3880 R11: ff4d61257fdc6fe8 R12: ff4d61160b74b8a0 R13: ff4d61160b74b8a0 R14: ff4d611d8e245c10 R15: ff4d611d8001ba70 FS: 0000000000000000(0000) GS:ff4d611d5ea00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ff4d611fa1401000 CR3: 0000000aa0210001 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> intel_pasid_alloc_table+0x9c/0x1d0 dmar_insert_one_dev_info+0x423/0x540 ? device_to_iommu+0x12d/0x2f0 intel_iommu_attach_device+0x116/0x290 __iommu_attach_device+0x1a/0x90 iommu_group_add_device+0x190/0x2c0 __iommu_probe_device+0x13e/0x250 iommu_probe_device+0x24/0x150 iommu_bus_notifier+0x69/0x90 blocking_notifier_call_chain+0x5a/0x80 device_add+0x3db/0x7b0 ? arch_memremap_can_ram_remap+0x19/0x50 ? memremap+0x75/0x140 pci_device_add+0x193/0x1d0 pci_scan_single_device+0xb9/0xf0 pci_scan_slot+0x4c/0x110 pci_scan_child_bus_extend+0x3a/0x290 vmd_enable_domain.constprop.0+0x63e/0x820 vmd_probe+0x163/0x190 local_pci_probe+0x42/0x80 work_for_cpu_fn+0x13/0x20 process_one_work+0x1e2/0x3b0 worker_thread+0x1c4/0x3a0 ? rescuer_thread+0x370/0x370 kthread+0xc7/0xf0 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- ... Kernel panic - not syncing: Fatal exception Kernel Offset: 0x1ca00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) ---[ end Kernel panic - not syncing: Fatal exception ]---

The following 'lspci' output shows devices '10000:80:*' are subdevices of the VMD device 0000:59:00.5:

$ lspci ... 0000:59:00.5 RAID bus controller: Intel Corporation Volume Management Device NVMe RAID Controller (rev 20) ... 10000:80:01.0 PCI bridge: Intel Corporation Device 352a (rev 03) 10000:80:03.0 PCI bridge: Intel Corporation Device 352b (rev 03) 10000:80:05.0 PCI bridge: Intel Corporation Device 352c (rev 03) 10000:80:07.0 PCI bridge: Intel Corporation Device 352d (rev 03) 10000:81:00.0…

Record: OESA-2024-2321
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2322 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix double list_add when enabling VMD in scalable mode

When enabling VMD and IOMMU scalable mode, the following kernel panic call trace/kernel log is shown in Eagle Stream platform (Sapphire Rapids CPU) during booting:

The following 'lspci' output shows devices '10000:80:*' are subdevices of the VMD device 0000:59:00.5:

Record: OESA-2024-2322
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2324 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix double list_add when enabling VMD in scalable mode

When enabling VMD and IOMMU scalable mode, the following kernel panic call trace/kernel log is shown in Eagle Stream platform (Sapphire Rapids CPU) during booting:

The following 'lspci' output shows devices '10000:80:*' are subdevices of the VMD device 0000:59:00.5:

Record: OESA-2024-2324
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2325 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() The debugfs_create_dir() function returns error pointers. It never returns NULL. So use IS_ERR() to check it.(CVE-2023-52917)

In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NULL pointer, but that pointer is used in the next line without a check. Add a NULL pointer check and go to the error unwind if it is NULL.(CVE-2023-52918)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: make sure that WRITTEN is set on all metadata blocks

We previously would call btrfs_check_leaf() if we had the check integrity code enabled, which meant that we could only run the extended leaf checks if we had WRITTEN set on the header flags.

This leaves a gap in our checking, because we could end up with corruption on disk where WRITTEN isn't set on the leaf, and then the extended leaf checks don't get run which we rely on to validate all of the item pointers to make sure we don't access memory outside of the extent buffer.

However, since 732fab95abe2 ("btrfs: check-integrity: remove CONFIG_BTRFS_FS_CHECK_INTEGRITY option") we no longer call btrfs_check_leaf() from btrfs_mark_buffer_dirty(), which means we only ever call it on blocks that are being written out, and thus have WRITTEN set, or that are being read in, which should have WRITTEN set.

Add checks to make sure we have WRITTEN set appropriately, and then make sure __btrfs_check_leaf() always does the item checking. This will protect us from file systems that have been corrupted and no longer have WRITTEN set on some of the blocks.

This was hit on a crafted image tweaking the WRITTEN bit and reported by KASAN as out-of-bound access in the eb accessors. The example is a dir item at the end of an eb.

[2.042] BTRFS warning (device loop1): bad eb member start: ptr 0x3fff start 30572544 member offset 16410 size 2 [2.040] general protection fault, probably for non-canonical address 0xe0009d1000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI [2.537] KASAN: maybe wild-memory-access in range [0x0005088000000018-0x000508800000001f] [2.729] CPU: 0 PID: 2587 Comm: mount Not tainted 6.8.2 #1 [2.729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 [2.621] RIP: 0010:btrfs_get_16+0x34b/0x6d0 [2.621] RSP: 0018:ffff88810871fab8 EFLAGS: 00000206 [2.621] RAX: 0000a11000000003 RBX: ffff888104ff8720 RCX: ffff88811b2288c0 [2.621] RDX: dffffc0000000000 RSI: ffffffff81dd8aca RDI: ffff88810871f748 [2.621] RBP: 000000000000401a R08: 0000000000000001 R09: ffffed10210e3ee9 [2.621] R10: ffff88810871f74f R11: 205d323430333737 R12: 000000000000001a [2.621] R13: 000508800000001a R14: 1ffff110210e3f5d R15: ffffffff850011e8 [2.621] FS: 00007f56ea275840(0000) GS:ffff88811b200000(0000) knlGS:0000000000000000 [2.621] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [2.621] CR2: 00007febd13b75c0 CR3: 000000010bb50000 CR4: 00000000000006f0 [2.621] Call Trace: [2.621] <TASK> [2.621] ? show_regs+0x74/0x80 [2.621] ? die_addr+0x46/0xc0 [2.621] ? exc_general_protection+0x161/0x2a0 [2.621] ? asm_exc_general_protection+0x26/0x30 [2.621] ? btrfs_get_16+0x33a/0x6d0 [2.621] ? btrfs_get_16+0x34b/0x6d0 [2.621] ? btrfs_get_16+0x33a/0x6d0 [2.621] ? __pfx_btrfs_get_16+0x10/0x10 [2.621] ? __pfx_mutex_unlock+0x10/0x10 [2.621] btrfs_match_dir_item_name+0x101/0x1a0 [2.621] btrfs_lookup_dir_item+0x1f3/0x280 [2.621] ? __pfx_btrfs_lookup_dir_item+0x10/0x10 [2.621] btrfs_get_tree+0xd25/0x1910

copy more details from report

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Fix not validating…

Record: OESA-2024-2325
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2024:7000 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:7000
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:7001 7.8

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2024:7001
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:4509 8.0

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:4509
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:6966 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:6966
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2024:7000 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26638 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26846 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52798 CVE-2023-52809 CVE-2023-52817 CVE-2023-52840 CVE-2023-52800 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36922 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36919 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38579 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41023 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41064 CVE-2024-41065 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42094 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42225 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43830 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2024:7000
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-43871 5.5

Record: UBUNTU-CVE-2024-43871
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-10

OSVALSA-2024:7000 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):

Record: ALSA-2024:7000
Updated: 2026-11-02

OSVALSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

CVE-2023-6040 CVE-2024-26595 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605 CVE-2024-26645 CVE-2024-26665 CVE-2024-26720 CVE-2024-26717 CVE-2024-26769 CVE-2024-26894 CVE-2024-26880 CVE-2024-26855 CVE-2024-26923 CVE-2024-26939 CVE-2024-27013 CVE-2024-27042 CVE-2024-35809 CVE-2023-52683 CVE-2024-35884 CVE-2024-35877 CVE-2024-35944 CVE-2024-35989 CVE-2021-47412 CVE-2021-47393 CVE-2021-47386 CVE-2021-47385 CVE-2021-47384 CVE-2021-47383 CVE-2021-47432 CVE-2021-47352 CVE-2021-47338 CVE-2021-47321 CVE-2021-47289 CVE-2021-47287 CVE-2023-52817 CVE-2023-52840 CVE-2021-47441 CVE-2021-47466 CVE-2021-47455 CVE-2021-47497 CVE-2021-47560 CVE-2021-47527 CVE-2024-36883 CVE-2024-36920 CVE-2024-36902 CVE-2024-36953 CVE-2024-36939 CVE-2024-36901 CVE-2021-47582 CVE-2021-47609 CVE-2024-38619 CVE-2022-48754 CVE-2022-48760 CVE-2024-38581 CVE-2024-38570 CVE-2024-38559 CVE-2024-38558 CVE-2024-37356 CVE-2024-39471 CVE-2024-39499 CVE-2024-39501 CVE-2024-39506 CVE-2024-40904 CVE-2024-40911 CVE-2024-40912 CVE-2024-40929 CVE-2024-40931 CVE-2024-40941 CVE-2024-40954 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40972 CVE-2024-40977 CVE-2024-40978 CVE-2024-40988 CVE-2024-40989 CVE-2024-40995 CVE-2024-40997 CVE-2024-40998 CVE-2024-41005 CVE-2024-40901 CVE-2024-41007 CVE-2024-41008 CVE-2022-48804 CVE-2022-48836 CVE-2022-48866 CVE-2024-41090 CVE-2024-41091 CVE-2024-41012 CVE-2024-41013 CVE-2024-41014 CVE-2024-41035 CVE-2024-41038 CVE-2024-41039 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41055 CVE-2024-41056 CVE-2024-41060 CVE-2024-41071 CVE-2024-41076 CVE-2024-41097 CVE-2024-42084 CVE-2024-42090 CVE-2024-42096 CVE-2024-42114 CVE-2024-42124 CVE-2024-42131 CVE-2024-42152 CVE-2024-42154 CVE-2024-42226 CVE-2024-42228 CVE-2024-42237 CVE-2024-42238 CVE-2024-42240 CVE-2024-42246 CVE-2024-42322 CVE-2024-43871 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:7001
Updated: 2026-11-02

