CVE-2024-47685

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

9.1 CriticalFix available

What does this mean?

: 9.1v3.1, from NVD
: 1.36%72nd percentile
Fixed in: 5.15.173.1-1kernel
Published: October 21, 2024
Modified: November 11, 2026
Weakness: CWE-908
Also known as: AZL-50706AZL-51000BELL-CVE-2024-47685CLSA-2024-1731430561CLSA-2024-1731431059CLSA-2024-1731431756CLSA-2024-1731602566CLSA-2024-1731603213
Show 71 moreShow less
CLSA-2024-1731605761CLSA-2024-1731606243CLSA-2024-1731933167DEBIAN-CVE-2024-47685DLA-4008-1DLA-4075-1EUVD-2024-42605GHSA-49mx-q25w-jchqLSN-0115-1MGASA-2024-0344MGASA-2024-0345OESA-2024-2321OESA-2024-2322OESA-2024-2323OESA-2024-2324OESA-2024-2325RHSA-2025:6966SUSE-SU-2024:3983-1SUSE-SU-2024:3984-1SUSE-SU-2024:3985-1SUSE-SU-2024:3986-1SUSE-SU-2024:4100-1SUSE-SU-2024:4318-1SUSE-SU-2024:4364-1SUSE-SU-2024:4387-1SUSE-SU-2025:0034-1SUSE-SU-2025:20163-1SUSE-SU-2025:20164-1SUSE-SU-2025:20246-1SUSE-SU-2025:20247-1UBUNTU-CVE-2024-47685USN-7166-1USN-7166-2USN-7166-3USN-7166-4USN-7186-1USN-7186-2USN-7194-1USN-7293-1USN-7294-1USN-7294-2USN-7294-3USN-7294-4USN-7295-1USN-7301-1USN-7303-1USN-7303-2USN-7303-3USN-7304-1USN-7310-1USN-7311-1USN-7384-1USN-7384-2USN-7385-1USN-7386-1USN-7393-1USN-7401-1USN-7403-1USN-7413-1USN-7468-1USN-7539-1USN-7540-1USN-7727-1USN-7727-2USN-7727-3USN-7755-1USN-7755-2USN-7755-3USN-7875-1openSUSE-SU-2024:14500-1openSUSE-SU-2025:14705-1

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1)

Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put()

BUG: KMSAN: uninit-value in nf_reject_ip6_tcphdr_put+0x688/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:255 nf_reject_ip6_tcphdr_put+0x688/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:255 nf_send_reset6+0xd84/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:344 nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1da/0xa00 net/core/dev.c:5775 process_backlog+0x4ad/0xa50 net/core/dev.c:6108 __napi_poll+0xe7/0x980 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0xa5a/0x19b0 net/core/dev.c:6963 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq+0x14/0x1a kernel/softirq.c:588 do_softirq+0x9a/0x100 kernel/softirq.c:455 __local_bh_enable_ip+0x9f/0xb0 kernel/softirq.c:382 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:908 [inline] __dev_queue_xmit+0x2692/0x5610 net/core/dev.c:4450 dev_queue_xmit include/linux/netdevice.h:3105 [inline] neigh_resolve_output+0x9ca/0xae0 net/core/neighbour.c:1565 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0x2347/0x2ba0 net/ipv6/ip6_output.c:141 __ip6_finish_output net/ipv6/ip6_output.c:215 [inline] ip6_finish_output+0xbb8/0x14b0 net/ipv6/ip6_output.c:226 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x356/0x620 net/ipv6/ip6_output.c:247 dst_output include/net/dst.h:450 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] ip6_xmit+0x1ba6/0x25d0 net/ipv6/ip6_output.c:366 inet6_csk_xmit+0x442/0x530 net/ipv6/inet6_connection_sock.c:135 __tcp_transmit_skb+0x3b07/0x4880 net/ipv4/tcp_output.c:1466 tcp_transmit_skb net/ipv4/tcp_output.c:1484 [inline] tcp_connect+0x35b6/0x7130 net/ipv4/tcp_output.c:4143 tcp_v6_connect+0x1bcc/0x1e40 net/ipv6/tcp_ipv6.c:333 __inet_stream_connect+0x2ef/0x1730 net/ipv4/af_inet.c:679 inet_stream_connect+0x6a/0xd0 net/ipv4/af_inet.c:750 __sys_connect_file net/socket.c:2061 [inline] __sys_connect+0x606/0x690 net/socket.c:2078 __do_sys_connect net/socket.c:2088 [inline] __se_sys_connect net/socket.c:2085 [inline] __x64_sys_connect+0x91/0xe0 net/socket.c:2085 x64_sys_call+0x27a5/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:43 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was stored to memory at: nf_reject_ip6_tcphdr_put+0x60c/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:249 nf_send_reset6+0xd84/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:344 nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core ---truncated---

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: High

Exploit likelihood

1.36%Up 1.3 points since Oct 22, 2024

What each source reports

NVD Score used 9.1

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1)

Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put()

Record: CVE-2024-47685
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-908
Updated: 2026-11-02

CVE List No score

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1)

Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put()

Record: CVE-2024-47685
Updated: 2026-11-02

EUVDEUVD-2024-42605 No score

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1)

Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put()

Record: EUVD-2024-42605
Updated: 2026-11-02

GitHub AdvisoriesGHSA-49mx-q25w-jchq 9.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6:...

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1)

Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put()

Record: GHSA-49mx-q25w-jchq
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-908
Updated: 2026-11-02

OSVAZL-50706 9.1

CVE-2024-47685 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1)

Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put()

Record: AZL-50706
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVAZL-51000 9.1

CVE-2024-47685 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1)

Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put()

Record: AZL-51000
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

Show 46 moreShow less

OSVBELL-CVE-2024-47685 9.1

Record: BELL-CVE-2024-47685
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-47685 9.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1) Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put() BUG: KMSAN: uninit-value in nf_reject_ip6_tcphdr_put+0x688/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:255 nf_reject_ip6_tcphdr_put+0x688/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:255 nf_send_reset6+0xd84/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:344 nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1da/0xa00 net/core/dev.c:5775 process_backlog+0x4ad/0xa50 net/core/dev.c:6108 __napi_poll+0xe7/0x980 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0xa5a/0x19b0 net/core/dev.c:6963 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq+0x14/0x1a kernel/softirq.c:588 do_softirq+0x9a/0x100 kernel/softirq.c:455 __local_bh_enable_ip+0x9f/0xb0 kernel/softirq.c:382 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:908 [inline] __dev_queue_xmit+0x2692/0x5610 net/core/dev.c:4450 dev_queue_xmit include/linux/netdevice.h:3105 [inline] neigh_resolve_output+0x9ca/0xae0 net/core/neighbour.c:1565 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0x2347/0x2ba0 net/ipv6/ip6_output.c:141 __ip6_finish_output net/ipv6/ip6_output.c:215 [inline] ip6_finish_output+0xbb8/0x14b0 net/ipv6/ip6_output.c:226 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x356/0x620 net/ipv6/ip6_output.c:247 dst_output include/net/dst.h:450 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] ip6_xmit+0x1ba6/0x25d0 net/ipv6/ip6_output.c:366 inet6_csk_xmit+0x442/0x530 net/ipv6/inet6_connection_sock.c:135 __tcp_transmit_skb+0x3b07/0x4880 net/ipv4/tcp_output.c:1466 tcp_transmit_skb net/ipv4/tcp_output.c:1484 [inline] tcp_connect+0x35b6/0x7130 net/ipv4/tcp_output.c:4143 tcp_v6_connect+0x1bcc/0x1e40 net/ipv6/tcp_ipv6.c:333 __inet_stream_connect+0x2ef/0x1730 net/ipv4/af_inet.c:679 inet_stream_connect+0x6a/0xd0 net/ipv4/af_inet.c:750 __sys_connect_file net/socket.c:2061 [inline] __sys_connect+0x606/0x690 net/socket.c:2078 __do_sys_connect net/socket.c:2088 [inline] __se_sys_connect net/socket.c:2085 [inline] __x64_sys_connect+0x91/0xe0 net/socket.c:2085 x64_sys_call+0x27a5/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:43 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: nf_reject_ip6_tcphdr_put+0x60c/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:249 nf_send_reset6+0xd84/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:344 nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core ---truncated---

Record: DEBIAN-CVE-2024-47685
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2321 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix double list_add when enabling VMD in scalable mode

When enabling VMD and IOMMU scalable mode, the following kernel panic call trace/kernel log is shown in Eagle Stream platform (Sapphire Rapids CPU) during booting:

pci 0000:59:00.5: Adding to iommu group 42 ... vmd 0000:59:00.5: PCI host bridge to bus 10000:80 pci 10000:80:01.0: [8086:352a] type 01 class 0x060400 pci 10000:80:01.0: reg 0x10: [mem 0x00000000-0x0001ffff 64bit] pci 10000:80:01.0: enabling Extended Tags pci 10000:80:01.0: PME# supported from D0 D3hot D3cold pci 10000:80:01.0: DMAR: Setup RID2PASID failed pci 10000:80:01.0: Failed to add to iommu group 42: -16 pci 10000:80:03.0: [8086:352b] type 01 class 0x060400 pci 10000:80:03.0: reg 0x10: [mem 0x00000000-0x0001ffff 64bit] pci 10000:80:03.0: enabling Extended Tags pci 10000:80:03.0: PME# supported from D0 D3hot D3cold ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:29! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.17.0-rc3+ #7 Hardware name: Lenovo ThinkSystem SR650V3/SB27A86647, BIOS ESE101Y-1.00 01/13/2022 Workqueue: events work_for_cpu_fn RIP: 0010:__list_add_valid.cold+0x26/0x3f Code: 9a 4a ab ff 4c 89 c1 48 c7 c7 40 0c d9 9e e8 b9 b1 fe ff 0f 0b 48 89 f2 4c 89 c1 48 89 fe 48 c7 c7 f0 0c d9 9e e8 a2 b1 fe ff <0f> 0b 48 89 d1 4c 89 c6 4c 89 ca 48 c7 c7 98 0c d9 9e e8 8b b1 fe RSP: 0000:ff5ad434865b3a40 EFLAGS: 00010246 RAX: 0000000000000058 RBX: ff4d61160b74b880 RCX: ff4d61255e1fffa8 RDX: 0000000000000000 RSI: 00000000fffeffff RDI: ffffffff9fd34f20 RBP: ff4d611d8e245c00 R08: 0000000000000000 R09: ff5ad434865b3888 R10: ff5ad434865b3880 R11: ff4d61257fdc6fe8 R12: ff4d61160b74b8a0 R13: ff4d61160b74b8a0 R14: ff4d611d8e245c10 R15: ff4d611d8001ba70 FS: 0000000000000000(0000) GS:ff4d611d5ea00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ff4d611fa1401000 CR3: 0000000aa0210001 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> intel_pasid_alloc_table+0x9c/0x1d0 dmar_insert_one_dev_info+0x423/0x540 ? device_to_iommu+0x12d/0x2f0 intel_iommu_attach_device+0x116/0x290 __iommu_attach_device+0x1a/0x90 iommu_group_add_device+0x190/0x2c0 __iommu_probe_device+0x13e/0x250 iommu_probe_device+0x24/0x150 iommu_bus_notifier+0x69/0x90 blocking_notifier_call_chain+0x5a/0x80 device_add+0x3db/0x7b0 ? arch_memremap_can_ram_remap+0x19/0x50 ? memremap+0x75/0x140 pci_device_add+0x193/0x1d0 pci_scan_single_device+0xb9/0xf0 pci_scan_slot+0x4c/0x110 pci_scan_child_bus_extend+0x3a/0x290 vmd_enable_domain.constprop.0+0x63e/0x820 vmd_probe+0x163/0x190 local_pci_probe+0x42/0x80 work_for_cpu_fn+0x13/0x20 process_one_work+0x1e2/0x3b0 worker_thread+0x1c4/0x3a0 ? rescuer_thread+0x370/0x370 kthread+0xc7/0xf0 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- ... Kernel panic - not syncing: Fatal exception Kernel Offset: 0x1ca00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) ---[ end Kernel panic - not syncing: Fatal exception ]---