OSVCLSA-2024-1731602566 No score

Fix of 76 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-44946
- kcm: Serialise kcm_sendmsg() for the same socket.
CVE-url: https://ubuntu.com/security/CVE-2024-42292
- kobject_uevent: Fix OOB access within zap_modalias_env()
CVE-url: https://ubuntu.com/security/CVE-2024-41042
- netfilter: nf_tables: prefer nft_chain_validate
CVE-url: https://ubuntu.com/security/CVE-2024-42265
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
CVE-url: https://ubuntu.com/security/CVE-2024-50036
- net: do not delay dst_entries_add() in dst_release()
CVE-url: https://ubuntu.com/security/CVE-2024-47663
- staging: iio: frequency: ad9833: Load clock using clock framework
- staging: iio: frequency: ad9834: Validate frequency parameter value
CVE-url: https://ubuntu.com/security/CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
CVE-url: https://ubuntu.com/security/CVE-2023-52918
- media: pci: cx23885: check cx23885_vdev_init() return
CVE-url: https://ubuntu.com/security/CVE-2024-44960
- usb: gadget: core: Check for unset descriptor
CVE-url: https://ubuntu.com/security/CVE-2024-42297
- f2fs: fix to don't dirty inode for readonly filesystem
CVE-url: https://ubuntu.com/security/CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
CVE-url: https://ubuntu.com/security/CVE-2024-46676
- nfc: pn533: Add poll mod list filling check
CVE-url: https://ubuntu.com/security/CVE-2024-46761
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
CVE-url: https://ubuntu.com/security/CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
CVE-url: https://ubuntu.com/security/CVE-2024-46679
- ethtool: check device is present when getting link settings
CVE-url: https://ubuntu.com/security/CVE-2024-46721
- apparmor: fix possible NULL pointer dereference
CVE-url: https://ubuntu.com/security/CVE-2024-46685
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
CVE-url: https://ubuntu.com/security/CVE-2024-44947
- fuse: Initialize beyond-EOF page contents before setting uptodate
CVE-url: https://ubuntu.com/security/CVE-2024-46675
- usb: dwc3: core: Prevent USB core invalid event buffer address access
CVE-url: https://ubuntu.com/security/CVE-2024-43893
- serial: core: check uartclk for zero to avoid divide by zero
CVE-url: https://ubuntu.com/security/CVE-2024-45021
- memcg_write_event_control(): fix a user-triggerable oops
CVE-url: https://ubuntu.com/security/CVE-2024-46677
- gtp: fix a potential NULL pointer dereference
CVE-url: https://ubuntu.com/security/CVE-2024-43861
- net: usb: qmi_wwan: fix memory leak for not ip packets
CVE-url: https://ubuntu.com/security/CVE-2024-41063
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
CVE-url: https://ubuntu.com/security/CVE-2024-45006
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
CVE-url: https://ubuntu.com/security/CVE-2024-43853
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
CVE-url: https://ubuntu.com/security/CVE-2024-42310
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
CVE-url: https://ubuntu.com/security/CVE-2024-42311
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
CVE-url: https://ubuntu.com/security/CVE-2024-41012
- filelock: Remove locks reliably when fcntl/close race is detected
CVE-url: https://ubuntu.com/security/CVE-2024-45028
- mmc: mmc_test: Fix NULL dereference on allocation failure
CVE-url: https://ubuntu.com/security/CVE-2024-43860
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
CVE-url: https://ubuntu.com/security/CVE-2024-43914
- md/raid5: avoid BUG_ON() while continue…

Record: CLSA-2024-1731602566
Updated: 2026-11-02

OSVCLSA-2024-1731603213 No score

Fix of 76 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-44946
- kcm: Serialise kcm_sendmsg() for the same socket.
CVE-url: https://ubuntu.com/security/CVE-2024-42292
- kobject_uevent: Fix OOB access within zap_modalias_env()
CVE-url: https://ubuntu.com/security/CVE-2024-41042
- netfilter: nf_tables: prefer nft_chain_validate
CVE-url: https://ubuntu.com/security/CVE-2024-42265
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
CVE-url: https://ubuntu.com/security/CVE-2024-50036
- net: do not delay dst_entries_add() in dst_release()
CVE-url: https://ubuntu.com/security/CVE-2024-47663
- staging: iio: frequency: ad9833: Load clock using clock framework
- staging: iio: frequency: ad9834: Validate frequency parameter value
CVE-url: https://ubuntu.com/security/CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
CVE-url: https://ubuntu.com/security/CVE-2023-52918
- media: pci: cx23885: check cx23885_vdev_init() return
CVE-url: https://ubuntu.com/security/CVE-2024-44960
- usb: gadget: core: Check for unset descriptor
CVE-url: https://ubuntu.com/security/CVE-2024-42297
- f2fs: fix to don't dirty inode for readonly filesystem
CVE-url: https://ubuntu.com/security/CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
CVE-url: https://ubuntu.com/security/CVE-2024-46676
- nfc: pn533: Add poll mod list filling check
CVE-url: https://ubuntu.com/security/CVE-2024-46761
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
CVE-url: https://ubuntu.com/security/CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
CVE-url: https://ubuntu.com/security/CVE-2024-46679
- ethtool: check device is present when getting link settings
CVE-url: https://ubuntu.com/security/CVE-2024-46721
- apparmor: fix possible NULL pointer dereference
CVE-url: https://ubuntu.com/security/CVE-2024-46685
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
CVE-url: https://ubuntu.com/security/CVE-2024-44947
- fuse: Initialize beyond-EOF page contents before setting uptodate
CVE-url: https://ubuntu.com/security/CVE-2024-46675
- usb: dwc3: core: Prevent USB core invalid event buffer address access
CVE-url: https://ubuntu.com/security/CVE-2024-43893
- serial: core: check uartclk for zero to avoid divide by zero
CVE-url: https://ubuntu.com/security/CVE-2024-45021
- memcg_write_event_control(): fix a user-triggerable oops
CVE-url: https://ubuntu.com/security/CVE-2024-46677
- gtp: fix a potential NULL pointer dereference
CVE-url: https://ubuntu.com/security/CVE-2024-43861
- net: usb: qmi_wwan: fix memory leak for not ip packets
CVE-url: https://ubuntu.com/security/CVE-2024-41063
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
CVE-url: https://ubuntu.com/security/CVE-2024-45006
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
CVE-url: https://ubuntu.com/security/CVE-2024-43853
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
CVE-url: https://ubuntu.com/security/CVE-2024-42310
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
CVE-url: https://ubuntu.com/security/CVE-2024-42311
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
CVE-url: https://ubuntu.com/security/CVE-2024-41012
- filelock: Remove locks reliably when fcntl/close race is detected
CVE-url: https://ubuntu.com/security/CVE-2024-45028
- mmc: mmc_test: Fix NULL dereference on allocation failure
CVE-url: https://ubuntu.com/security/CVE-2024-43860
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
CVE-url: https://ubuntu.com/security/CVE-2024-43914
- md/raid5: avoid BUG_ON() while continue…

Record: CLSA-2024-1731603213
Updated: 2026-11-02

OSVCLSA-2026-1782151303 No score

kernel: Fix of 151 CVEs

spi: spi-fsl-lpspi: fix teardown order issue (UAF) {CVE-2026-31485}
Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786}
ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037}
net: bonding: fix use-after-free in bond_xmit_broadcast() {CVE-2026-31419}
bonding: do not set usable_slaves for broadcast mode {CVE-2026-31419}
net: bonding: update the slave array for broadcast mode {CVE-2026-31419}
dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125}
net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
net: Fix an unsafe loop on the list {CVE-2024-50024}
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy {CVE-2025-21636}
wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx {CVE-2023-54300}
wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream {CVE-2024-49913}
xfrm: validate new SA's prefixlen using SA family when sel.family is unset {CVE-2024-50142}
serial: imx: Introduce timeout when waiting on transmitter empty {CVE-2024-40967}
iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind {CVE-2023-53501}
octeontx2-af: Add validation before accessing cgx and lmac {CVE-2023-53654}
sctp: sysctl: rto_min/max: avoid using current->nsproxy {CVE-2025-21639}
net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices {CVE-2023-52984}
sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start {CVE-2024-49944}
netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451}
thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR {CVE-2022-48703}
x86/mm: Fix pti_clone_pgtable() alignment assumption {CVE-2024-44965}
net: usb: asix_devices: add phy_mask for ax88772 mdio bus {CVE-2025-38725}
ALSA: hda: Do not unset preset when cleaning up codec {CVE-2023-52736}
drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func {CVE-2024-49909}
Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE {CVE-2024-53144}
fuse: Initialize beyond-EOF page contents before setting uptodate {CVE-2024-44947}
sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637}
dm stats: check for and propagate alloc_percpu failure {CVE-2023-53044}
netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005}
tracing: Fix overflow in get_free_elt() {CVE-2024-43890}
mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902}
xen/netfront: stop tx queues during live migration {CVE-2022-48969}
Bluetooth: btusb: clamp SCO altsetting table indices {CVE-2026-31497}
ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free {CVE-2025-38105}
can: j1939: make j1939_sk_bind() fail if device is no longer registered {CVE-2025-39925}
nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() {CVE-2023-52508}
smb: client: Don't log plaintext credentials in cifs_set_cifscreds {CVE-2026-23303}
cifs: Fix integer overflow while processing acdirmax mount option {CVE-2025-21963}
netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416}
drm/amdgpu/vkms: fix a possible null pointer dereference {CVE-2023-52815}
drm/amd/amdgpu: Check tbo resource pointer {CVE-2024-46807}
bonding: fix null pointer deref in bond_ipsec_offload_ok {CVE-2024-44990}
wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower {CVE-2024-50237}
trace_events_hist: add check for return value of 'create_hist_field' {CVE-2023-53005}
drm/amdkfd: Add sync after creating vram bo {CVE-2023-53009}
bpf: Send signals asynchronously if !preemptible {CVE-2025-21728}
drm/client: fix null pointer dereference in drm_client_modeset_probe {CVE-2024-43894}
ext4: correct grp validation in ext4_mb_good_group {CVE-2023-53861}
RDMA/irdma: Initialize…

Record: CLSA-2026-1782151303
Updated: 2026-11-02

OSV No score

devres: Fix memory leakage caused by driver API devm_free_percpu()

In the Linux kernel, the following vulnerability has been resolved:

devres: Fix memory leakage caused by driver API devm_free_percpu()

Record: CVE-2024-43871
Updated: 2026-11-02

OSVMGASA-2024-0309 No score

Updated kernel, kmod-xtables-addons & kmod-virtualbox packages fix security vulnerabilities

Upstream kernel version 6.6.50 fix bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2024-0309
Updated: 2026-11-02

OSVMGASA-2024-0310 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.50 fix bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2024-0310
Updated: 2026-11-02

OSVRLSA-2024:7001 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):

Record: RLSA-2024:7001
Updated: 2026-11-02

OSVSUSE-SU-2024:3189-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-43907: drm/amdgpu/pm: fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
CVE-2024-43905: drm/amd/pm: fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43879: wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
CVE-2024-43872: RDMA/hns: Fix soft lockup under heavy CEQE load (bsc#1229489).
CVE-2024-43871: devres: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490).
CVE-2024-43866: net/mlx5: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-43863: drm/vmwgfx: Fix a deadlock in dma buf fence polling (bsc#1229497).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2024-43856: dma: fix call order in dmam_free_coherent (bsc#1229346).
CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media (bsc#1229345)
CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
CVE-2024-43831: media: mediatek: vcodec: Handle invalid decoder vsi (bsc#1229309).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
CVE-2024-42322: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347)
CVE-2024-42312: sysctl: always initialize i_uid/i_gid (bsc#1229357)
CVE-2024-42310: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (bsc#1229358).
CVE-2024-42309: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (bsc#1229359).
CVE-2024-42301: dev/parport: fix the array out-of-bounds risk (bsc#1229407).
CVE-2024-42285: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (bsc#1229381).
CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386).
CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)
CVE-2024-42259: drm/i915/gem: fix Virtual Memory mapping boundaries calculation (bsc#1229156).
CVE-2024-42246: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).
CVE-2024-42244: usb: serial: mos7840: fix crash on resume (bsc#1228967).
CVE-2024-42236: usb: gadget: configfs: prevent OOB read/write in usb_string_copy() (bsc#1228964).
CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959)
CVE-2024-42228: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (bsc#1228667).
CVE-2024-42226: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
CVE-2024-42162: gve: Account for stopped queues when reading NIC stats (bsc#1228706).
CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-42157: s390/pkey: Wipe sensitive data on failure (bsc#1228727).
CVE-2024-42155: s390/pkey: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42148: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).
CVE-2024-42110: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501).
CVE-2024-42106: inet_diag: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493).
CVE-2024-42101: drm/nouveau: fix null pointer dereference in…

Record: SUSE-SU-2024:3189-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
CVE-2024-44939: fix null ptr deref in dtInsertEntry (bsc#1229820).
CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-27016: Validate pppoe header (bsc#1223807).
CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).
CVE-2023-52581: Fix memleak when more than 255…

Record: SUSE-SU-2024:3190-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3194-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43911: Fix NULL dereference at band check in starting tx ba session (bsc#1229827).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2024-36270: Fix reference in patches.suse/netfilter-tproxy-bail-out-if-IP-has-been-disabled-on.patch (bsc#1226798)
CVE-2024-36881: Reset ptes when close() for wr-protected ones (bsc#1225718).
CVE-2024-42316: Fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
CVE-2024-43855: Fix deadlock between mddev_suspend and flush bio (bsc#1229342,).
CVE-2024-43864: Fix CT entry update leaks of modify header context (bsc#1229496)
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-42109: Unconditionally flush pending work before notifier (bsc#1228505)
CVE-2024-41084: Avoid null pointer dereference in region lookup (bsc#1228472)
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-27079: Add kABI workaround patch (bsc#1223742).
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-26809: Release elements in clone only from destroy path (bsc#1222633).
CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).
CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297).
CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374).
CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391).
CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314)
CVE-2024-27433: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
CVE-2024-40920: Fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
CVE-2024-40921: Pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
CVE-2024-36979: Fix vlan use-after-free (bsc#1226604).
CVE-2024-26590: Fix inconsistent per-file compression format (bsc#1220252,).
CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582).
CVE-2024-42270: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404)
CVE-2024-42269: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402)
CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383) -…

Record: SUSE-SU-2024:3194-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3195-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43911: Fix NULL dereference at band check in starting tx ba session (bsc#1229827).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2024-36881: Fix reset ptes when close() for wr-protected (bsc#1225718).
CVE-2024-42316: Fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
CVE-2024-43855: Fix deadlock between mddev_suspend and flush bio (bsc#1229342).
CVE-2024-43864: Fix CT entry update leaks of modify header context (bsc#1229496).
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-42109: Unconditionally flush pending work before notifier (bsc#1228505).
CVE-2024-41084: Avoid null pointer dereference in region lookup (bsc#1228472).
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-26809: Release elements in clone only from destroy path (bsc#1222633).
CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).
CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297).
CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374).
CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391).
CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314)
CVE-2024-27433: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
CVE-2024-40920: Fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
CVE-2024-40921: Pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
CVE-2024-36979: Fix vlan use-after-free (bsc#1226604).
CVE-2024-26590: Fix inconsistent per-file compression format (bsc#1220252).
CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582).
CVE-2024-42270: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404).
CVE-2024-42269: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402).
CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383)
CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357)
CVE-2024-43854: Initialize integrity buffer to zero…

Record: SUSE-SU-2024:3195-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3209-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
CVE-2024-44939: Fix null ptr deref in dtInsertEntry (bsc#1229820).
CVE-2024-41087: Fix double free on error (bsc#1228466).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: struct virqfd kABI workaround (bsc#1222808).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-27016: Validate pppoe header (bsc#1223807).
CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639).
CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877).…

Record: SUSE-SU-2024:3209-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3251-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579).
CVE-2024-35933: Fixed build regression (bsc#1224640).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2024-43863: Fix a deadlock in dma buf fence polling (bsc#1229497)
CVE-2024-41087: Fix double free on error (bsc#1228466).
CVE-2024-43907: Fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
CVE-2024-43905: Fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2022-48910: Ensure we call ipv6_mc_down() at most once (bsc#1229632)
CVE-2023-52893: Fix null-deref in gsmi_get_variable (bsc#1229535)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2022-48875: Initialize struct pn533_out_arg properly (bsc#1229516).
CVE-2023-52907: Wait for out_urb's completion in pn533_usb_send_frame() (bsc#1229526).
CVE-2024-43871: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490)
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-43872: Fix soft lockup under heavy CEQE load (bsc#1229489)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
CVE-2024-42236: Prevent OOB read/write in usb_string_copy() (bsc#1228964).
CVE-2024-42244: Fix crash on resume (bsc#1228967).
CVE-2024-43879: Handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290).
CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727).
CVE-2021-47341: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (bsc#1224923).
CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
CVE-2022-48769: Avoid EFIv2 runtime services on Apple x86 machines (bsc#1226629).
CVE-2024-43856: Fix call order in dmam_free_coherent (bsc#1229346).
CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
CVE-2024-40984: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (bsc#1227820).
CVE-2024-26677: Blacklist e7870cf13d20 (' Fix delayed ACKs to not set the reference serial number') (bsc#1222387)
CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357)
CVE-2024-42310: Fix null pointer dereference in…

Record: SUSE-SU-2024:3251-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3252-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579).
CVE-2024-35933: Fixed a build regression (bsc#1224640).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156)
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2024-43863: Fix a deadlock in dma buf fence polling (bsc#1229497)
CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
CVE-2024-43907: Fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787).
CVE-2024-43905: Fix the null pointer dereference for vega10_hwmgr (bsc#1229784).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2022-48910: Ensure we call ipv6_mc_down() at most once (bsc#1229632)
CVE-2023-52893: Fix null-deref in gsmi_get_variable (bsc#1229535)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2022-48875: Initialize struct pn533_out_arg properly (bsc#1229516).
CVE-2023-52907: Wait for out_urb's completion in pn533_usb_send_frame() (bsc#1229526).
CVE-2024-43871: Fix memory leakage caused by driver API devm_free_percpu() (bsc#1229490)
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-43872: Fix soft lockup under heavy CEQE load (bsc#1229489)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
CVE-2024-42236: Prevent OOB read/write in usb_string_copy() (bsc#1228964).
CVE-2024-42244: Fix crash on resume (bsc#1228967).
CVE-2024-43879: Handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (bsc#1229482).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578).
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-41012: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727 CVE-2024-42157 git-fixes).
CVE-2021-47341: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (bsc#1224923).
CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
CVE-2022-48769: Avoid EFIv2 runtime services on Apple x86 machines (bsc#1226629).
CVE-2024-43856: Fix call order in dmam_free_coherent (bsc#1229346).
CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074)
CVE-2024-40984: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (bsc#1227820).
CVE-2024-26677: Blacklist e7870cf13d20 ('rxrpc: Fix delayed ACKs to not set the reference serial number') (bsc#1222387)
CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388)
CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357) -…