The following 'lspci' output shows devices '10000:80:*' are subdevices of the VMD device 0000:59:00.5:

$ lspci ... 0000:59:00.5 RAID bus controller: Intel Corporation Volume Management Device NVMe RAID Controller (rev 20) ... 10000:80:01.0 PCI bridge: Intel Corporation Device 352a (rev 03) 10000:80:03.0 PCI bridge: Intel Corporation Device 352b (rev 03) 10000:80:05.0 PCI bridge: Intel Corporation Device 352c (rev 03) 10000:80:07.0 PCI bridge: Intel Corporation Device 352d (rev 03) 10000:81:00.0…

Record: OESA-2024-2321
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2322 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix double list_add when enabling VMD in scalable mode

When enabling VMD and IOMMU scalable mode, the following kernel panic call trace/kernel log is shown in Eagle Stream platform (Sapphire Rapids CPU) during booting:

The following 'lspci' output shows devices '10000:80:*' are subdevices of the VMD device 0000:59:00.5:

Record: OESA-2024-2322
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2323 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead. Fix the problem and use udf_delete_aext() for deleting extent to avoid some code duplication.(CVE-2022-48946)

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfc_target arrays While running under CONFIG_FORTIFY_SOURCE=y, syzkaller reported: memcpy: detected field-spanning write (size 129) of single field "target->sensf_res" at net/nfc/nci/ntf.c:260 (size 18) This appears to be a legitimate lack of bounds checking in nci_add_new_protocol(). Add the missing checks.(CVE-2022-48967)

In the Linux kernel, the following vulnerability has been resolved: gpio: amd8111: Fix PCI device reference count leak for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and also decrease the reference count for the input pci_dev @from if it is not NULL. If we break for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count. Add the missing pci_dev_put() after the 'out' label. Since pci_dev_put() can handle NULL input parameter, there is no problem for the 'Device not found' branch. For the normal path, add pci_dev_put() in amd_gpio_exit().(CVE-2022-48973)

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event With clang's kernel control flow integrity (kCFI, CONFIG_CFI_CLANG), indirect call targets are validated against the expected function pointer prototype to make sure the call target is valid to help mitigate ROP attacks. If they are not identical, there is a failure at run time, which manifests as either a kernel panic or thread getting killed. seq_copy_in_user() and seq_copy_in_kernel() did not have prototypes matching snd_seq_dump_func_t. Adjust this and remove the casts. There are not resulting binary output differences. This was found as a result of Clang's new -Wcast-function-type-strict flag, which is more sensitive than the simpler -Wcast-function-type, which only checks for type width mismatches.(CVE-2022-48994)

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() Syzbot reported a null-ptr-deref bug: NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] CPU: 1 PID: 3603 Comm: segctord Not tainted 6.1.0-rc2-syzkaller-00105-gb229b6ca5abb #0 Hardware name: Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 RIP: 0010:nilfs_palloc_commit_free_entry+0xe5/0x6b0 fs/nilfs2/alloc.c:608 Code: 00 00 00 00 fc ff df 80 3c 02 00 0f 85 cd 05 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 73 08 49 8d 7e 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 26 05 00 00 49 8b 46 10 be a6 00 00 00 48 c7 c7 RSP: 0018:ffffc90003dff830 EFLAGS: 00010212 RAX: dffffc0000000000 RBX: ffff88802594e218 RCX: 000000000000000d RDX: 0000000000000002 RSI: 0000000000002000 RDI: 0000000000000010 RBP: ffff888071880222 R08: 0000000000000005 R09: 000000000000003f R10: 000000000000000d R11: 0000000000000000 R12: ffff888071880158 R13: ffff88802594e220 R14: 0000000000000000 R15: 0000000000000004 FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb1c08316a8 CR3: 0000000018560000 CR4:…

Record: OESA-2024-2323
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2324 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix double list_add when enabling VMD in scalable mode

When enabling VMD and IOMMU scalable mode, the following kernel panic call trace/kernel log is shown in Eagle Stream platform (Sapphire Rapids CPU) during booting:

The following 'lspci' output shows devices '10000:80:*' are subdevices of the VMD device 0000:59:00.5:

Record: OESA-2024-2324
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2024-2325 9.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() The debugfs_create_dir() function returns error pointers. It never returns NULL. So use IS_ERR() to check it.(CVE-2023-52917)

In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NULL pointer, but that pointer is used in the next line without a check. Add a NULL pointer check and go to the error unwind if it is NULL.(CVE-2023-52918)

In the Linux kernel, the following vulnerability has been resolved:

btrfs: make sure that WRITTEN is set on all metadata blocks

We previously would call btrfs_check_leaf() if we had the check integrity code enabled, which meant that we could only run the extended leaf checks if we had WRITTEN set on the header flags.

This leaves a gap in our checking, because we could end up with corruption on disk where WRITTEN isn't set on the leaf, and then the extended leaf checks don't get run which we rely on to validate all of the item pointers to make sure we don't access memory outside of the extent buffer.

However, since 732fab95abe2 ("btrfs: check-integrity: remove CONFIG_BTRFS_FS_CHECK_INTEGRITY option") we no longer call btrfs_check_leaf() from btrfs_mark_buffer_dirty(), which means we only ever call it on blocks that are being written out, and thus have WRITTEN set, or that are being read in, which should have WRITTEN set.

Add checks to make sure we have WRITTEN set appropriately, and then make sure __btrfs_check_leaf() always does the item checking. This will protect us from file systems that have been corrupted and no longer have WRITTEN set on some of the blocks.

This was hit on a crafted image tweaking the WRITTEN bit and reported by KASAN as out-of-bound access in the eb accessors. The example is a dir item at the end of an eb.

[2.042] BTRFS warning (device loop1): bad eb member start: ptr 0x3fff start 30572544 member offset 16410 size 2 [2.040] general protection fault, probably for non-canonical address 0xe0009d1000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI [2.537] KASAN: maybe wild-memory-access in range [0x0005088000000018-0x000508800000001f] [2.729] CPU: 0 PID: 2587 Comm: mount Not tainted 6.8.2 #1 [2.729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 [2.621] RIP: 0010:btrfs_get_16+0x34b/0x6d0 [2.621] RSP: 0018:ffff88810871fab8 EFLAGS: 00000206 [2.621] RAX: 0000a11000000003 RBX: ffff888104ff8720 RCX: ffff88811b2288c0 [2.621] RDX: dffffc0000000000 RSI: ffffffff81dd8aca RDI: ffff88810871f748 [2.621] RBP: 000000000000401a R08: 0000000000000001 R09: ffffed10210e3ee9 [2.621] R10: ffff88810871f74f R11: 205d323430333737 R12: 000000000000001a [2.621] R13: 000508800000001a R14: 1ffff110210e3f5d R15: ffffffff850011e8 [2.621] FS: 00007f56ea275840(0000) GS:ffff88811b200000(0000) knlGS:0000000000000000 [2.621] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [2.621] CR2: 00007febd13b75c0 CR3: 000000010bb50000 CR4: 00000000000006f0 [2.621] Call Trace: [2.621] <TASK> [2.621] ? show_regs+0x74/0x80 [2.621] ? die_addr+0x46/0xc0 [2.621] ? exc_general_protection+0x161/0x2a0 [2.621] ? asm_exc_general_protection+0x26/0x30 [2.621] ? btrfs_get_16+0x33a/0x6d0 [2.621] ? btrfs_get_16+0x34b/0x6d0 [2.621] ? btrfs_get_16+0x33a/0x6d0 [2.621] ? __pfx_btrfs_get_16+0x10/0x10 [2.621] ? __pfx_mutex_unlock+0x10/0x10 [2.621] btrfs_match_dir_item_name+0x101/0x1a0 [2.621] btrfs_lookup_dir_item+0x1f3/0x280 [2.621] ? __pfx_btrfs_lookup_dir_item+0x10/0x10 [2.621] btrfs_get_tree+0xd25/0x1910

copy more details from report

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Fix not validating…

Record: OESA-2024-2325
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2025:6966 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:6966
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-47685 9.1

Record: UBUNTU-CVE-2024-47685
CVSS 3.1: 9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-11

OSVCLSA-2024-1731430561 No score

kernel: Fix of 29 CVEs

driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014}
memcg: fix possible use-after-free in memcg_write_event_control() {CVE-2022-48988}
ppp: fix ppp_async_encode() illegal access {CVE-2024-50035}
drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698}
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029}
tipc: guard against string buffer overrun {CVE-2024-49995}
ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883}
ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
padata: Fix possible divide-by-0 panic in padata_mt_helper() {CVE-2024-43889}
hwmon: (coretemp) Check for null before removing sysfs attrs {CVE-2022-49010}
drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error {CVE-2024-47697}
wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930}
ipv6: avoid use-after-free in ip6_fragment() {CVE-2022-48956}
netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685}
drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092}
slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889}
mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
firmware_loader: Block path traversal {CVE-2024-47742}
ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
tcp: drop the hash_32() part from the index calculation {CVE-2022-1012}
tcp: increase source port perturb table to 2^16 {CVE-2022-1012}
tcp: dynamically allocate the perturb table used by source ports {CVE-2022-1012}
net: dccp: fix kernel crash on module load {CVE-2022-1012}
net: dccp: initialize (addr,port) listening hashtable {CVE-2022-1012}
tcp: add small random increments to the source port {CVE-2022-1012}
tcp: resalt the secret every 10 seconds {CVE-2022-1012}
tcp: use different parts of the port_offset for index and offset {CVE-2022-1012}
secure_seq: use the 64 bits of the siphash for port offset calculation {CVE-2022-1012}
Revert "[ELSCVE-6395] secure_seq: use the 64 bits of the siphash for port offset calculation" {CVE-2022-1012}
tcp: add some entropy in __inet_hash_connect() {CVE-2022-1012}
tcp: change source port randomizarion at connect() time {CVE-2022-1012}
esp: limit skb_page_frag_refill use to a single page {CVE-2022-27666}
drm/vmwgfx: Fix stale file descriptors on failed usercopy {CVE-2022-22942}
drm/i915: Fix the GT fence revocation runtime PM logic {CVE-2022-0330}
PM: runtime: Add pm_runtime_get_if_active() {CVE-2022-0330}
PM-runtime: add tracepoints for usage_count changes {CVE-2022-0330}
fget: clarify and improve __fget_files() implementation {CVE-2021-4083}
proc/fd: In proc_fd_link use fget_task {CVE-2021-4083}
kcmp: In kcmp_epoll_target use fget_task {CVE-2021-4083}
file: Rename __fcheck_files to files_lookup_fd_raw {CVE-2021-4083}
bpf: In bpf_task_fd_query use fget_task {CVE-2021-4083}
fget: check that the fd still exists after getting a ref to it {CVE-2021-4083}
Revert "[ELSCVE-2732] fget: check that the fd still exists after getting a ref to it" {CVE-2021-4083}
file: Replace fcheck_files with files_lookup_fd_rcu {CVE-2021-4083}
file: Factor files_lookup_fd_locked out of fcheck_files {CVE-2021-4083}
vfs, fdtable: Add fget_task helper {CVE-2021-4083}