Record: SUSE-SU-2024:3252-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3383-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-43911: wifi: mac80211: fix NULL dereference at band check in starting tx ba session (bsc#1229827).
CVE-2024-43899: drm/amd/display: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43880: kabi: lib: objagg: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43866: net/mlx5: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-43864: net/mlx5e: Fix CT entry update leaks of modify header context (bsc#1229496).
CVE-2024-43855: md: fix deadlock between mddev_suspend and flush bio (bsc#1229342).
CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media (bsc#1229345)
CVE-2024-43850: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove (bsc#1229316).
CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
CVE-2024-43837: bpf: Fix updating attached freplace prog in prog_array map (bsc#1229297).
CVE-2024-43834: xdp: fix invalid wait context of page_pool_destroy() (bsc#1229314)
CVE-2024-43831: media: mediatek: vcodec: Handle invalid decoder vsi (bsc#1229309).
CVE-2024-43821: scsi: lpfc: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-42322: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347)
CVE-2024-42318: landlock: Do not lose track of restrictions on cred_transfer (bsc#1229351).
CVE-2024-42316: mm/mglru: fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
CVE-2024-42312: sysctl: always initialize i_uid/i_gid (bsc#1229357)
CVE-2024-42308: Update DRM patch reference (bsc#1229411)
CVE-2024-42301: dev/parport: fix the array out-of-bounds risk (bsc#1229407).
CVE-2024-42295: nilfs2: handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370).
CVE-2024-42291: ice: Add a per-VF limit on number of FDIR filters (bsc#1229374).
CVE-2024-42290: irqchip/imx-irqsteer: Handle runtime power management correctly (bsc#1229379).
CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
CVE-2024-42283: net: nexthop: Initialize all fields in dumped nexthops (bsc#1229383)
CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386).
CVE-2024-42277: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-42270: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404).
CVE-2024-42269: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402).
CVE-2024-42268: net/mlx5: Fix missing lock on sync reset reload (bsc#1229391).
CVE-2024-42247: wireguard: allowedips: avoid unaligned 64-bit memory accesses (bsc#1228988).
CVE-2024-42246: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).
CVE-2024-42245: Revert 'sched/fair: Make sure to try to detach at least one movable task' (bsc#1228978).
CVE-2024-42241: mm/shmem: disable PMD-sized page cache if needed (bsc#1228986).
CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723).
CVE-2024-42162: gve: Account for stopped queues when reading NIC stats (bsc#1228706).
CVE-2024-42161: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756).
CVE-2024-42159: scsi: mpi3mr: fix sanitise num_phys (bsc#1228754).
CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-42157: s390/pkey: Wipe sensitive data on failure (bsc#1228727).
CVE-2024-42156: s390/pkey: Wipe copies of clear-key structures on failure (bsc#1228722).
CVE-2024-42155: s390/pkey: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42148: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).
CVE-2024-42145:…

Record: SUSE-SU-2024:3383-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3483-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773).
CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524).
CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
CVE-2024-36270: Fix reference in patches.suse/netfilter-tproxy-bail-out-if-IP-has-been-disabled-on.patch (bsc#1226798)
CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759).
CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315).
CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756).
CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
CVE-2024-44939: Fix null ptr deref in dtInsertEntry (bsc#1229820).
CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
CVE-2024-43902: Add null checker before passing variables (bsc#1229767).
CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768)
CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481).
CVE-2024-43884: Add error handling to pair_device() (bsc#1229739)
CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658).
CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527).
CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495).
CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808).
CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605)
CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733).
CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722).
CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569).
CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488)
CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962)
CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428).
CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427).
CVE-2024-27079: Fix NULL domain on device release (bsc#1223742).
CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803).
CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes).
CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-27016: Validate pppoe header (bsc#1223807). -…

Record: SUSE-SU-2024:3483-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20044-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

This release includes the first live patch.

The following security bugs were fixed:

CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2023-52581: netfilter: nf_tables: fix memleak when more than 255 elements expired (bsc#1220877).
CVE-2023-52859: perf: hisi: Fix use-after-free when register pmu fails (bsc#1225582).
CVE-2023-52889: apparmor: Fix null pointer deref when receiving skb during sock creation (bsc#1229287,).
CVE-2024-26590: erofs: fix inconsistent per-file compression format (bsc#1220252).
CVE-2024-26631: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-26668: netfilter: nft_limit: reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26669: kABI fix for net/sched: flower: Fix chain template offload (bsc#1222350).
CVE-2024-26677: blacklist.conf: Add e7870cf13d20 ("rxrpc: Fix delayed ACKs to not set the reference serial number") (bsc#1222387)
CVE-2024-26735: ipv6: sr: fix possible use-after-free and null-ptr-deref (bsc#1222372).
CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-26809: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1222633).
CVE-2024-26812: kABI: vfio: struct virqfd kABI workaround (bsc#1222808).
CVE-2024-26835: netfilter: nf_tables: set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26837: net: bridge: switchdev: Skip MDB replays of deferred events on offload (bsc#1222973).
CVE-2024-26851: netfilter: nf_conntrack_h323: Add protection for bmp length out of range (bsc#1223074)
CVE-2024-27010: net/sched: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2024-27011: netfilter: nf_tables: fix memleak in map from abort path (bsc#1223803).
CVE-2024-27024: net/rds: fix WARNING in rds_conn_connect_if_down (bsc#1223777).
CVE-2024-27079: iommu/vt-d: Fix NULL domain on device release (bsc#1223742).
CVE-2024-27403: kabi: restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27433: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
CVE-2024-35897: netfilter: nf_tables: discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
CVE-2024-36286: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
CVE-2024-36489: tls: fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-36881: mm/userfaultfd: reset ptes when close() for wr-protected ones (bsc#1225718).
CVE-2024-36929: net: core: reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).
CVE-2024-36933: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).
CVE-2024-36979: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in bridge's mst code. (bsc#1226604).
CVE-2024-38662: selftests/bpf: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).
CVE-2024-39489: ipv6: sr: fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
CVE-2024-40905: ipv6: fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798).
CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
CVE-2024-40938: landlock: fix d_parent…

Record: SUSE-SU-2025:20044-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20047-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2023-52581: netfilter: nf_tables: fix memleak when more than 255 elements expired (bsc#1220877).
CVE-2023-52859: perf: hisi: Fix use-after-free when register pmu fails (bsc#1225582).
CVE-2023-52889: apparmor: Fix null pointer deref when receiving skb during sock creation (bsc#1229287).
CVE-2024-26590: erofs: fix inconsistent per-file compression format (bsc#1220252).
CVE-2024-26631: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
CVE-2024-26668: netfilter: nft_limit: reject configurations that cause integer overflow (bsc#1222335).
CVE-2024-26669: kABI fix for net/sched: flower: Fix chain template offload (bsc#1222350).
CVE-2024-26677: Blacklist e7870cf13d20 (" Fix delayed ACKs to not set the reference serial number") (bsc#1222387)
CVE-2024-26735: ipv6: sr: fix possible use-after-free and null-ptr-deref (bsc#1222372).
CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-26809: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1222633).
CVE-2024-26812: kABI: vfio: struct virqfd kABI workaround (bsc#1222808).
CVE-2024-26835: netfilter: nf_tables: set dormant flag on hook register failure (bsc#1222967).
CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
CVE-2024-26851: netfilter: nf_conntrack_h323: Add protection for bmp length out of range (bsc#1223074)
CVE-2024-27010: net/sched: Fix mirred deadlock on device recursion (bsc#1223720).
CVE-2024-27011: netfilter: nf_tables: fix memleak in map from abort path (bsc#1223803).
CVE-2024-27024: net/rds: fix WARNING in rds_conn_connect_if_down (bsc#1223777).
CVE-2024-27079: iommu/vt-d: Fix NULL domain on device release (bsc#1223742).
CVE-2024-27403: kabi: restore const specifier in flow_offload_route_init() (bsc#1224415).
CVE-2024-27433: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
CVE-2024-35897: netfilter: nf_tables: discard table flag update with pending basechain deletion (bsc#1224510).
CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
CVE-2024-36286: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
CVE-2024-36489: tls: fix missing memory barrier in tls_init (bsc#1226874)
CVE-2024-36881: mm/userfaultfd: Fix reset ptes when close() for wr-protected (bsc#1225718).
CVE-2024-36929: net: core: reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).
CVE-2024-36933: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).
CVE-2024-36979: net: bridge: mst: fix vlan use-after-free (bsc#1226604).
CVE-2024-38662: selftests/bpf: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).
CVE-2024-39489: ipv6: sr: fix memleak in seg6_hmac_init_algo (bsc#1227623)
CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
CVE-2024-40905: ipv6: fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798).
CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
CVE-2024-40938: landlock: fix d_parent walk (bsc#1227840).
CVE-2024-40939: net: wwan: iosm: Fix tainted…

Record: SUSE-SU-2025:20047-1
Updated: 2026-11-02

OSVUSN-7088-1 No score

linux, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4 vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-36402)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
CPU frequency scaling framework;
Device frequency scaling framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
EEPROM drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
QCOM SoC drivers;
Direct Digital Synthesis drivers;
TTY drivers;
Userspace I/O drivers;
DesignWare USB3 driver;
USB subsystem;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
BPF subsystem;
Core kernel;
DMA mapping infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
Objagg library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
KCM (Kernel Connection Multiplexor) sockets driver;
MAC80211 subsystem;
Netfilter;
Network traffic control;
SCTP protocol;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Wireless networking;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SoC audio core drivers;
USB sound devices; (CVE-2024-43894, CVE-2024-46737, CVE-2024-46828, CVE-2024-42244, CVE-2024-46723, CVE-2024-41073, CVE-2024-46756, CVE-2024-42288, CVE-2024-46840, CVE-2024-46771, CVE-2024-46757, CVE-2024-43860, CVE-2024-46747, CVE-2024-41017, CVE-2024-42246, CVE-2024-44988, CVE-2024-42281, CVE-2024-36484, CVE-2024-43856, CVE-2024-47668, CVE-2024-46759, CVE-2024-46744, CVE-2024-42289, CVE-2024-42131, CVE-2024-46679, CVE-2024-42304, CVE-2024-46818, CVE-2024-43858, CVE-2024-44960, CVE-2024-45028, CVE-2024-26885, CVE-2024-46676, CVE-2024-46780, CVE-2024-42310, CVE-2024-44987, CVE-2024-41090, CVE-2024-44954, CVE-2024-45026, CVE-2024-42285, CVE-2023-52614, CVE-2024-27051, CVE-2024-43880, CVE-2024-43839, CVE-2024-43884, CVE-2024-42311, CVE-2024-43893, CVE-2024-41072, CVE-2024-41091, CVE-2024-46758, CVE-2024-41022, CVE-2024-46745, CVE-2024-42305, CVE-2024-46673, CVE-2024-42284, CVE-2024-46844, CVE-2024-46677, CVE-2024-45025, CVE-2024-43861, CVE-2024-43914, CVE-2024-46783, CVE-2024-41012, CVE-2024-44999, CVE-2024-44946, CVE-2024-42276, CVE-2024-46740, CVE-2024-42295, CVE-2024-44947, CVE-2024-41059, CVE-2024-26669, CVE-2024-38602, CVE-2024-42306, CVE-2023-52918, CVE-2024-42297, CVE-2024-42229, CVE-2024-43853, CVE-2024-45006, CVE-2024-44998, CVE-2024-42283, CVE-2024-44952, CVE-2024-46761, CVE-2024-43841, CVE-2024-44944, CVE-2024-42313, CVE-2024-45008, CVE-2024-46714, CVE-2024-41065, CVE-2024-43883, CVE-2024-43867, CVE-2024-42286, CVE-2024-43879, CVE-2024-43846, CVE-2024-42280, CVE-2024-43854, CVE-2021-47212, CVE-2024-35848, CVE-2024-41020, CVE-2024-41068, CVE-2024-45021, CVE-2024-41098, CVE-2024-44965, CVE-2024-43890,…