Record: CLSA-2024-1731430561
Updated: 2026-11-02

OSVCLSA-2024-1731431059 No score

kernel: Fix of 29 CVEs

driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014}
memcg: fix possible use-after-free in memcg_write_event_control() {CVE-2022-48988}
ppp: fix ppp_async_encode() illegal access {CVE-2024-50035}
drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698}
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029}
tipc: guard against string buffer overrun {CVE-2024-49995}
ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883}
ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
padata: Fix possible divide-by-0 panic in padata_mt_helper() {CVE-2024-43889}
hwmon: (coretemp) Check for null before removing sysfs attrs {CVE-2022-49010}
drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error {CVE-2024-47697}
wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930}
ipv6: avoid use-after-free in ip6_fragment() {CVE-2022-48956}
netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685}
drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092}
slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889}
mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
firmware_loader: Block path traversal {CVE-2024-47742}
ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
tcp: drop the hash_32() part from the index calculation {CVE-2022-1012}
tcp: increase source port perturb table to 2^16 {CVE-2022-1012}
tcp: dynamically allocate the perturb table used by source ports {CVE-2022-1012}
net: dccp: fix kernel crash on module load {CVE-2022-1012}
net: dccp: initialize (addr,port) listening hashtable {CVE-2022-1012}
tcp: add small random increments to the source port {CVE-2022-1012}
tcp: resalt the secret every 10 seconds {CVE-2022-1012}
tcp: use different parts of the port_offset for index and offset {CVE-2022-1012}
secure_seq: use the 64 bits of the siphash for port offset calculation {CVE-2022-1012}
Revert "[ELSCVE-6395] secure_seq: use the 64 bits of the siphash for port offset calculation" {CVE-2022-1012}
tcp: add some entropy in __inet_hash_connect() {CVE-2022-1012}
tcp: change source port randomizarion at connect() time {CVE-2022-1012}
esp: limit skb_page_frag_refill use to a single page {CVE-2022-27666}
drm/vmwgfx: Fix stale file descriptors on failed usercopy {CVE-2022-22942}
PM-runtime: add tracepoints for usage_count changes {CVE-2022-0330}
fget: clarify and improve __fget_files() implementation {CVE-2021-4083}
proc/fd: In proc_fd_link use fget_task {CVE-2021-4083}
kcmp: In kcmp_epoll_target use fget_task {CVE-2021-4083}
file: Rename __fcheck_files to files_lookup_fd_raw {CVE-2021-4083}
fget: check that the fd still exists after getting a ref to it {CVE-2021-4083}
Revert "[ELSCVE-2732] fget: check that the fd still exists after getting a ref to it" {CVE-2021-4083}
file: Replace fcheck_files with files_lookup_fd_rcu {CVE-2021-4083}
file: Factor files_lookup_fd_locked out of fcheck_files {CVE-2021-4083}

Record: CLSA-2024-1731431059
Updated: 2026-11-02

OSVCLSA-2024-1731431756 No score

kernel: Fix of 30 CVEs

tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889}
ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884}
mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX {CVE-2024-46871}
Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950}
Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit {CVE-2024-49950}
driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
padata: Fix possible divide-by-0 panic in padata_mt_helper() {CVE-2024-43889}
wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930}
net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014}
ppp: fix ppp_async_encode() illegal access {CVE-2024-50035}
drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698}
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029}
tipc: guard against string buffer overrun {CVE-2024-49995}
ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883}
drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error {CVE-2024-47697}
slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
net: delete "register" keyword {CVE-2024-50033}
drm/amd/display: fix double free issue during amdgpu module unload {CVE-2024-49989}
drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894}
drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969}
drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092}
drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895}
ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685}
net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change {CVE-2021-47624}

Record: CLSA-2024-1731431756
Updated: 2026-11-02

OSVCLSA-2024-1731602566 No score

Fix of 76 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-44946
- kcm: Serialise kcm_sendmsg() for the same socket.
CVE-url: https://ubuntu.com/security/CVE-2024-42292
- kobject_uevent: Fix OOB access within zap_modalias_env()
CVE-url: https://ubuntu.com/security/CVE-2024-41042
- netfilter: nf_tables: prefer nft_chain_validate
CVE-url: https://ubuntu.com/security/CVE-2024-42265
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
CVE-url: https://ubuntu.com/security/CVE-2024-50036
- net: do not delay dst_entries_add() in dst_release()
CVE-url: https://ubuntu.com/security/CVE-2024-47663
- staging: iio: frequency: ad9833: Load clock using clock framework
- staging: iio: frequency: ad9834: Validate frequency parameter value
CVE-url: https://ubuntu.com/security/CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
CVE-url: https://ubuntu.com/security/CVE-2023-52918
- media: pci: cx23885: check cx23885_vdev_init() return
CVE-url: https://ubuntu.com/security/CVE-2024-44960
- usb: gadget: core: Check for unset descriptor
CVE-url: https://ubuntu.com/security/CVE-2024-42297
- f2fs: fix to don't dirty inode for readonly filesystem
CVE-url: https://ubuntu.com/security/CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
CVE-url: https://ubuntu.com/security/CVE-2024-46676
- nfc: pn533: Add poll mod list filling check
CVE-url: https://ubuntu.com/security/CVE-2024-46761
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
CVE-url: https://ubuntu.com/security/CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
CVE-url: https://ubuntu.com/security/CVE-2024-46679
- ethtool: check device is present when getting link settings
CVE-url: https://ubuntu.com/security/CVE-2024-46721
- apparmor: fix possible NULL pointer dereference
CVE-url: https://ubuntu.com/security/CVE-2024-46685
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
CVE-url: https://ubuntu.com/security/CVE-2024-44947
- fuse: Initialize beyond-EOF page contents before setting uptodate
CVE-url: https://ubuntu.com/security/CVE-2024-46675
- usb: dwc3: core: Prevent USB core invalid event buffer address access
CVE-url: https://ubuntu.com/security/CVE-2024-43893
- serial: core: check uartclk for zero to avoid divide by zero
CVE-url: https://ubuntu.com/security/CVE-2024-45021
- memcg_write_event_control(): fix a user-triggerable oops
CVE-url: https://ubuntu.com/security/CVE-2024-46677
- gtp: fix a potential NULL pointer dereference
CVE-url: https://ubuntu.com/security/CVE-2024-43861
- net: usb: qmi_wwan: fix memory leak for not ip packets
CVE-url: https://ubuntu.com/security/CVE-2024-41063
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
CVE-url: https://ubuntu.com/security/CVE-2024-45006
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
CVE-url: https://ubuntu.com/security/CVE-2024-43853
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
CVE-url: https://ubuntu.com/security/CVE-2024-42310
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
CVE-url: https://ubuntu.com/security/CVE-2024-42311
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
CVE-url: https://ubuntu.com/security/CVE-2024-41012
- filelock: Remove locks reliably when fcntl/close race is detected
CVE-url: https://ubuntu.com/security/CVE-2024-45028
- mmc: mmc_test: Fix NULL dereference on allocation failure
CVE-url: https://ubuntu.com/security/CVE-2024-43860
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
CVE-url: https://ubuntu.com/security/CVE-2024-43914
- md/raid5: avoid BUG_ON() while continue…

Record: CLSA-2024-1731602566
Updated: 2026-11-02

OSVCLSA-2024-1731603213 No score

Fix of 76 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-44946
- kcm: Serialise kcm_sendmsg() for the same socket.
CVE-url: https://ubuntu.com/security/CVE-2024-42292
- kobject_uevent: Fix OOB access within zap_modalias_env()
CVE-url: https://ubuntu.com/security/CVE-2024-41042
- netfilter: nf_tables: prefer nft_chain_validate
CVE-url: https://ubuntu.com/security/CVE-2024-42265
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
CVE-url: https://ubuntu.com/security/CVE-2024-50036
- net: do not delay dst_entries_add() in dst_release()
CVE-url: https://ubuntu.com/security/CVE-2024-47663
- staging: iio: frequency: ad9833: Load clock using clock framework
- staging: iio: frequency: ad9834: Validate frequency parameter value
CVE-url: https://ubuntu.com/security/CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
CVE-url: https://ubuntu.com/security/CVE-2023-52918
- media: pci: cx23885: check cx23885_vdev_init() return
CVE-url: https://ubuntu.com/security/CVE-2024-44960
- usb: gadget: core: Check for unset descriptor
CVE-url: https://ubuntu.com/security/CVE-2024-42297
- f2fs: fix to don't dirty inode for readonly filesystem
CVE-url: https://ubuntu.com/security/CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
CVE-url: https://ubuntu.com/security/CVE-2024-46676
- nfc: pn533: Add poll mod list filling check
CVE-url: https://ubuntu.com/security/CVE-2024-46761
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
CVE-url: https://ubuntu.com/security/CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
CVE-url: https://ubuntu.com/security/CVE-2024-46679
- ethtool: check device is present when getting link settings
CVE-url: https://ubuntu.com/security/CVE-2024-46721
- apparmor: fix possible NULL pointer dereference
CVE-url: https://ubuntu.com/security/CVE-2024-46685
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
CVE-url: https://ubuntu.com/security/CVE-2024-44947
- fuse: Initialize beyond-EOF page contents before setting uptodate
CVE-url: https://ubuntu.com/security/CVE-2024-46675
- usb: dwc3: core: Prevent USB core invalid event buffer address access
CVE-url: https://ubuntu.com/security/CVE-2024-43893
- serial: core: check uartclk for zero to avoid divide by zero
CVE-url: https://ubuntu.com/security/CVE-2024-45021
- memcg_write_event_control(): fix a user-triggerable oops
CVE-url: https://ubuntu.com/security/CVE-2024-46677
- gtp: fix a potential NULL pointer dereference
CVE-url: https://ubuntu.com/security/CVE-2024-43861
- net: usb: qmi_wwan: fix memory leak for not ip packets
CVE-url: https://ubuntu.com/security/CVE-2024-41063
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
CVE-url: https://ubuntu.com/security/CVE-2024-45006
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
CVE-url: https://ubuntu.com/security/CVE-2024-43853
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
CVE-url: https://ubuntu.com/security/CVE-2024-42310
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
CVE-url: https://ubuntu.com/security/CVE-2024-42311
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
CVE-url: https://ubuntu.com/security/CVE-2024-41012
- filelock: Remove locks reliably when fcntl/close race is detected
CVE-url: https://ubuntu.com/security/CVE-2024-45028
- mmc: mmc_test: Fix NULL dereference on allocation failure
CVE-url: https://ubuntu.com/security/CVE-2024-43860
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
CVE-url: https://ubuntu.com/security/CVE-2024-43914
- md/raid5: avoid BUG_ON() while continue…

Record: CLSA-2024-1731603213
Updated: 2026-11-02

OSVCLSA-2024-1731605761 No score

Fix of 67 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-42265
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
CVE-url: https://ubuntu.com/security/CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
CVE-url: https://ubuntu.com/security/CVE-2023-52918
- media: pci: cx23885: check cx23885_vdev_init() return
CVE-url: https://ubuntu.com/security/CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
CVE-url: https://ubuntu.com/security/CVE-2024-46676
- nfc: pn533: Add poll mod list filling check
CVE-url: https://ubuntu.com/security/CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
CVE-url: https://ubuntu.com/security/CVE-2024-46721
- apparmor: fix possible NULL pointer dereference
CVE-url: https://ubuntu.com/security/CVE-2024-44947
- fuse: Initialize beyond-EOF page contents before setting uptodate
CVE-url: https://ubuntu.com/security/CVE-2024-46675
- usb: dwc3: core: Prevent USB core invalid event buffer address access
CVE-url: https://ubuntu.com/security/CVE-2024-43893
- serial: core: check uartclk for zero to avoid divide by zero
CVE-url: https://ubuntu.com/security/CVE-2024-45021
- memcg_write_event_control(): fix a user-triggerable oops
CVE-url: https://ubuntu.com/security/CVE-2024-41012
- filelock: Remove locks reliably when fcntl/close race is detected
CVE-url: https://ubuntu.com/security/CVE-2024-42310
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
CVE-url: https://ubuntu.com/security/CVE-2024-42311
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
CVE-url: https://ubuntu.com/security/CVE-2024-45028
- mmc: mmc_test: Fix NULL dereference on allocation failure
CVE-url: https://ubuntu.com/security/CVE-2024-43914
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
CVE-url: https://ubuntu.com/security/CVE-2024-43856
- dma: fix call order in dmam_free_coherent
CVE-url: https://ubuntu.com/security/CVE-2024-43884
- Bluetooth: MGMT: Add error handling to pair_device()
CVE-url: https://ubuntu.com/security/CVE-2024-42309
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
CVE-url: https://ubuntu.com/security/CVE-2024-50044
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
CVE-url: https://ubuntu.com/security/CVE-2024-49967
- ext4: no need to continue when the number of entries is 1
Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-49015
- net: hsr: Fix potential use-after-free
CVE-url: https://ubuntu.com/security/CVE-2024-50033
- slip: make slhc_remember() more robust against malicious packets
CVE-url: https://ubuntu.com/security/CVE-2024-47670
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()
CVE-url: https://ubuntu.com/security/CVE-2024-49950
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
CVE-url: https://ubuntu.com/security/CVE-2024-49883
- ext4: aovid use-after-free in ext4_ext_insert_extent()
Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-48960
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
CVE-url: https://ubuntu.com/security/CVE-2024-47745
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
CVE-url: https://ubuntu.com/security/CVE-2024-49860
- ACPI: sysfs: validate return type of _STR method
CVE-url: https://ubuntu.com/security/CVE-2024-49882
- ext4: fix double brelse() the buffer of the extents path
CVE-url: https://ubuntu.com/security/CVE-2024-49995
- tipc: guard against string buffer overrun
CVE-url: https://ubuntu.com/security/CVE-2024-47723 -…