Record: USN-7088-1
Updated: 2026-11-02

OSVUSN-7088-2 No score

linux-azure, linux-bluefield vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
CPU frequency scaling framework;
Device frequency scaling framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
EEPROM drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
QCOM SoC drivers;
Direct Digital Synthesis drivers;
TTY drivers;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
BPF subsystem;
Core kernel;
DMA mapping infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
Objagg library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
KCM (Kernel Connection Multiplexor) sockets driver;
MAC80211 subsystem;
Netfilter;
Network traffic control;
SCTP protocol;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Wireless networking;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SoC audio core drivers;
USB sound devices; (CVE-2024-46714, CVE-2024-42288, CVE-2024-42290, CVE-2024-44987, CVE-2024-41090, CVE-2024-42313, CVE-2024-46689, CVE-2024-46737, CVE-2024-44946, CVE-2024-44999, CVE-2024-44935, CVE-2024-38602, CVE-2024-43883, CVE-2024-26607, CVE-2024-41091, CVE-2024-45025, CVE-2024-42305, CVE-2024-26891, CVE-2024-41073, CVE-2024-44969, CVE-2024-26641, CVE-2024-46719, CVE-2024-40929, CVE-2024-46721, CVE-2024-46740, CVE-2024-41012, CVE-2024-42280, CVE-2024-46738, CVE-2024-46722, CVE-2024-42246, CVE-2024-41063, CVE-2024-41072, CVE-2024-41068, CVE-2024-43884, CVE-2024-46758, CVE-2024-43861, CVE-2024-42306, CVE-2024-42285, CVE-2024-41065, CVE-2024-46818, CVE-2024-43894, CVE-2024-44954, CVE-2024-42310, CVE-2024-46829, CVE-2023-52614, CVE-2024-47663, CVE-2024-42281, CVE-2024-42297, CVE-2024-46800, CVE-2024-44960, CVE-2024-44952, CVE-2024-46747, CVE-2024-42286, CVE-2024-41071, CVE-2024-43893, CVE-2023-52531, CVE-2024-43860, CVE-2024-46840, CVE-2024-41011, CVE-2024-43890, CVE-2024-45026, CVE-2024-42292, CVE-2024-27051, CVE-2024-41015, CVE-2024-47668, CVE-2024-46817, CVE-2024-43846, CVE-2024-44988, CVE-2024-44944, CVE-2024-43829, CVE-2024-45021, CVE-2024-43914, CVE-2024-43856, CVE-2024-46673, CVE-2024-46771, CVE-2024-41081, CVE-2024-43830, CVE-2024-43839, CVE-2024-43853, CVE-2024-47669, CVE-2024-42244, CVE-2021-47212, CVE-2024-46844, CVE-2024-44965, CVE-2024-41059, CVE-2024-46783, CVE-2024-42295, CVE-2024-35848, CVE-2024-41017, CVE-2024-47659, CVE-2024-42309, CVE-2024-26800, CVE-2024-41064, CVE-2024-43879, CVE-2024-46679, CVE-2024-43854, CVE-2024-41022,…

Record: USN-7088-2
Updated: 2026-11-02

OSVUSN-7088-3 No score

linux-aws-5.4, linux-oracle-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
CPU frequency scaling framework;
Device frequency scaling framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
EEPROM drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
QCOM SoC drivers;
Direct Digital Synthesis drivers;
TTY drivers;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
BPF subsystem;
Core kernel;
DMA mapping infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
Objagg library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
KCM (Kernel Connection Multiplexor) sockets driver;
MAC80211 subsystem;
Netfilter;
Network traffic control;
SCTP protocol;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Wireless networking;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SoC audio core drivers;
USB sound devices; (CVE-2021-47212, CVE-2024-44965, CVE-2024-46676, CVE-2024-41091, CVE-2024-44946, CVE-2024-43894, CVE-2024-26668, CVE-2024-42259, CVE-2024-42295, CVE-2024-46685, CVE-2024-46722, CVE-2024-45028, CVE-2024-46815, CVE-2024-41081, CVE-2024-41022, CVE-2024-44948, CVE-2024-42301, CVE-2024-43914, CVE-2024-46771, CVE-2024-42289, CVE-2024-43841, CVE-2024-41042, CVE-2024-44999, CVE-2024-43893, CVE-2024-46758, CVE-2024-46828, CVE-2024-36484, CVE-2024-26669, CVE-2024-44952, CVE-2024-42265, CVE-2024-42311, CVE-2024-43880, CVE-2024-41070, CVE-2024-46829, CVE-2024-42292, CVE-2024-46719, CVE-2024-41020, CVE-2024-41015, CVE-2024-42283, CVE-2024-46744, CVE-2024-46679, CVE-2024-46800, CVE-2024-46777, CVE-2024-43835, CVE-2024-42271, CVE-2024-43882, CVE-2024-41072, CVE-2024-35848, CVE-2024-43860, CVE-2024-38611, CVE-2024-26607, CVE-2024-47663, CVE-2024-46780, CVE-2024-46675, CVE-2024-45003, CVE-2024-44969, CVE-2024-42244, CVE-2024-43856, CVE-2024-46755, CVE-2024-42286, CVE-2024-41063, CVE-2024-41068, CVE-2024-46743, CVE-2024-43839, CVE-2024-41065, CVE-2023-52531, CVE-2024-41090, CVE-2024-46747, CVE-2023-52614, CVE-2024-43853, CVE-2024-46737, CVE-2024-45021, CVE-2024-41012, CVE-2024-41064, CVE-2024-26800, CVE-2024-42246, CVE-2024-43908, CVE-2024-46723, CVE-2024-42310, CVE-2024-46781, CVE-2023-52918, CVE-2024-42313, CVE-2024-45006, CVE-2024-43890, CVE-2024-44954, CVE-2024-43858, CVE-2024-41098, CVE-2024-41071, CVE-2024-26641, CVE-2024-42280, CVE-2024-46673, CVE-2024-43846, CVE-2024-46721, CVE-2024-47667, CVE-2024-26885, CVE-2024-42304, CVE-2024-46745,…

Record: USN-7088-3
Updated: 2026-11-02

OSVUSN-7088-4 No score

linux-aws, linux-azure-5.4, linux-kvm, linux-oracle, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
CPU frequency scaling framework;
Device frequency scaling framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
EEPROM drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
QCOM SoC drivers;
Direct Digital Synthesis drivers;
TTY drivers;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
BPF subsystem;
Core kernel;
DMA mapping infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
Objagg library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
KCM (Kernel Connection Multiplexor) sockets driver;
MAC80211 subsystem;
Netfilter;
Network traffic control;
SCTP protocol;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Wireless networking;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SoC audio core drivers;
USB sound devices; (CVE-2024-35848, CVE-2024-43853, CVE-2024-41017, CVE-2024-26607, CVE-2024-43839, CVE-2024-41072, CVE-2024-46815, CVE-2023-52614, CVE-2024-46798, CVE-2024-46676, CVE-2024-43914, CVE-2024-43841, CVE-2024-41012, CVE-2024-27051, CVE-2024-46738, CVE-2024-47663, CVE-2024-46723, CVE-2024-46740, CVE-2024-42287, CVE-2024-46750, CVE-2024-43894, CVE-2023-52531, CVE-2024-47668, CVE-2024-47669, CVE-2024-46685, CVE-2024-41011, CVE-2024-41064, CVE-2024-42305, CVE-2024-41073, CVE-2024-46829, CVE-2024-43860, CVE-2024-46679, CVE-2024-44999, CVE-2024-46817, CVE-2024-26800, CVE-2024-46689, CVE-2024-43908, CVE-2024-46739, CVE-2024-43893, CVE-2024-46828, CVE-2024-46777, CVE-2024-46721, CVE-2024-36484, CVE-2024-46822, CVE-2024-46840, CVE-2024-43880, CVE-2024-46781, CVE-2024-46673, CVE-2024-26669, CVE-2024-41098, CVE-2024-46737, CVE-2024-43871, CVE-2024-42281, CVE-2024-42301, CVE-2024-44995, CVE-2024-43879, CVE-2024-26668, CVE-2024-44965, CVE-2024-41068, CVE-2024-41059, CVE-2024-42229, CVE-2024-44987, CVE-2024-46745, CVE-2024-26891, CVE-2024-46719, CVE-2024-42292, CVE-2024-44952, CVE-2024-46756, CVE-2024-45028, CVE-2024-42283, CVE-2024-45025, CVE-2024-46743, CVE-2024-43867, CVE-2024-46771, CVE-2024-41081, CVE-2024-42244, CVE-2024-42284, CVE-2024-43858, CVE-2024-44998, CVE-2024-46758, CVE-2024-46800, CVE-2024-45003, CVE-2024-44935, CVE-2024-38611, CVE-2024-46844, CVE-2024-44954, CVE-2024-42313, CVE-2024-46783, CVE-2024-42311, CVE-2024-46761, CVE-2024-41022, CVE-2024-43829, CVE-2024-43835, CVE-2024-43846, CVE-2024-46755, CVE-2024-47667, CVE-2024-42259,…