Record: CLSA-2024-1731605761
Updated: 2026-11-02

OSVCLSA-2024-1731606243 No score

Fix of 67 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-42265
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
CVE-url: https://ubuntu.com/security/CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
CVE-url: https://ubuntu.com/security/CVE-2023-52918
- media: pci: cx23885: check cx23885_vdev_init() return
CVE-url: https://ubuntu.com/security/CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
CVE-url: https://ubuntu.com/security/CVE-2024-46676
- nfc: pn533: Add poll mod list filling check
CVE-url: https://ubuntu.com/security/CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
CVE-url: https://ubuntu.com/security/CVE-2024-46721
- apparmor: fix possible NULL pointer dereference
CVE-url: https://ubuntu.com/security/CVE-2024-44947
- fuse: Initialize beyond-EOF page contents before setting uptodate
CVE-url: https://ubuntu.com/security/CVE-2024-46675
- usb: dwc3: core: Prevent USB core invalid event buffer address access
CVE-url: https://ubuntu.com/security/CVE-2024-43893
- serial: core: check uartclk for zero to avoid divide by zero
CVE-url: https://ubuntu.com/security/CVE-2024-45021
- memcg_write_event_control(): fix a user-triggerable oops
CVE-url: https://ubuntu.com/security/CVE-2024-41012
- filelock: Remove locks reliably when fcntl/close race is detected
CVE-url: https://ubuntu.com/security/CVE-2024-42310
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
CVE-url: https://ubuntu.com/security/CVE-2024-42311
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
CVE-url: https://ubuntu.com/security/CVE-2024-45028
- mmc: mmc_test: Fix NULL dereference on allocation failure
CVE-url: https://ubuntu.com/security/CVE-2024-43914
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
CVE-url: https://ubuntu.com/security/CVE-2024-43856
- dma: fix call order in dmam_free_coherent
CVE-url: https://ubuntu.com/security/CVE-2024-43884
- Bluetooth: MGMT: Add error handling to pair_device()
CVE-url: https://ubuntu.com/security/CVE-2024-42309
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
CVE-url: https://ubuntu.com/security/CVE-2024-50044
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
CVE-url: https://ubuntu.com/security/CVE-2024-49967
- ext4: no need to continue when the number of entries is 1
Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-49015
- net: hsr: Fix potential use-after-free
CVE-url: https://ubuntu.com/security/CVE-2024-50033
- slip: make slhc_remember() more robust against malicious packets
CVE-url: https://ubuntu.com/security/CVE-2024-47670
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()
CVE-url: https://ubuntu.com/security/CVE-2024-49950
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
CVE-url: https://ubuntu.com/security/CVE-2024-49883
- ext4: aovid use-after-free in ext4_ext_insert_extent()
Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-48960
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
CVE-url: https://ubuntu.com/security/CVE-2024-47745
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
CVE-url: https://ubuntu.com/security/CVE-2024-49860
- ACPI: sysfs: validate return type of _STR method
CVE-url: https://ubuntu.com/security/CVE-2024-49882
- ext4: fix double brelse() the buffer of the extents path
CVE-url: https://ubuntu.com/security/CVE-2024-49995
- tipc: guard against string buffer overrun
CVE-url: https://ubuntu.com/security/CVE-2024-47723 -…

Record: CLSA-2024-1731606243
Updated: 2026-11-02

OSVCLSA-2024-1731933167 No score

kernel: Fix of 36 CVEs

smb: client: fix use-after-free in smb2_query_info_compound() {CVE-2023-52751}
smb: client: prevent new fids from being removed by laundromat {CVE-2023-52751}
cifs: fix dentry lookups in directory handle cache {CVE-2023-52751}
uprobe: avoid out-of-bounds memory access of fetching args {CVE-2024-50067}
net: do not delay dst_entries_add() in dst_release() {CVE-2024-50036}
smb: client: fix UAF in async decryption {CVE-2024-50047}
smb3: rename encryption/decryption TFMs
mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
drm/amd/display: fix double free issue during amdgpu module unload {CVE-2024-49989}
ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950}
Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit {CVE-2024-49950}
mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858}
of: fdt: fix off-by-one error in unflatten_dt_nodes() {CVE-2022-48672}
filelock: fix potential use-after-free in posix_lock_inode {CVE-2024-41049}
locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock {CVE-2024-41049}
drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092}
ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895}
slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969}
drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894}
ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883}
ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
tipc: guard against string buffer overrun {CVE-2024-49995}
drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698}
firmware_loader: Block path traversal {CVE-2024-47742}
ppp: fix ppp_async_encode() illegal access {CVE-2024-50035}
netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685}
ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884}
drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX {CVE-2024-46871}
ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889}
wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930}
net: do not leave a dangling sk pointer, when socket creation fails {CVE-2024-40954}
net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
drm/amdgpu: Validate TA binary size {CVE-2024-44977}

Record: CLSA-2024-1731933167
Updated: 2026-11-02

OSV No score

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1)

Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put()

Record: CVE-2024-47685
Updated: 2026-11-02

OSVLSN-0115-1 No score

Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed overflow check in mi_enum_attr())(CVE-2024-27407).

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in async decryption Doing an async decryption (large read) crashes with a slab-use-after-free way down in the crypto API.

In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up The issue was caused by dput(upper) being called before ovl_dentry_update_reval(), while upper->d_flags was still accessed in ovl_dentry_remote().

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_cep) being called, new_cep will be freed, and the following dereference will cause a UAF problem.

Record: LSN-0115-1
Updated: 2026-11-02

OSVMGASA-2024-0344 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.58 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2024-0344
Updated: 2026-11-02

OSVMGASA-2024-0345 No score

Updated kernel, kmod-xtables-addons. kmod-virtualbox, kernel-firmware & kernel-firmware-nonfree radeon-firmware packages fix security vulnerabilities

Upstream kernel version 6.6.58 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2024-0345
Updated: 2026-11-02

OSVopenSUSE-SU-2024:14500-1 No score

kernel-devel-6.11.8-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.11.8-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:14500-1
Updated: 2026-11-02

OSVopenSUSE-SU-2025:14705-1 No score

kernel-devel-longterm-6.12.11-1.1 on GA media

These are all security issues fixed in the kernel-devel-longterm-6.12.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2025:14705-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3983-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
CVE-2022-48957: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (bsc#1231973).
CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
CVE-2022-48980: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (bsc#1232233).
CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070 git-fix prerequisity).
CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
CVE-2022-49017: tipc: re-fetch skb cb after tipc_msg_validate (bsc#1232004).
CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005 stable-fixes).
CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837 stable-fixes).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46716: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (bsc#1230715).
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46809: drm/amd/display: Check BIOS images before it is used (bsc#1231148).
CVE-2024-46811: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box (bsc#1231179).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46814: drm/amd/display: Check msg_id before processing transcation (bsc#1231193).
CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231195).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46817: drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (bsc#1231200).
CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231203).
CVE-2024-46828: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1231114).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).
CVE-2024-46848: perf/x86/intel: Limit the period on Haswell (bsc#1231072).
CVE-2024-46849: ASoC: meson: axg-card: fix 'use-after-free' (bsc#1231073).
CVE-2024-47660: fsnotify: clear…

Record: SUSE-SU-2024:3983-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3984-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46828: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1231114).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).
CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).
CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).
CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).
CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).
CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).
CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).
CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).
CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).
CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).
CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).
CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).
CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).
CVE-2024-47704: drm/amd/display: Check link_res->hpo_dp_link_enc before using it (bsc#1231944).
CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).
CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231942).
CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).
CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).
CVE-2024-47727: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116).
CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).
CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).
CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).
CVE-2024-47741:…

Record: SUSE-SU-2024:3984-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3985-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
CVE-2022-48957: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (bsc#1231973).
CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
CVE-2022-48980: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (bsc#1232233).
CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070).
CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
CVE-2022-49017: tipc: re-fetch skb cb after tipc_msg_validate (bsc#1232004).
CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005).
CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46716: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (bsc#1230715).
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46809: drm/amd/display: Check BIOS images before it is used (bsc#1231148).
CVE-2024-46811: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box (bsc#1231179).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46814: drm/amd/display: Check msg_id before processing transcation (bsc#1231193).
CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231195).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46817: drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (bsc#1231200).
CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231203).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46828: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1231114).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs: do not…

Record: SUSE-SU-2024:3985-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3986-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46828: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1231114).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).
CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).
CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).
CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).
CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).
CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).
CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).
CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).
CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).
CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).
CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).
CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).
CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).
CVE-2024-47704: drm/amd/display: Check link_res->hpo_dp_link_enc before using it (bsc#1231944).
CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).
CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231942).
CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).
CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).
CVE-2024-47727: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116).
CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).
CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).
CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).
CVE-2024-47741:…

Record: SUSE-SU-2024:3986-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4100-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The Linux Enterprise 12 SP5 kernel turned LTSS (Extended Security)

The following security bugs were fixed:

CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
CVE-2021-47163: kABI fix for tipc: wait and exit until all work queues are done (bsc#1221980).
CVE-2021-47612: nfc: fix segfault in nfc_genl_dump_devices_done (bsc#1226585).
CVE-2022-48809: net: fix a memleak when uncloning an skb dst and its metadata (bsc#1227947).
CVE-2022-48951: ASoC: ops: Correct bounds check for second channel on SX controls (bsc#1231929).
CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
CVE-2022-48967: NFC: nci: Bounds check struct nfc_target arrays (bsc#1232304).
CVE-2022-48971: Bluetooth: Fix not cleanup led when bt_init fails (bsc#1232037).
CVE-2022-48972: mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (bsc#1232025).
CVE-2022-48973: gpio: amd8111: Fix PCI device reference count leak (bsc#1232039).
CVE-2022-48978: HID: core: fix shift-out-of-bounds in hid_report_raw_event (bsc#1232038).
CVE-2022-48991: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (bsc#1232070).
CVE-2022-48992: ASoC: soc-pcm: Add NULL check in BE reparenting (bsc#1232071).
CVE-2022-49000: iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (bsc#1232123).
CVE-2022-49002: iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (bsc#1232133).
CVE-2022-49010: hwmon: (coretemp) Check for null before removing sysfs attrs (bsc#1232172).
CVE-2022-49011: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (bsc#1232006).
CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1231890).
CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
CVE-2022-49021: net: phy: fix null-ptr-deref while probe() failed (bsc#1231939).
CVE-2022-49026: e100: Fix possible use after free in e100_xmit_prepare (bsc#1231997).
CVE-2022-49027: iavf: Fix error handling in iavf_init_module() (bsc#1232007).
CVE-2022-49028: ixgbevf: Fix resource leak in ixgbevf_init_module() (bsc#1231996).
CVE-2022-49029: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (bsc#1231995).
CVE-2023-52898: xhci: Fix null pointer dereference when host dies (bsc#1229568).
CVE-2023-52918: media: pci: cx23885: check cx23885_vdev_init() return (bsc#1232047).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42114: netlink: extend policy range validation (bsc#1228564 prerequisite).
CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005 stable-fixes).
CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837 stable-fixes).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-46724: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (bsc#1230725).
CVE-2024-46755: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (bsc#1230802). -…

Record: SUSE-SU-2024:4100-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4318-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free…

Record: SUSE-SU-2024:4318-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4364-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
CVE-2022-48957: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (bsc#1231973).
CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
CVE-2022-48980: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (bsc#1232233).
CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070).
CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
CVE-2022-49017: tipc: re-fetch skb cb after tipc_msg_validate (bsc#1232004).
CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005).
CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837).
CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46716: dmaengine: altera-msgdma:…

Record: SUSE-SU-2024:4364-1
Updated: 2026-11-02

OSVSUSE-SU-2024:4387-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).
CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added…

Record: SUSE-SU-2024:4387-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0034-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The Linux Enterprise 12 SP5 kernel turned LTSS (Extended Security)

The following security bugs were fixed:

CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
CVE-2021-47163: kABI fix for tipc: wait and exit until all work queues are done (bsc#1221980).
CVE-2021-47612: nfc: fix segfault in nfc_genl_dump_devices_done (bsc#1226585).
CVE-2022-48809: net: fix a memleak when uncloning an skb dst and its metadata (bsc#1227947).
CVE-2022-48951: ASoC: ops: Correct bounds check for second channel on SX controls (bsc#1231929).
CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
CVE-2022-48967: NFC: nci: Bounds check struct nfc_target arrays (bsc#1232304).
CVE-2022-48971: Bluetooth: Fix not cleanup led when bt_init fails (bsc#1232037).
CVE-2022-48972: mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (bsc#1232025).
CVE-2022-48973: gpio: amd8111: Fix PCI device reference count leak (bsc#1232039).
CVE-2022-48978: HID: core: fix shift-out-of-bounds in hid_report_raw_event (bsc#1232038).
CVE-2022-48991: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (bsc#1232070).
CVE-2022-48992: ASoC: soc-pcm: Add NULL check in BE reparenting (bsc#1232071).
CVE-2022-49000: iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (bsc#1232123).
CVE-2022-49002: iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (bsc#1232133).
CVE-2022-49010: hwmon: (coretemp) Check for null before removing sysfs attrs (bsc#1232172).
CVE-2022-49011: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (bsc#1232006).
CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1231890).
CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
CVE-2022-49021: net: phy: fix null-ptr-deref while probe() failed (bsc#1231939).
CVE-2022-49026: e100: Fix possible use after free in e100_xmit_prepare (bsc#1231997).
CVE-2022-49027: iavf: Fix error handling in iavf_init_module() (bsc#1232007).
CVE-2022-49028: ixgbevf: Fix resource leak in ixgbevf_init_module() (bsc#1231996).
CVE-2022-49029: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (bsc#1231995).
CVE-2023-52898: xhci: Fix null pointer dereference when host dies (bsc#1229568).
CVE-2023-52918: media: pci: cx23885: check cx23885_vdev_init() return (bsc#1232047).
CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42114: netlink: extend policy range validation (bsc#1228564 prerequisite).
CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005 stable-fixes).
CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837 stable-fixes).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-46724: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (bsc#1230725).
CVE-2024-46755: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (bsc#1230802). -…

Record: SUSE-SU-2025:0034-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20163-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs:…

Record: SUSE-SU-2025:20163-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20164-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs: do…

Record: SUSE-SU-2025:20164-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20246-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs:…

Record: SUSE-SU-2025:20246-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20247-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
CVE-2024-46841: btrfs: do…

Record: SUSE-SU-2025:20247-1
Updated: 2026-11-02

OSVUSN-7166-1 No score

linux, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
TPM device driver;
Clock framework and drivers;
Buffer Sharing and Synchronization framework;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Input Device core drivers;
Mailbox framework;
Media drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
PCI subsystem;
x86 platform drivers;
S/390 drivers;
SCSI subsystem;
SPI subsystem;
Thermal drivers;
USB Device Class drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
9P distributed file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
Network file system (NFS) superblock;
Bluetooth subsystem;
Network traffic control;
Network sockets;
TCP network protocol;
BPF subsystem;
Perf events;
Kernel thread helper (kthread);
Padata parallel execution mechanism;
Arbitrary resource management;
Static call mechanism;
Tracing infrastructure;
Memory management;
Ethernet bridge;
CAN network layer;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Netlink;
SCTP protocol;
TIPC protocol;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
AudioScience HPI driver;
Amlogic Meson SoC drivers;
USB sound devices; (CVE-2024-49944, CVE-2024-49907, CVE-2024-50062, CVE-2024-36893, CVE-2024-49985, CVE-2024-49903, CVE-2024-49886, CVE-2024-50180, CVE-2024-47757, CVE-2024-49938, CVE-2024-49902, CVE-2024-47709, CVE-2024-49884, CVE-2024-49967, CVE-2024-49977, CVE-2024-47734, CVE-2024-49954, CVE-2024-49963, CVE-2024-47747, CVE-2024-50008, CVE-2024-47696, CVE-2024-50038, CVE-2024-46695, CVE-2024-47705, CVE-2024-49957, CVE-2024-38538, CVE-2024-50019, CVE-2024-38544, CVE-2024-50003, CVE-2024-50095, CVE-2024-50000, CVE-2024-49981, CVE-2024-49863, CVE-2024-47710, CVE-2024-49983, CVE-2024-26947, CVE-2024-46852, CVE-2024-49871, CVE-2024-49936, CVE-2024-47720, CVE-2024-49881, CVE-2024-47672, CVE-2024-50040, CVE-2024-49997, CVE-2024-50044, CVE-2023-52532, CVE-2024-47740, CVE-2024-44942, CVE-2024-49948, CVE-2023-52621, CVE-2024-49959, CVE-2024-47718, CVE-2024-50188, CVE-2024-47699, CVE-2024-47756, CVE-2024-47723, CVE-2024-46849, CVE-2024-50035, CVE-2024-50189, CVE-2024-47684, CVE-2024-49900, CVE-2024-50024, CVE-2024-49851, CVE-2024-49860, CVE-2024-49924, CVE-2024-49946, CVE-2024-44940, CVE-2023-52904, CVE-2024-47679, CVE-2024-47748, CVE-2023-52917, CVE-2024-47735, CVE-2024-46858, CVE-2024-35904, CVE-2024-47673, CVE-2024-49878, CVE-2024-47739, CVE-2024-49973, CVE-2024-49935, CVE-2024-49875, CVE-2024-49896, CVE-2024-47690, CVE-2024-50007, CVE-2024-49933, CVE-2024-49958, CVE-2024-49913, CVE-2024-49883, CVE-2024-47742, CVE-2024-41016, CVE-2024-50002, CVE-2024-49969, CVE-2024-46853, CVE-2024-50031, CVE-2024-47698, CVE-2024-47749, CVE-2024-50059, CVE-2024-49966, CVE-2024-50093, CVE-2024-27072, CVE-2024-50186, CVE-2024-49895, CVE-2024-38632, CVE-2024-49995, CVE-2024-38545, CVE-2024-38667, CVE-2024-36968, CVE-2024-49952, CVE-2024-50001, CVE-2024-47697, CVE-2024-50045,…

Record: USN-7166-1
Updated: 2026-11-02

OSVUSN-7166-2 No score

linux-aws, linux-aws-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
TPM device driver;
Clock framework and drivers;
Buffer Sharing and Synchronization framework;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Input Device core drivers;
Mailbox framework;
Media drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
PCI subsystem;
x86 platform drivers;
S/390 drivers;
SCSI subsystem;
SPI subsystem;
Thermal drivers;
USB Device Class drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
9P distributed file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
Network file system (NFS) superblock;
Bluetooth subsystem;
Network traffic control;
Network sockets;
TCP network protocol;
BPF subsystem;
Perf events;
Kernel thread helper (kthread);
Padata parallel execution mechanism;
Arbitrary resource management;
Static call mechanism;
Tracing infrastructure;
Memory management;
Ethernet bridge;
CAN network layer;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Netlink;
SCTP protocol;
TIPC protocol;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
AudioScience HPI driver;
Amlogic Meson SoC drivers;
USB sound devices; (CVE-2024-49944, CVE-2024-49907, CVE-2024-50062, CVE-2024-36893, CVE-2024-49985, CVE-2024-49903, CVE-2024-49886, CVE-2024-50180, CVE-2024-47757, CVE-2024-49938, CVE-2024-49902, CVE-2024-47709, CVE-2024-49884, CVE-2024-49967, CVE-2024-49977, CVE-2024-47734, CVE-2024-49954, CVE-2024-49963, CVE-2024-47747, CVE-2024-50008, CVE-2024-47696, CVE-2024-50038, CVE-2024-46695, CVE-2024-47705, CVE-2024-49957, CVE-2024-38538, CVE-2024-50019, CVE-2024-38544, CVE-2024-50003, CVE-2024-50095, CVE-2024-50000, CVE-2024-49981, CVE-2024-49863, CVE-2024-47710, CVE-2024-49983, CVE-2024-26947, CVE-2024-46852, CVE-2024-49871, CVE-2024-49936, CVE-2024-47720, CVE-2024-49881, CVE-2024-47672, CVE-2024-50040, CVE-2024-49997, CVE-2024-50044, CVE-2023-52532, CVE-2024-47740, CVE-2024-44942, CVE-2024-49948, CVE-2023-52621, CVE-2024-49959, CVE-2024-47718, CVE-2024-50188, CVE-2024-47699, CVE-2024-47756, CVE-2024-47723, CVE-2024-46849, CVE-2024-50035, CVE-2024-50189, CVE-2024-47684, CVE-2024-49900, CVE-2024-50024, CVE-2024-49851, CVE-2024-49860, CVE-2024-49924, CVE-2024-49946, CVE-2024-44940, CVE-2023-52904, CVE-2024-47679, CVE-2024-47748, CVE-2023-52917, CVE-2024-47735, CVE-2024-46858, CVE-2024-35904, CVE-2024-47673, CVE-2024-49878, CVE-2024-47739, CVE-2024-49973, CVE-2024-49935, CVE-2024-49875, CVE-2024-49896, CVE-2024-47690, CVE-2024-50007, CVE-2024-49933, CVE-2024-49958, CVE-2024-49913, CVE-2024-49883, CVE-2024-47742, CVE-2024-41016, CVE-2024-50002, CVE-2024-49969, CVE-2024-46853, CVE-2024-50031, CVE-2024-47698, CVE-2024-47749, CVE-2024-50059, CVE-2024-49966, CVE-2024-50093, CVE-2024-27072, CVE-2024-50186, CVE-2024-49895, CVE-2024-38632, CVE-2024-49995, CVE-2024-38545, CVE-2024-38667, CVE-2024-36968, CVE-2024-49952, CVE-2024-50001, CVE-2024-47697, CVE-2024-50045,…