Record: USN-7088-4
Updated: 2026-11-02

OSVUSN-7088-5 No score

linux-raspi, linux-raspi-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
CPU frequency scaling framework;
Device frequency scaling framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
EEPROM drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
QCOM SoC drivers;
Direct Digital Synthesis drivers;
TTY drivers;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Serial drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
BPF subsystem;
Core kernel;
DMA mapping infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
Objagg library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
KCM (Kernel Connection Multiplexor) sockets driver;
MAC80211 subsystem;
Netfilter;
Network traffic control;
SCTP protocol;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Wireless networking;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SoC audio core drivers;
USB sound devices; (CVE-2024-42289, CVE-2024-26640, CVE-2024-42246, CVE-2024-43914, CVE-2024-46744, CVE-2024-45026, CVE-2024-41071, CVE-2024-43893, CVE-2024-46689, CVE-2024-41073, CVE-2024-42292, CVE-2024-43884, CVE-2024-42301, CVE-2024-43856, CVE-2024-46756, CVE-2024-46759, CVE-2024-27051, CVE-2024-26668, CVE-2024-46840, CVE-2024-42306, CVE-2024-41042, CVE-2024-45006, CVE-2024-42309, CVE-2024-26891, CVE-2024-42283, CVE-2024-46782, CVE-2024-44948, CVE-2024-43839, CVE-2024-47667, CVE-2024-44965, CVE-2024-42284, CVE-2024-44987, CVE-2024-46777, CVE-2024-41017, CVE-2024-46722, CVE-2024-41015, CVE-2024-46817, CVE-2024-46740, CVE-2024-43894, CVE-2024-26800, CVE-2024-45003, CVE-2024-46822, CVE-2024-26641, CVE-2024-44960, CVE-2024-44935, CVE-2024-42229, CVE-2024-42285, CVE-2024-44988, CVE-2024-46829, CVE-2024-41012, CVE-2024-46750, CVE-2024-43835, CVE-2024-43883, CVE-2024-43882, CVE-2024-46844, CVE-2024-41011, CVE-2024-44999, CVE-2024-46757, CVE-2024-42131, CVE-2024-46714, CVE-2024-41081, CVE-2024-45021, CVE-2024-46747, CVE-2024-46673, CVE-2024-46737, CVE-2024-43841, CVE-2024-42304, CVE-2024-45008, CVE-2024-42259, CVE-2024-42276, CVE-2024-46685, CVE-2024-46743, CVE-2023-52614, CVE-2024-42313, CVE-2024-41090, CVE-2024-46677, CVE-2024-43861, CVE-2024-42288, CVE-2024-43890, CVE-2024-41063, CVE-2024-43860, CVE-2024-47669, CVE-2024-42305, CVE-2024-43879, CVE-2024-42281, CVE-2024-46798, CVE-2024-42280, CVE-2024-42297, CVE-2024-42310,…

Record: USN-7088-5
Updated: 2026-11-02

OSVUSN-7100-1 No score

linux, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi, linux-xilinx-zynqmp vulnerabilities

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Null block device driver;
Character device driver;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I3C subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
QCOM SoC drivers;
Direct Digital Synthesis drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VHOST drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
NTFS3 file system;
Proc file system;
SMB network file system;
Core kernel;
DMA mapping infrastructure;
RCU subsystem;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
Objagg library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
KCM (Kernel Connection Multiplexor) sockets driver;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Wireless networking;
AppArmor security module;
Landlock security;
Simplified Mandatory Access Control Kernel framework;
FireWire sound drivers;
SoC audio core drivers;
USB sound devices; (CVE-2024-43817, CVE-2024-42304, CVE-2024-46756, CVE-2024-42318, CVE-2024-41090, CVE-2024-41063, CVE-2024-44987, CVE-2024-46844, CVE-2024-46677, CVE-2024-44988, CVE-2024-42297, CVE-2024-26893, CVE-2024-46673, CVE-2024-26800, CVE-2024-42305, CVE-2024-46731, CVE-2024-41091, CVE-2024-46810, CVE-2024-41072, CVE-2022-48666, CVE-2024-38602, CVE-2024-46780, CVE-2024-46750, CVE-2024-43858, CVE-2024-41020, CVE-2024-46755, CVE-2024-46829, CVE-2024-41068, CVE-2024-45003, CVE-2024-42280, CVE-2024-42283, CVE-2024-43873, CVE-2024-46746, CVE-2024-44969, CVE-2024-46807, CVE-2024-41081, CVE-2024-44971, CVE-2024-26607, CVE-2024-43880, CVE-2024-42281, CVE-2024-42274, CVE-2024-43908, CVE-2024-42267, CVE-2024-47665, CVE-2024-45011, CVE-2024-46707, CVE-2024-42310, CVE-2024-42309, CVE-2024-44965, CVE-2024-46747, CVE-2024-42259, CVE-2024-46804, CVE-2024-46679, CVE-2024-45007, CVE-2024-45009, CVE-2024-46771, CVE-2024-46739, CVE-2024-41060, CVE-2024-46676, CVE-2024-46822, CVE-2024-42272, CVE-2024-41059, CVE-2024-43839, CVE-2024-46817, CVE-2024-47669,…

Record: USN-7100-1
Updated: 2026-11-02

OSVUSN-7100-2 No score

linux-aws vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Null block device driver;
Character device driver;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I3C subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
QCOM SoC drivers;
Direct Digital Synthesis drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VHOST drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
NTFS3 file system;
Proc file system;
SMB network file system;
Core kernel;
DMA mapping infrastructure;
RCU subsystem;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
Objagg library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
KCM (Kernel Connection Multiplexor) sockets driver;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Wireless networking;
AppArmor security module;
Landlock security;
Simplified Mandatory Access Control Kernel framework;
FireWire sound drivers;
SoC audio core drivers;
USB sound devices; (CVE-2024-42288, CVE-2024-41098, CVE-2024-43849, CVE-2024-46689, CVE-2024-44987, CVE-2024-40915, CVE-2024-46844, CVE-2024-45009, CVE-2024-46780, CVE-2024-41081, CVE-2024-43817, CVE-2024-44965, CVE-2024-46832, CVE-2024-41072, CVE-2024-45011, CVE-2024-46814, CVE-2024-45026, CVE-2024-44982, CVE-2024-46723, CVE-2024-46771, CVE-2024-46759, CVE-2024-41063, CVE-2024-46673, CVE-2023-52889, CVE-2024-41020, CVE-2024-46677, CVE-2024-46798, CVE-2024-45021, CVE-2024-46676, CVE-2024-47668, CVE-2024-42289, CVE-2024-45018, CVE-2024-46724, CVE-2024-41090, CVE-2024-43853, CVE-2024-42272, CVE-2024-43828, CVE-2024-42292, CVE-2024-26800, CVE-2024-43871, CVE-2024-46758, CVE-2024-36484, CVE-2024-46755, CVE-2024-46782, CVE-2024-43889, CVE-2024-46763, CVE-2024-41015, CVE-2024-43858, CVE-2024-41012, CVE-2024-44960, CVE-2024-46747, CVE-2024-42311, CVE-2024-47660, CVE-2024-42267, CVE-2024-44998, CVE-2024-43839, CVE-2024-43914, CVE-2024-46783, CVE-2024-47659, CVE-2024-46725, CVE-2024-46840, CVE-2024-43873, CVE-2024-46737, CVE-2024-44946, CVE-2024-43841,…

Record: USN-7100-2
Updated: 2026-11-02

OSVUSN-7119-1 No score

linux-iot vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
CPU frequency scaling framework;
Device frequency scaling framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
Modular ISDN driver;
LED subsystem;
Multiple devices driver;
Media drivers;
EEPROM drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
QCOM SoC drivers;
Direct Digital Synthesis drivers;
TTY drivers;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Serial drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
Watchdog drivers;
BTRFS file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
NILFS2 file system;
Netfilter;
BPF subsystem;
Core kernel;
DMA mapping infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
Objagg library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
KCM (Kernel Connection Multiplexor) sockets driver;
MAC80211 subsystem;
RxRPC session sockets;
Network traffic control;
SCTP protocol;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Wireless networking;
AppArmor security module;
Integrity Measurement Architecture(IMA) framework;
Simplified Mandatory Access Control Kernel framework;
SoC audio core drivers;
USB sound devices; (CVE-2024-46750, CVE-2024-43853, CVE-2024-46722, CVE-2024-42311, CVE-2024-46679, CVE-2023-52918, CVE-2024-42309, CVE-2024-42160, CVE-2024-26668, CVE-2024-42271, CVE-2024-40929, CVE-2024-46747, CVE-2024-41064, CVE-2024-43839, CVE-2024-46757, CVE-2024-41059, CVE-2024-42301, CVE-2024-46737, CVE-2024-42297, CVE-2024-41015, CVE-2024-43854, CVE-2024-42289, CVE-2024-41017, CVE-2024-26787, CVE-2024-47667, CVE-2024-46675, CVE-2024-42246, CVE-2024-46723, CVE-2024-46817, CVE-2024-43841, CVE-2024-26800, CVE-2024-41098, CVE-2022-48863, CVE-2023-52531, CVE-2024-42265, CVE-2024-46828, CVE-2024-41020, CVE-2024-42305, CVE-2024-46755, CVE-2024-46744, CVE-2024-43871, CVE-2024-43884, CVE-2024-41042, CVE-2024-43914, CVE-2024-43856, CVE-2024-27397, CVE-2024-26607, CVE-2024-42228, CVE-2024-41091, CVE-2024-26677, CVE-2024-38611, CVE-2024-43867, CVE-2024-46829, CVE-2021-47188, CVE-2024-46756, CVE-2024-45025, CVE-2024-42313, CVE-2024-44947, CVE-2024-26669, CVE-2024-47668, CVE-2024-44987, CVE-2024-42295, CVE-2024-42281, CVE-2024-43880, CVE-2024-46777, CVE-2024-46780, CVE-2024-42285, CVE-2024-26891, CVE-2024-46714, CVE-2024-44999, CVE-2024-41068, CVE-2024-44944, CVE-2024-43882, CVE-2024-27051, CVE-2024-41072, CVE-2024-46783, CVE-2024-46781, CVE-2024-26885, CVE-2024-46844, CVE-2024-47669,…

Record: USN-7119-1
Updated: 2026-11-02

OSVUSN-7123-1 No score

linux-azure vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain SMB messages, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-6610)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Null block device driver;
Character device driver;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I3C subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Remote Processor subsystem;
S/390 drivers;
SCSI drivers;
QCOM SoC drivers;
Direct Digital Synthesis drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VHOST drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
NTFS3 file system;
Proc file system;
SMB network file system;
Core kernel;
DMA mapping infrastructure;
RCU subsystem;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
Objagg library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
KCM (Kernel Connection Multiplexor) sockets driver;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Wireless networking;
AppArmor security module;
Landlock security;
Simplified Mandatory Access Control Kernel framework;
FireWire sound drivers;
SoC audio core drivers;
USB sound devices; (CVE-2023-52751, CVE-2024-43902, CVE-2024-46791, CVE-2024-45018, CVE-2024-44987, CVE-2024-46763, CVE-2024-46724, CVE-2024-26893, CVE-2024-42283, CVE-2024-46738, CVE-2024-46819, CVE-2024-44982, CVE-2023-52889, CVE-2024-45025, CVE-2023-52918, CVE-2024-46800, CVE-2024-46756, CVE-2024-46719, CVE-2024-39472, CVE-2024-42292, CVE-2024-45006, CVE-2024-46675, CVE-2024-44971, CVE-2024-46731, CVE-2024-42286, CVE-2024-44954, CVE-2024-42274, CVE-2024-46746, CVE-2024-42276, CVE-2024-43869, CVE-2024-43830, CVE-2024-42288, CVE-2024-41042, CVE-2024-42126, CVE-2024-43870, CVE-2024-46805, CVE-2024-41078, CVE-2024-44966, CVE-2024-44989, CVE-2024-46795, CVE-2024-44988, CVE-2024-38577, CVE-2024-43839, CVE-2024-43909, CVE-2024-46745, CVE-2024-42285,…

Record: USN-7123-1
Updated: 2026-11-02

OSVUSN-7144-1 No score

linux-intel-iotg, linux-intel-iotg-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Null block device driver;
Character device driver;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I3C subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
Direct Digital Synthesis drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
Virtio Host (VHOST) subsystem;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
SMB network file system;
Bitmap API;
Objagg library;
Perf events;
Virtio network driver;
KCM (Kernel Connection Multiplexor) sockets driver;
Network traffic control;
Control group (cgroup);
DMA mapping infrastructure;
Locking primitives;
Padata parallel execution mechanism;
RCU subsystem;
Scheduler infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
SCTP protocol;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
Wireless networking;
AppArmor security module;
Landlock security;
Simplified Mandatory Access Control Kernel framework;
FireWire sound drivers;
SoC audio core drivers;
USB sound devices; (CVE-2024-42280, CVE-2024-46759, CVE-2024-42286, CVE-2024-41042, CVE-2024-42276, CVE-2024-46732, CVE-2024-43902, CVE-2024-47665, CVE-2024-46675, CVE-2024-43873, CVE-2024-46761, CVE-2024-42281, CVE-2024-46795, CVE-2024-43869, CVE-2024-39472, CVE-2024-46800, CVE-2024-44998, CVE-2024-46746, CVE-2024-46747, CVE-2024-41011, CVE-2024-43871, CVE-2024-46737, CVE-2024-42318, CVE-2024-46731, CVE-2024-41022, CVE-2024-42285, CVE-2024-46752, CVE-2024-46818, CVE-2024-44935, CVE-2024-44946, CVE-2024-44944, CVE-2024-41015, CVE-2024-42312, CVE-2024-46676, CVE-2024-43834, CVE-2024-44966, CVE-2024-46743, CVE-2024-45026, CVE-2024-46805, CVE-2024-26607, CVE-2024-46771, CVE-2024-43905, CVE-2024-43884, CVE-2024-41070, CVE-2024-43829, CVE-2024-46725, CVE-2024-45028,…

Record: USN-7144-1
Updated: 2026-11-02

OSVUSN-7154-1 No score

linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gke, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oem-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Android drivers;
ATM drivers;
Drivers core;
Ublk userspace block driver;
Bluetooth drivers;
Character device driver;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
VMware VMCI Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
SMB network file system;
Tracing file system;
Bitmap API;
BPF subsystem;
Memory Management;
Objagg library;
Perf events;
Virtio network driver;
VMware vSockets driver;
KCM (Kernel Connection Multiplexor) sockets driver;
Control group (cgroup);
DMA mapping infrastructure;
Locking primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
KUnit for arithmetic overflow checks;
Memory management;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TIPC protocol;
Wireless networking;
AppArmor security module;
Landlock security;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
FireWire sound drivers;
AMD SoC Alsa drivers;
Texas InstrumentS Audio (ASoC/HDA) drivers;
SoC Audio for Freescale CPUs drivers;
Intel ASoC drivers;
Amlogic Meson SoC drivers;
SoC audio core drivers;
USB sound devices;
Real-Time Linux Analysis tools; (CVE-2024-46783, CVE-2024-44960, CVE-2024-46743, CVE-2024-45009, CVE-2024-43820, CVE-2024-43888, CVE-2024-45010, CVE-2024-43839, CVE-2024-42304, CVE-2024-43846, CVE-2024-42258, CVE-2024-45005, CVE-2024-46709, CVE-2024-46774, CVE-2024-43883, CVE-2024-43859, CVE-2024-46721, CVE-2024-44944, CVE-2024-43913, CVE-2024-43843, CVE-2024-43845, CVE-2024-45018, CVE-2024-43909,…

Record: USN-7154-1
Updated: 2026-11-02

OSVUSN-7154-2 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Android drivers;
ATM drivers;
Drivers core;
Ublk userspace block driver;
Bluetooth drivers;
Character device driver;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
VMware VMCI Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
SMB network file system;
Tracing file system;
Bitmap API;
BPF subsystem;
Memory Management;
Objagg library;
Perf events;
Virtio network driver;
VMware vSockets driver;
KCM (Kernel Connection Multiplexor) sockets driver;
Control group (cgroup);
DMA mapping infrastructure;
Locking primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
KUnit for arithmetic overflow checks;
Memory management;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TIPC protocol;
Wireless networking;
AppArmor security module;
Landlock security;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
FireWire sound drivers;
AMD SoC Alsa drivers;
Texas InstrumentS Audio (ASoC/HDA) drivers;
SoC Audio for Freescale CPUs drivers;
Intel ASoC drivers;
Amlogic Meson SoC drivers;
SoC audio core drivers;
USB sound devices;
Real-Time Linux Analysis tools; (CVE-2024-46783, CVE-2024-44960, CVE-2024-46743, CVE-2024-45009, CVE-2024-43820, CVE-2024-43888, CVE-2024-45010, CVE-2024-43839, CVE-2024-42304, CVE-2024-43846, CVE-2024-42258, CVE-2024-45005, CVE-2024-46709, CVE-2024-46774, CVE-2024-43883, CVE-2024-43859, CVE-2024-46721, CVE-2024-44944, CVE-2024-43913, CVE-2024-43843, CVE-2024-43845, CVE-2024-45018, CVE-2024-43909,…

Record: USN-7154-2
Updated: 2026-11-02

OSVUSN-7155-1 No score

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Android drivers;
ATM drivers;
Drivers core;
Ublk userspace block driver;
Bluetooth drivers;
Character device driver;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
VMware VMCI Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Near Field Communication (NFC) drivers;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
SMB network file system;
Tracing file system;
Bitmap API;
BPF subsystem;
Memory Management;
Objagg library;
Perf events;
Virtio network driver;
VMware vSockets driver;
KCM (Kernel Connection Multiplexor) sockets driver;
Control group (cgroup);
DMA mapping infrastructure;
Locking primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Tracing infrastructure;
Radix Tree data structure library;
Kernel userspace event delivery library;
KUnit for arithmetic overflow checks;
Memory management;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TIPC protocol;
Wireless networking;
AppArmor security module;
Landlock security;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
FireWire sound drivers;
AMD SoC Alsa drivers;
Texas InstrumentS Audio (ASoC/HDA) drivers;
SoC Audio for Freescale CPUs drivers;
Intel ASoC drivers;
Amlogic Meson SoC drivers;
SoC audio core drivers;
USB sound devices;
Real-Time Linux Analysis tools; (CVE-2024-43845, CVE-2024-42311, CVE-2024-46757, CVE-2024-46738, CVE-2024-44961, CVE-2024-44935, CVE-2024-46845, CVE-2024-46783, CVE-2024-42315, CVE-2023-52918, CVE-2024-46708, CVE-2024-44934, CVE-2024-42298, CVE-2024-46786, CVE-2024-46778, CVE-2024-44960, CVE-2024-42295, CVE-2024-43881, CVE-2024-44971, CVE-2024-43849, CVE-2024-43914, CVE-2024-44962, CVE-2024-43841,…

Record: USN-7155-1
Updated: 2026-11-02

OSVUSN-7156-1 No score

linux-gkeop vulnerabilities

Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local attacker could possibly use this to cause a denial of service. (CVE-2024-25741)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Null block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Clock framework and drivers;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
Cirrus firmware drivers;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Fastrpc Driver;
VMware VMCI Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Near Field Communication (NFC) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
USB DSL drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Serial drivers;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
SMB network file system;
Tracing file system;
Bitmap API;
BPF subsystem;
Syscall compatibility layer;
Memory Management;
Memory management;
Objagg library;
Perf events;
Syscall interfaces;
Virtio network driver;
VMware vSockets driver;
KCM (Kernel Connection Multiplexor) sockets driver;
Netfilter;
Tracing infrastructure;
io_uring subsystem;
Control group (cgroup);
DMA mapping infrastructure;
Locking primitives;
Padata parallel execution mechanism;
Scheduler infrastructure;
Closures library;
Radix Tree data structure library;
Kernel userspace event delivery library;
KUnit for arithmetic overflow checks;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Ceph Core library;
Networking core;
Ethtool driver;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Network traffic control;…