Record: USN-7166-2
Updated: 2026-11-02

OSVUSN-7166-3 No score

linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
TPM device driver;
Clock framework and drivers;
Buffer Sharing and Synchronization framework;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Input Device core drivers;
Mailbox framework;
Media drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
PCI subsystem;
x86 platform drivers;
S/390 drivers;
SCSI subsystem;
SPI subsystem;
Thermal drivers;
USB Device Class drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
9P distributed file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
Network file system (NFS) superblock;
Bluetooth subsystem;
Network traffic control;
Network sockets;
TCP network protocol;
BPF subsystem;
Perf events;
Kernel thread helper (kthread);
Padata parallel execution mechanism;
Arbitrary resource management;
Static call mechanism;
Tracing infrastructure;
Memory management;
Ethernet bridge;
CAN network layer;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Netlink;
SCTP protocol;
TIPC protocol;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
AudioScience HPI driver;
Amlogic Meson SoC drivers;
USB sound devices; (CVE-2024-49944, CVE-2024-49907, CVE-2024-50062, CVE-2024-36893, CVE-2024-49985, CVE-2024-49903, CVE-2024-49886, CVE-2024-50180, CVE-2024-47757, CVE-2024-49938, CVE-2024-49902, CVE-2024-47709, CVE-2024-49884, CVE-2024-49967, CVE-2024-49977, CVE-2024-47734, CVE-2024-49954, CVE-2024-49963, CVE-2024-47747, CVE-2024-50008, CVE-2024-47696, CVE-2024-50038, CVE-2024-46695, CVE-2024-47705, CVE-2024-49957, CVE-2024-38538, CVE-2024-50019, CVE-2024-38544, CVE-2024-50003, CVE-2024-50095, CVE-2024-50000, CVE-2024-49981, CVE-2024-49863, CVE-2024-47710, CVE-2024-49983, CVE-2024-26947, CVE-2024-46852, CVE-2024-49871, CVE-2024-49936, CVE-2024-47720, CVE-2024-49881, CVE-2024-47672, CVE-2024-50040, CVE-2024-49997, CVE-2024-50044, CVE-2023-52532, CVE-2024-47740, CVE-2024-44942, CVE-2024-49948, CVE-2023-52621, CVE-2024-49959, CVE-2024-47718, CVE-2024-50188, CVE-2024-47699, CVE-2024-47756, CVE-2024-47723, CVE-2024-46849, CVE-2024-50035, CVE-2024-50189, CVE-2024-47684, CVE-2024-49900, CVE-2024-50024, CVE-2024-49851, CVE-2024-49860, CVE-2024-49924, CVE-2024-49946, CVE-2024-44940, CVE-2023-52904, CVE-2024-47679, CVE-2024-47748, CVE-2023-52917, CVE-2024-47735, CVE-2024-46858, CVE-2024-35904, CVE-2024-47673, CVE-2024-49878, CVE-2024-47739, CVE-2024-49973, CVE-2024-49935, CVE-2024-49875, CVE-2024-49896, CVE-2024-47690, CVE-2024-50007, CVE-2024-49933, CVE-2024-49958, CVE-2024-49913, CVE-2024-49883, CVE-2024-47742, CVE-2024-41016, CVE-2024-50002, CVE-2024-49969, CVE-2024-46853, CVE-2024-50031, CVE-2024-47698, CVE-2024-47749, CVE-2024-50059, CVE-2024-49966, CVE-2024-50093, CVE-2024-27072, CVE-2024-50186, CVE-2024-49895, CVE-2024-38632, CVE-2024-49995, CVE-2024-38545, CVE-2024-38667, CVE-2024-36968, CVE-2024-49952, CVE-2024-50001, CVE-2024-47697, CVE-2024-50045,…

Record: USN-7166-3
Updated: 2026-11-02

OSVUSN-7166-4 No score

linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
TPM device driver;
Clock framework and drivers;
Buffer Sharing and Synchronization framework;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Input Device core drivers;
Mailbox framework;
Media drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
PCI subsystem;
x86 platform drivers;
S/390 drivers;
SCSI subsystem;
SPI subsystem;
Thermal drivers;
USB Device Class drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
9P distributed file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
Network file system (NFS) superblock;
Bluetooth subsystem;
Network traffic control;
Network sockets;
TCP network protocol;
BPF subsystem;
Perf events;
Kernel thread helper (kthread);
Padata parallel execution mechanism;
Arbitrary resource management;
Static call mechanism;
Tracing infrastructure;
Memory management;
Ethernet bridge;
CAN network layer;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Netlink;
SCTP protocol;
TIPC protocol;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
AudioScience HPI driver;
Amlogic Meson SoC drivers;
USB sound devices; (CVE-2024-49944, CVE-2024-49907, CVE-2024-50062, CVE-2024-36893, CVE-2024-49985, CVE-2024-49903, CVE-2024-49886, CVE-2024-50180, CVE-2024-47757, CVE-2024-49938, CVE-2024-49902, CVE-2024-47709, CVE-2024-49884, CVE-2024-49967, CVE-2024-49977, CVE-2024-47734, CVE-2024-49954, CVE-2024-49963, CVE-2024-47747, CVE-2024-50008, CVE-2024-47696, CVE-2024-50038, CVE-2024-46695, CVE-2024-47705, CVE-2024-49957, CVE-2024-38538, CVE-2024-50019, CVE-2024-38544, CVE-2024-50003, CVE-2024-50095, CVE-2024-50000, CVE-2024-49981, CVE-2024-49863, CVE-2024-47710, CVE-2024-49983, CVE-2024-26947, CVE-2024-46852, CVE-2024-49871, CVE-2024-49936, CVE-2024-47720, CVE-2024-49881, CVE-2024-47672, CVE-2024-50040, CVE-2024-49997, CVE-2024-50044, CVE-2023-52532, CVE-2024-47740, CVE-2024-44942, CVE-2024-49948, CVE-2023-52621, CVE-2024-49959, CVE-2024-47718, CVE-2024-50188, CVE-2024-47699, CVE-2024-47756, CVE-2024-47723, CVE-2024-46849, CVE-2024-50035, CVE-2024-50189, CVE-2024-47684, CVE-2024-49900, CVE-2024-50024, CVE-2024-49851, CVE-2024-49860, CVE-2024-49924, CVE-2024-49946, CVE-2024-44940, CVE-2023-52904, CVE-2024-47679, CVE-2024-47748, CVE-2023-52917, CVE-2024-47735, CVE-2024-46858, CVE-2024-35904, CVE-2024-47673, CVE-2024-49878, CVE-2024-47739, CVE-2024-49973, CVE-2024-49935, CVE-2024-49875, CVE-2024-49896, CVE-2024-47690, CVE-2024-50007, CVE-2024-49933, CVE-2024-49958, CVE-2024-49913, CVE-2024-49883, CVE-2024-47742, CVE-2024-41016, CVE-2024-50002, CVE-2024-49969, CVE-2024-46853, CVE-2024-50031, CVE-2024-47698, CVE-2024-47749, CVE-2024-50059, CVE-2024-49966, CVE-2024-50093, CVE-2024-27072, CVE-2024-50186, CVE-2024-49895, CVE-2024-38632, CVE-2024-49995, CVE-2024-38545, CVE-2024-38667, CVE-2024-36968, CVE-2024-49952, CVE-2024-50001, CVE-2024-47697, CVE-2024-50045,…

Record: USN-7166-4
Updated: 2026-11-02

OSVUSN-7186-1 No score

linux-intel-iotg vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-12351)

Andy Nguyen discovered that the Bluetooth A2MP implementation in the Linux kernel did not properly initialize memory in some situations. A physically proximate remote attacker could use this to expose sensitive information (kernel memory). (CVE-2020-12352)

Andy Nguyen discovered that the Bluetooth HCI event packet parser in the Linux kernel did not properly handle event advertisements of certain sizes, leading to a heap-based buffer overflow. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2020-24490)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
TPM device driver;
Clock framework and drivers;
Buffer Sharing and Synchronization framework;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Input Device core drivers;
Mailbox framework;
Media drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
PCI subsystem;
x86 platform drivers;
S/390 drivers;
SCSI subsystem;
SPI subsystem;
Thermal drivers;
USB Device Class drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
9P distributed file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
SMB network file system;
Network file system (NFS) superblock;
Bluetooth subsystem;
Network traffic control;
Network sockets;
TCP network protocol;
BPF subsystem;
Perf events;
Kernel thread helper (kthread);
Padata parallel execution mechanism;
Arbitrary resource management;
Static call mechanism;
Tracing infrastructure;
Memory management;
Amateur Radio drivers;
Ethernet bridge;
CAN network layer;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Netlink;
SCTP protocol;
TIPC protocol;
VMware vSockets driver;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
AudioScience HPI driver;
Amlogic Meson SoC drivers;
USB sound devices; (CVE-2024-47720, CVE-2023-52904, CVE-2024-49907, CVE-2024-50049, CVE-2024-38667, CVE-2024-47747, CVE-2024-50180, CVE-2024-47756, CVE-2024-50015, CVE-2024-49983, CVE-2024-49981, CVE-2024-38538, CVE-2024-47735, CVE-2024-50019, CVE-2024-49955, CVE-2024-38545, CVE-2024-49902, CVE-2024-46849, CVE-2024-49863, CVE-2024-49944, CVE-2024-50189, CVE-2024-49927, CVE-2024-50033, CVE-2024-50045, CVE-2024-49977, CVE-2024-35965, CVE-2024-42158, CVE-2024-49913, CVE-2024-50038, CVE-2024-49883, CVE-2024-38553, CVE-2024-49868, CVE-2024-50264, CVE-2024-46855, CVE-2024-50188, CVE-2024-49952, CVE-2024-47718, CVE-2024-50095, CVE-2024-49936, CVE-2024-47734, CVE-2024-47713, CVE-2024-47723, CVE-2024-49886, CVE-2024-50044, CVE-2024-49985, CVE-2024-49973, CVE-2024-49895, CVE-2024-47693, CVE-2024-46858, CVE-2024-50003, CVE-2024-39463,…

Record: USN-7186-1
Updated: 2026-11-02

OSVUSN-7186-2 No score

linux-azure, linux-intel-iotg-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
TPM device driver;
Clock framework and drivers;
Buffer Sharing and Synchronization framework;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Input Device core drivers;
Mailbox framework;
Media drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
PCI subsystem;
x86 platform drivers;
S/390 drivers;
SCSI subsystem;
SPI subsystem;
Thermal drivers;
USB Device Class drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
9P distributed file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
SMB network file system;
Network file system (NFS) superblock;
Bluetooth subsystem;
Network traffic control;
Network sockets;
TCP network protocol;
BPF subsystem;
Perf events;
Kernel thread helper (kthread);
Padata parallel execution mechanism;
Arbitrary resource management;
Static call mechanism;
Tracing infrastructure;
Memory management;
Amateur Radio drivers;
Ethernet bridge;
CAN network layer;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
Netlink;
SCTP protocol;
TIPC protocol;
VMware vSockets driver;
SELinux security module;
Simplified Mandatory Access Control Kernel framework;
AudioScience HPI driver;
Amlogic Meson SoC drivers;
USB sound devices; (CVE-2024-47720, CVE-2023-52904, CVE-2024-49907, CVE-2024-50049, CVE-2024-38667, CVE-2024-47747, CVE-2024-50180, CVE-2024-47756, CVE-2024-50015, CVE-2024-49983, CVE-2024-49981, CVE-2024-38538, CVE-2024-47735, CVE-2024-50019, CVE-2024-49955, CVE-2024-38545, CVE-2024-49902, CVE-2024-46849, CVE-2024-49863, CVE-2024-49944, CVE-2024-50189, CVE-2024-49927, CVE-2024-50033, CVE-2024-50045, CVE-2024-49977, CVE-2024-35965, CVE-2024-42158, CVE-2024-49913, CVE-2024-50038, CVE-2024-49883, CVE-2024-38553, CVE-2024-49868, CVE-2024-50264, CVE-2024-46855, CVE-2024-50188, CVE-2024-49952, CVE-2024-47718, CVE-2024-50095, CVE-2024-49936, CVE-2024-47734, CVE-2024-47713, CVE-2024-47723, CVE-2024-49886, CVE-2024-50044, CVE-2024-49985, CVE-2024-49973, CVE-2024-49895, CVE-2024-47693, CVE-2024-46858, CVE-2024-50003, CVE-2024-39463,…

Record: USN-7186-2
Updated: 2026-11-02

OSVUSN-7194-1 No score

linux-azure-5.15 vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain SMB messages, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-6610)

Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential Computing framework in the Linux kernel for x86 platforms did not properly handle 32-bit emulation on TDX and SEV. An attacker with access to the VMM could use this to cause a denial of service (guest crash) or possibly execute arbitrary code. (CVE-2024-25744)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
Null block device driver;
TPM device driver;
Character device driver;
Clock framework and drivers;
Buffer Sharing and Synchronization framework;
ARM SCMI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MMC subsystem;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
Virtio pmem driver;
NVME drivers;
Device tree and open firmware driver;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
Userspace I/O drivers;
USB Device Class drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
9P distributed file system;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file…

Record: USN-7194-1
Updated: 2026-11-02

OSVUSN-7293-1 No score

linux, linux-hwe-5.4 vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
TPM device driver;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
Network drivers;
NTB driver;
Virtio pmem driver;
Parport drivers;
PCI subsystem;
SPI subsystem;
Direct Digital Synthesis drivers;
USB Device Class drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
Framebuffer layer;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
File systems infrastructure;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
SMB network file system;
Network traffic control;
Network sockets;
TCP network protocol;
BPF subsystem;
Perf events;
Arbitrary resource management;
Timer substystem drivers;
Tracing infrastructure;
Closures library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Netfilter;
Netlink;
SCTP protocol;
TIPC protocol;
Wireless networking;
XFRM subsystem;
Key management;
FireWire sound drivers;
AudioScience HPI driver;
Amlogic Meson SoC drivers;
KVM core; (CVE-2024-50184, CVE-2024-47706, CVE-2024-49962, CVE-2024-35887, CVE-2024-53101, CVE-2024-50199, CVE-2024-47709, CVE-2024-50074, CVE-2024-41066, CVE-2024-42252, CVE-2024-43863, CVE-2024-47685, CVE-2024-47756, CVE-2024-50282, CVE-2024-50143, CVE-2024-50116, CVE-2024-47699, CVE-2024-47698, CVE-2024-50301, CVE-2024-47723, CVE-2024-50296, CVE-2024-50007, CVE-2024-49952, CVE-2024-50233, CVE-2023-52458, CVE-2024-53063, CVE-2024-49975, CVE-2024-50099, CVE-2024-47742, CVE-2024-50033, CVE-2024-50218, CVE-2024-50096, CVE-2024-49981, CVE-2024-40911, CVE-2024-47697, CVE-2024-49894, CVE-2024-49955, CVE-2024-53104, CVE-2024-49963, CVE-2024-49883, CVE-2024-47710, CVE-2024-49959, CVE-2024-49948, CVE-2024-50302, CVE-2024-49867, CVE-2024-50234, CVE-2024-49902, CVE-2024-50006, CVE-2024-47672, CVE-2024-50202, CVE-2024-49851, CVE-2024-35896, CVE-2024-50150, CVE-2024-53061, CVE-2024-46854, CVE-2024-50279, CVE-2024-50278, CVE-2024-50180, CVE-2024-50148, CVE-2024-50194, CVE-2024-50008, CVE-2024-47740, CVE-2024-49938, CVE-2024-46853, CVE-2024-50134, CVE-2024-44931, CVE-2024-46849, CVE-2024-49973, CVE-2024-50142, CVE-2024-49879, CVE-2024-50269, CVE-2024-50230, CVE-2024-49896, CVE-2024-49985, CVE-2024-50151, CVE-2024-40965, CVE-2024-50251, CVE-2024-49995, CVE-2024-47713, CVE-2023-52917, CVE-2024-50205, CVE-2024-49900, CVE-2024-49877, CVE-2024-47679, CVE-2024-50040, CVE-2024-47701, CVE-2024-50168, CVE-2024-49882, CVE-2024-50059, CVE-2024-49958, CVE-2024-50171, CVE-2021-47469, CVE-2024-50024, CVE-2024-47749, CVE-2024-50236, CVE-2024-50127, CVE-2024-50290, CVE-2024-47692, CVE-2024-50167, CVE-2024-49944, CVE-2024-50262, CVE-2024-47674, CVE-2024-49957, CVE-2024-50237, CVE-2024-47712, CVE-2024-49949, CVE-2024-40953, CVE-2024-50267, CVE-2024-53059, CVE-2024-49966, CVE-2024-47737, CVE-2024-49868, CVE-2024-50179, CVE-2024-50035, CVE-2024-49997, CVE-2024-50044, CVE-2024-49903, CVE-2024-46731, CVE-2024-49965, CVE-2024-50287,…

Record: USN-7293-1
Updated: 2026-11-02

OSVUSN-7294-1 No score

linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-ibm-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
TPM device driver;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
Network drivers;
NTB driver;
Virtio pmem driver;
Parport drivers;
PCI subsystem;
SPI subsystem;
Direct Digital Synthesis drivers;
USB Device Class drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
Framebuffer layer;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
File systems infrastructure;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
SMB network file system;
Network traffic control;
Network sockets;
TCP network protocol;
BPF subsystem;
Perf events;
Arbitrary resource management;
Timer substystem drivers;
Tracing infrastructure;
Closures library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Netfilter;
Netlink;
SCTP protocol;
TIPC protocol;
Wireless networking;
XFRM subsystem;
Key management;
FireWire sound drivers;
AudioScience HPI driver;
Amlogic Meson SoC drivers;
KVM core; (CVE-2024-40953, CVE-2024-50008, CVE-2024-40911, CVE-2024-47685, CVE-2024-49957, CVE-2024-38544, CVE-2024-49860, CVE-2024-46854, CVE-2024-49882, CVE-2024-44931, CVE-2024-47696, CVE-2021-47469, CVE-2024-41066, CVE-2024-46849, CVE-2024-47671, CVE-2024-49975, CVE-2024-49958, CVE-2024-50006, CVE-2024-50287, CVE-2024-50099, CVE-2024-50035, CVE-2024-46731, CVE-2024-49878, CVE-2024-50045, CVE-2023-52917, CVE-2024-47712, CVE-2024-49883, CVE-2024-50040, CVE-2024-50234, CVE-2024-50184, CVE-2024-50279, CVE-2024-49948, CVE-2024-50044, CVE-2024-50230, CVE-2024-47710, CVE-2024-50233, CVE-2024-49900, CVE-2024-49938, CVE-2024-50236, CVE-2024-47737, CVE-2024-47670, CVE-2024-41016, CVE-2024-50150, CVE-2024-50301, CVE-2024-50116, CVE-2024-47706, CVE-2024-40965, CVE-2024-50205, CVE-2024-49963, CVE-2024-47756, CVE-2024-53066, CVE-2024-49879, CVE-2024-53059, CVE-2024-50229, CVE-2024-50131, CVE-2024-53104, CVE-2024-50167, CVE-2024-47723, CVE-2024-47709, CVE-2024-42252, CVE-2024-50267, CVE-2024-50218, CVE-2024-47698, CVE-2024-50039, CVE-2024-47701, CVE-2024-50202, CVE-2024-50262, CVE-2024-50194, CVE-2024-46853, CVE-2024-47699, CVE-2024-47697, CVE-2024-50117, CVE-2024-49982, CVE-2024-47742, CVE-2024-50127, CVE-2024-50142, CVE-2024-49955, CVE-2024-47747, CVE-2024-49981, CVE-2024-47679, CVE-2024-50237, CVE-2024-43863, CVE-2024-47672, CVE-2024-50273, CVE-2024-49903, CVE-2024-50180, CVE-2024-50148, CVE-2024-50059, CVE-2024-50299, CVE-2024-47740, CVE-2024-47749, CVE-2024-49892, CVE-2024-50074, CVE-2024-49973, CVE-2024-50296, CVE-2024-49962, CVE-2024-50024, CVE-2024-49924, CVE-2024-49877, CVE-2024-49959, CVE-2024-49997, CVE-2024-50168, CVE-2024-47757, CVE-2024-49902, CVE-2024-49868, CVE-2023-52458, CVE-2024-47692, CVE-2024-49894, CVE-2024-50096, CVE-2024-47684, CVE-2024-50143, CVE-2024-35896, CVE-2024-47713, CVE-2024-50151, CVE-2024-50082, CVE-2024-50171, CVE-2024-53063, CVE-2024-50007, CVE-2024-49985, CVE-2024-49944, CVE-2024-50302, CVE-2024-49949, CVE-2024-50033, CVE-2024-49952, CVE-2024-49995, CVE-2024-50278, CVE-2024-53061, CVE-2024-50195, CVE-2024-49966, CVE-2024-50265, CVE-2024-50282, CVE-2024-35887, CVE-2024-49896, CVE-2024-50290, CVE-2024-53101, CVE-2024-49867, CVE-2024-50199, CVE-2024-49965, CVE-2024-50179,…

Record: USN-7294-1
Updated: 2026-11-02

OSVUSN-7294-2 No score

linux-aws, linux-oracle, linux-oracle-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
Block layer subsystem;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
TPM device driver;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
InfiniBand drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
Network drivers;
NTB driver;
Virtio pmem driver;
Parport drivers;
PCI subsystem;
SPI subsystem;
Direct Digital Synthesis drivers;
USB Device Class drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
Framebuffer layer;
BTRFS file system;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
File systems infrastructure;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
SMB network file system;
Network traffic control;
Network sockets;
TCP network protocol;
BPF subsystem;
Perf events;
Arbitrary resource management;
Timer substystem drivers;
Tracing infrastructure;
Closures library;
Memory management;
Amateur Radio drivers;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Netfilter;
Netlink;
SCTP protocol;
TIPC protocol;
Wireless networking;
XFRM subsystem;
Key management;
FireWire sound drivers;
AudioScience HPI driver;
Amlogic Meson SoC drivers;
KVM core; (CVE-2024-53063, CVE-2024-50236, CVE-2024-47699, CVE-2024-50044, CVE-2024-49877, CVE-2024-47692, CVE-2024-50116, CVE-2024-47679, CVE-2024-50134, CVE-2024-50045, CVE-2024-50301, CVE-2024-40965, CVE-2024-47684, CVE-2024-49944, CVE-2024-43863, CVE-2024-50059, CVE-2024-50007, CVE-2024-49973, CVE-2024-50251, CVE-2024-47674, CVE-2024-49982, CVE-2024-50143, CVE-2024-49883, CVE-2024-49851, CVE-2024-44931, CVE-2024-49949, CVE-2024-47747, CVE-2024-46853, CVE-2024-50233, CVE-2024-49924, CVE-2024-50033, CVE-2024-50024, CVE-2024-49995, CVE-2024-47737, CVE-2024-50194, CVE-2024-47712, CVE-2024-50273, CVE-2024-50229, CVE-2024-49896, CVE-2024-50199, CVE-2024-50202, CVE-2024-49868, CVE-2024-50035, CVE-2024-50184, CVE-2024-49882, CVE-2024-49962, CVE-2024-50299, CVE-2024-35887, CVE-2024-50287, CVE-2024-50265, CVE-2024-50148, CVE-2024-47757, CVE-2024-47742, CVE-2024-49902, CVE-2024-50302, CVE-2024-50096, CVE-2024-49952, CVE-2024-50099, CVE-2024-49963, CVE-2024-49900, CVE-2024-46731, CVE-2024-50131, CVE-2024-47723, CVE-2024-50237, CVE-2024-50269, CVE-2024-50142, CVE-2024-49867, CVE-2024-49985, CVE-2024-47670, CVE-2024-50008, CVE-2024-49938, CVE-2024-49878, CVE-2024-49955, CVE-2024-53104, CVE-2024-49894, CVE-2024-50039, CVE-2024-50279, CVE-2024-50006, CVE-2024-40953, CVE-2024-50180, CVE-2024-49860, CVE-2024-50117, CVE-2024-47701, CVE-2024-47698, CVE-2024-50171, CVE-2024-50151, CVE-2024-50082, CVE-2024-50290, CVE-2024-49975, CVE-2024-49903, CVE-2024-38544, CVE-2024-50218, CVE-2024-49948, CVE-2024-50282, CVE-2024-49965, CVE-2024-49959, CVE-2024-42252, CVE-2024-47749, CVE-2024-47756, CVE-2024-47672, CVE-2024-50127, CVE-2024-46854, CVE-2024-50230, CVE-2024-41066, CVE-2024-49957, CVE-2024-47713, CVE-2023-52458, CVE-2024-50167, CVE-2024-49997, CVE-2024-47685, CVE-2024-49879, CVE-2024-53059, CVE-2024-53101, CVE-2024-49958, CVE-2024-47710, CVE-2024-47706, CVE-2024-50074, CVE-2024-50296, CVE-2024-49892, CVE-2024-46849, CVE-2024-50205, CVE-2024-50168, CVE-2024-50267, CVE-2024-50262, CVE-2024-47709, CVE-2024-50195, CVE-2024-35896, CVE-2024-47696, CVE-2024-47740, CVE-2024-40911, CVE-2024-49966, CVE-2021-47469, CVE-2024-49981, CVE-2024-50234, CVE-2024-50179, CVE-2024-47697, CVE-2024-50150, CVE-2023-52917, CVE-2024-50040,…