Record: USN-7156-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 145 CVEs	before 4.18.0-553.22.1.el8_10	4.18.0-553.22.1.el8_10
`kernel-rt` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-kvm` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-kvm` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 129 CVEs	before 4.18.0-553.22.1.rt7.363.el8_10	4.18.0-553.22.1.rt7.363.el8_10
`kernel` Azure Linux:2	before 5.15.167.1-1	5.15.167.1-1
`linux-lts` Alpaquita:23	6.1.99-r0 up to 6.1.104-r0	6.1.104-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`linux-buildinfo-4.15.0-240-tuxcare.els28-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-buildinfo-4.15.0-240-tuxcare.els28-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-cloud-tools-4.15.0-240-tuxcare.els28` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-cloud-tools-4.15.0-240-tuxcare.els28-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-cloud-tools-4.15.0-240-tuxcare.els28-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-cloud-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-cloud-tools-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`linux-cloud-tools-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`linux-crashdump` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`linux-doc` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`linux-headers-4.15.0-240-tuxcare.els28` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-headers-4.15.0-240-tuxcare.els28-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-headers-4.15.0-240-tuxcare.els28-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-headers-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`linux-headers-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`linux-image-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`linux-image-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`linux-image-unsigned-4.15.0-240-tuxcare.els28-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-image-unsigned-4.15.0-240-tuxcare.els28-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-libc-dev` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`linux-modules-4.15.0-240-tuxcare.els28-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-modules-4.15.0-240-tuxcare.els28-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-modules-extra-4.15.0-240-tuxcare.els28-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-source` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`linux-source-4.15.0` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-tools-4.15.0-240-tuxcare.els28` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-tools-4.15.0-240-tuxcare.els28-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-tools-4.15.0-240-tuxcare.els28-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-tools-generic` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`linux-tools-host` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0-240.251	4.15.0-240.251
`linux-tools-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 76 CVEs	before 4.15.0.240.251	4.15.0.240.251
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.11.els5	7.0.0-284.1101.el9_2.tuxcare.11.els5
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 150 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els5	5.14.0-284.1101.el9_2.tuxcare.11.els5
`Kernel` Linux	4.10.0 up to 4.19.320, 4.20.0 up to 5.4.282, 5.5.0 up to 5.10.224, 5.11.0 up to 5.15.165, 5.16.0 up to 6.1.103, 6.2.0 up to 6.6.44, 6.7.0 up to 6.10.3	4.19.3205.4.2825.10.2245.15.1656.1.1036.6.446.10.3
`linux` Debian:12	before 6.1.106-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 21 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.106-1
`linux` Debian:13	before 6.10.3-1	6.10.3-1
`linux` Debian:14	before 6.10.3-1	6.10.3-1
`linux` Debian:11 From an advisory covering 147 CVEs	before 5.10.226-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 38 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.226-1
`linux-6.1` Debian:11 From an advisory covering 838 CVEs	before 6.1.119-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u1	6.1.119-1~deb11u1
`kernel` Mageia:9 From an advisory covering 172 CVEs	before 6.6.50-1.mga9	6.6.50-1.mga9
`kmod-xtables-addons` Mageia:9 From an advisory covering 172 CVEs	before 3.24-61.mga9	3.24-61.mga9
`kmod-virtualbox` Mageia:9 From an advisory covering 172 CVEs	before 7.0.20-53.mga9	7.0.20-53.mga9
`kernel-linus` Mageia:9 From an advisory covering 172 CVEs	before 6.6.50-1.mga9	6.6.50-1.mga9
`kernel` openEuler:20.03-LTS-SP4 From an advisory covering 15 CVEs	before 4.19.90-2409.3.0.0294.oe2003sp4	4.19.90-2409.3.0.0294.oe2003sp4
`kernel` openEuler:22.03-LTS-SP4 From an advisory covering 62 CVEs	before 5.10.0-234.0.0.133.oe2203sp4	5.10.0-234.0.0.133.oe2203sp4
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 62 CVEs	before 5.10.0-234.0.0.136.oe2203sp3	5.10.0-234.0.0.136.oe2203sp3
`kernel` openEuler:22.03-LTS-SP1 From an advisory covering 74 CVEs	before 5.10.0-136.99.0.180.oe2203sp1	5.10.0-136.99.0.180.oe2203sp1
`kernel` openEuler:24.03-LTS From an advisory covering 62 CVEs	before 6.6.0-48.0.0.53.oe2403	6.6.0-48.0.0.53.oe2403
`bpftool` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 151 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-devel` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt-debug-kvm` Red Hat:enterprise_linux:8::nfv From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel` Rocky Linux:8 From an advisory covering 147 CVEs	before 0:4.18.0-553.22.1.el8_10	0:4.18.0-553.22.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 129 CVEs	before 0:4.18.0-553.22.1.rt7.363.el8_10	0:4.18.0-553.22.1.rt7.363.el8_10
`kernel-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 104 CVEs	before 4.12.14-10.200.1	4.12.14-10.200.1
`kernel-rt_debug` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 104 CVEs	before 4.12.14-10.200.1	4.12.14-10.200.1
`kernel-source-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 104 CVEs	before 4.12.14-10.200.1	4.12.14-10.200.1
`kernel-syms-rt` SUSE:Linux Enterprise Real Time 12 SP5 From an advisory covering 104 CVEs	before 4.12.14-10.200.1	4.12.14-10.200.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.33.66.1	5.14.21-150500.33.66.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.8.11.1	6.4.0-150600.8.11.1
`kernel-livepatch-SLE15-SP6-RT_Update_2` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 393 CVEs	before 1-150600.1.3.2	1-150600.1.3.2
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 393 CVEs	before 6.4.0-150600.10.8.3	6.4.0-150600.10.8.3
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 393 CVEs	before 6.4.0-150600.10.8.3	6.4.0-150600.10.8.3
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 393 CVEs	before 6.4.0-150600.10.8.3	6.4.0-150600.10.8.3
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 393 CVEs	before 6.4.0-150600.10.8.1	6.4.0-150600.10.8.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 393 CVEs	before 6.4.0-150600.10.8.3	6.4.0-150600.10.8.3
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 393 CVEs	before 6.4.0-150600.10.8.3	6.4.0-150600.10.8.3
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 393 CVEs	before 6.4.0-150600.10.8.3	6.4.0-150600.10.8.3
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 393 CVEs	before 6.4.0-150600.10.8.1	6.4.0-150600.10.8.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-livepatch-SLE15-SP5-RT_Update_19` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 292 CVEs	before 1-150500.11.3.2	1-150500.11.3.2
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.1	5.14.21-150500.13.67.1
`kernel-rt` openSUSE:Leap Micro 5.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.3	5.14.21-150500.13.67.3
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 292 CVEs	before 5.14.21-150500.13.67.1	5.14.21-150500.13.67.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-122.228.1	4.12.14-122.228.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-122.228.1	4.12.14-122.228.1
`kgraft-patch-SLE12-SP5_Update_60` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 105 CVEs	before 1-8.3.1	1-8.3.1
`kernel-docs` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-122.228.2	4.12.14-122.228.2
`kernel-obs-build` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-122.228.2	4.12.14-122.228.2
`kernel-default` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-122.228.1	4.12.14-122.228.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-122.228.1	4.12.14-122.228.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-122.228.1	4.12.14-122.228.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-122.228.1	4.12.14-122.228.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-122.228.1	4.12.14-122.228.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-122.228.1	4.12.14-122.228.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-122.228.1	4.12.14-122.228.1
`kernel-azure` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-16.197.1	4.12.14-16.197.1
`kernel-source-azure` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-16.197.1	4.12.14-16.197.1
`kernel-syms-azure` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-16.197.1	4.12.14-16.197.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-16.197.1	4.12.14-16.197.1
`kernel-source-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-16.197.1	4.12.14-16.197.1
`kernel-syms-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 105 CVEs	before 4.12.14-16.197.1	4.12.14-16.197.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1.150600.12.8.3	6.4.0-150600.23.22.1.150600.12.8.3
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1.150600.12.8.3	6.4.0-150600.23.22.1.150600.12.8.3
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 394 CVEs	before 6.4.0-150600.23.22.1	6.4.0-150600.23.22.1
`kernel-default` openSUSE:Leap Micro 5.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default-base` openSUSE:Leap Micro 5.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2.150500.6.35.6	5.14.21-150500.55.80.2.150500.6.35.6
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.1	5.14.21-150500.55.80.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2.150500.6.35.6	5.14.21-150500.55.80.2.150500.6.35.6
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.1	5.14.21-150500.55.80.1
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.1	5.14.21-150500.55.80.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.1	5.14.21-150500.55.80.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 296 CVEs	before 5.14.21-150500.55.80.2	5.14.21-150500.55.80.2
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1135.145~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1135.145~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1140.147~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1140.147~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1139.148~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1139.148~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-200.220~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-200.220~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1082.87~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	5.4.0-1082.87~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1134.143~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1134.143~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1119.131~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1119.131~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-200.220, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-200.220
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1135.145, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1135.145
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1072.78~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 42 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.1	5.15.0-1072.78~20.04.1
`linux-azure` Ubuntu:20.04:LTS	before 5.4.0-1140.147, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	5.4.0-1140.147
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1078.87~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	5.15.0-1078.87~20.04.1
`linux-bluefield` Ubuntu:20.04:LTS	before 5.4.0-1095.102, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92	5.4.0-1095.102
`linux-gcp` Ubuntu:20.04:LTS	before 5.4.0-1139.148, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	5.4.0-1139.148

History

History
Recorded	Changed	Sources
Nov 10, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected
Nov 3, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-43871 is a medium vulnerability (CVSS 5.5) in Linux, published August 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in kernel 5.15.167.1-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 571 package rows, 1,566 versions, 5,045 references and the rest of 33 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 2 source records.