Record: USN-7294-2
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` Azure Linux:2	before 5.15.173.1-1	5.15.173.1-1
`kernel` Azure Linux:3	before 6.6.56.1-5	6.6.56.1-5
`linux-lts` Alpaquita:23	6.1.112-r0 up to 6.1.114-r0	6.1.114-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.6.100-r0 up to 6.12.41-r0	6.12.41-r0
`bpftool` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-core` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-cross-headers` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-debug` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-debug-core` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-debug-devel` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-debug-modules` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-debug-modules-extra` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-debug-modules-internal` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-devel` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-headers` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-ipaclones-internal` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-modules` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-modules-extra` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-modules-internal` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-selftests-internal` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-tools` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-tools-libs` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`kernel-tools-libs-devel` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`perf` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`python3-perf` TuxCare:CentOS:8.4 From an advisory covering 31 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els22	4.18.0-305.25.1.el8_4.tuxcare.els22
`bpftool` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-core` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-cross-headers` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-debug` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-debug-core` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-debug-devel` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-debug-modules` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-debug-modules-extra` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-debug-modules-internal` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-devel` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-headers` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-ipaclones-internal` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-modules` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-modules-extra` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-modules-internal` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-selftests-internal` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-tools` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-tools-libs` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`kernel-tools-libs-devel` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`perf` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`python3-perf` TuxCare:CentOS:8.5 From an advisory covering 31 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els22	4.18.0-348.7.1.el8_5.tuxcare.els22
`bpftool` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-core` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-cross-headers` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-debug` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-debug-core` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-debug-devel` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-debug-modules` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-debug-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-devel` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-headers` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-ipaclones-internal` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-modules` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-selftests-internal` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`kernel-tools` TuxCare:CentOS-Stream:8 From an advisory covering 30 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els5	4.18.0-553.6.1.el8_10.tuxcare.els5
`Kernel` Linux	3.18.0 up to 4.19.323, 4.20.0 up to 5.4.285, 5.5.0 up to 5.10.227, 5.11.0 up to 5.15.168, 5.16.0 up to 6.1.113, 6.2.0 up to 6.6.54, 6.7.0 up to 6.10.13, 6.11.0 up to 6.11.2	4.19.3235.4.2855.10.2275.15.1686.1.1136.6.546.10.136.11.2
`linux` Debian:12	before 6.1.115-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.27-1 Show 25 moreShow less 6.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.115-1
`linux` Debian:13	before 6.11.2-1	6.11.2-1
`linux` Debian:14	before 6.11.2-1	6.11.2-1
`linux-6.1` Debian:11 From an advisory covering 838 CVEs	before 6.1.119-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u1	6.1.119-1~deb11u1
`linux` Debian:11 From an advisory covering 387 CVEs	before 5.10.234-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 39 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.234-1
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS From an advisory covering 5 CVEs	before 4.4.0-272.306~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	4.4.0-272.306~14.04.1
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS From an advisory covering 5 CVEs	before 4.15.0-1184.197~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	4.15.0-1184.197~16.04.1
`linux-aws` Ubuntu:Pro:16.04:LTS From an advisory covering 5 CVEs	before 4.4.0-1185.200, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	4.4.0-1185.200
`linux-azure` Ubuntu:Pro:16.04:LTS From an advisory covering 5 CVEs	before 4.15.0-1192.207~16.04.1, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	4.15.0-1192.207~16.04.1
`linux-gcp` Ubuntu:Pro:16.04:LTS From an advisory covering 5 CVEs	before 4.15.0-1177.194~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	4.15.0-1177.194~16.04.1
`linux-hwe` Ubuntu:Pro:16.04:LTS From an advisory covering 5 CVEs	before 4.15.0-241.253~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	4.15.0-241.253~16.04.1
`linux` Ubuntu:Pro:16.04:LTS From an advisory covering 5 CVEs	before 4.4.0-272.306, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	4.4.0-272.306
`linux-aws` Ubuntu:Pro:18.04:LTS From an advisory covering 5 CVEs	before 4.15.0-1184.197, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	4.15.0-1184.197
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS From an advisory covering 5 CVEs	before 4.15.0-1192.207, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	4.15.0-1192.207
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS From an advisory covering 5 CVEs	before 4.15.0-1177.194, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	4.15.0-1177.194
`linux` Ubuntu:Pro:18.04:LTS From an advisory covering 5 CVEs	before 4.15.0-241.253, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	4.15.0-241.253
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS From an advisory covering 5 CVEs	before 5.4.0-219.239~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-219.239~18.04.1
`linux-oracle` Ubuntu:Pro:18.04:LTS From an advisory covering 5 CVEs	before 4.15.0-1146.157, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	4.15.0-1146.157
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS From an advisory covering 5 CVEs	before 5.15.0-1091.98~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	5.15.0-1091.98~20.04.1
`linux-aws` Ubuntu:Pro:20.04:LTS From an advisory covering 5 CVEs	before 5.4.0-1148.158, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1148.158
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS From an advisory covering 5 CVEs	before 5.15.0-1095.104~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	5.15.0-1095.104~20.04.1
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS From an advisory covering 5 CVEs	before 5.15.0-1091.100~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	5.15.0-1091.100~20.04.1
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS From an advisory covering 5 CVEs	before 5.15.0-153.163~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-153.163~20.04.1
`linux-lowlatency-hwe-5.15` Ubuntu:Pro:20.04:LTS From an advisory covering 5 CVEs	before 5.15.0-153.163~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-153.163~20.04.1
`linux` Ubuntu:Pro:20.04:LTS From an advisory covering 5 CVEs	before 5.4.0-219.239, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-219.239
`linux-ibm-5.15` Ubuntu:Pro:20.04:LTS From an advisory covering 5 CVEs	before 5.15.0-1085.88~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 36 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.1	5.15.0-1085.88~20.04.1
`linux-oracle-5.15` Ubuntu:Pro:20.04:LTS From an advisory covering 5 CVEs	before 5.15.0-1090.96~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1	5.15.0-1090.96~20.04.1
`linux-aws` Ubuntu:Pro:22.04:LTS From an advisory covering 5 CVEs	before 5.15.0-1091.98, plus listed versions 5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7 Show 45 moreShow less 5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71	5.15.0-1091.98
`linux-azure` Ubuntu:Pro:22.04:LTS From an advisory covering 5 CVEs	before 5.15.0-1095.104, plus listed versions 5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6 Show 45 moreShow less 5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75	5.15.0-1095.104
`linux-gcp` Ubuntu:Pro:22.04:LTS From an advisory covering 5 CVEs	before 5.15.0-1091.100, plus listed versions 5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7 Show 45 moreShow less 5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.715.15.0-1064.725.15.0-1065.73	5.15.0-1091.100
`linux` Ubuntu:Pro:22.04:LTS From an advisory covering 5 CVEs	before 5.15.0-153.163, plus listed versions 5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23 Show 45 moreShow less 5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115	5.15.0-153.163
`linux-gke` Ubuntu:Pro:22.04:LTS From an advisory covering 5 CVEs	before 5.15.0-1088.94, plus listed versions 5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7 Show 45 moreShow less 5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70	5.15.0-1088.94
`linux-ibm` Ubuntu:Pro:22.04:LTS From an advisory covering 5 CVEs	before 5.15.0-1085.88, plus listed versions 5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8 Show 45 moreShow less 5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.605.15.0-1058.615.15.0-1059.625.15.0-1060.635.15.0-1061.645.15.0-1062.65	5.15.0-1085.88
`linux-oracle` Ubuntu:Pro:22.04:LTS From an advisory covering 5 CVEs	before 5.15.0-1089.95, plus listed versions 5.13.0-1008.105.15.0-1001.35.15.0-1002.45.15.0-1003.55.15.0-1006.8 Show 45 moreShow less 5.15.0-1007.95.15.0-1009.125.15.0-1011.155.15.0-1013.175.15.0-1016.205.15.0-1017.225.15.0-1018.235.15.0-1019.245.15.0-1021.275.15.0-1022.285.15.0-1025.315.15.0-1026.325.15.0-1027.335.15.0-1029.355.15.0-1030.365.15.0-1032.385.15.0-1033.395.15.0-1034.405.15.0-1035.415.15.0-1036.425.15.0-1037.435.15.0-1038.445.15.0-1039.455.15.0-1040.465.15.0-1041.475.15.0-1042.485.15.0-1044.505.15.0-1045.515.15.0-1046.525.15.0-1047.535.15.0-1048.545.15.0-1049.555.15.0-1050.565.15.0-1051.575.15.0-1052.585.15.0-1053.595.15.0-1054.605.15.0-1055.615.15.0-1058.645.15.0-1059.655.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70	5.15.0-1089.95
`linux-aws` Ubuntu:Pro:24.04:LTS From an advisory covering 5 CVEs	before 6.8.0-1036.38, plus listed versions 6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8 Show 25 moreShow less 6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1035.37	6.8.0-1036.38
`linux-azure` Ubuntu:Pro:24.04:LTS From an advisory covering 5 CVEs	before 6.8.0-1038.44, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6 Show 21 moreShow less 6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.346.8.0-1030.356.8.0-1031.366.8.0-1034.39	6.8.0-1038.44
`linux-gcp` Ubuntu:Pro:24.04:LTS From an advisory covering 5 CVEs	before 6.8.0-1037.39, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6 Show 27 moreShow less 6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1034.366.8.0-1036.38	6.8.0-1037.39
`linux` Ubuntu:Pro:24.04:LTS From an advisory covering 5 CVEs	before 6.8.0-79.79, plus listed versions 6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22 Show 29 moreShow less 6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.636.8.0-62.656.8.0-63.666.8.0-64.676.8.0-71.716.8.0-78.78	6.8.0-79.79
`linux-ibm` Ubuntu:Pro:24.04:LTS From an advisory covering 5 CVEs	before 6.8.0-1036.36, plus listed versions 6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5 Show 24 moreShow less 6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1033.33	6.8.0-1036.36
`linux-oracle` Ubuntu:Pro:24.04:LTS From an advisory covering 5 CVEs	before 6.8.0-1033.34, plus listed versions 6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5 Show 24 moreShow less 6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.256.8.0-1025.266.8.0-1026.276.8.0-1027.286.8.0-1028.296.8.0-1029.306.8.0-1030.316.8.0-1032.33	6.8.0-1033.34
`kernel-linus` Mageia:9 From an advisory covering 210 CVEs	before 6.6.58-2.mga9	6.6.58-2.mga9
`kernel` Mageia:9 From an advisory covering 210 CVEs	before 6.6.58-2.mga9	6.6.58-2.mga9
`kmod-xtables-addons` Mageia:9 From an advisory covering 210 CVEs	before 3.24-65.mga9	3.24-65.mga9
`kmod-virtualbox` Mageia:9 From an advisory covering 210 CVEs	before 7.0.20-57.mga9	7.0.20-57.mga9
`kernel-firmware` Mageia:9 From an advisory covering 210 CVEs	before 20240909-1.mga9	20240909-1.mga9
`kernel-firmware-nonfree` Mageia:9 From an advisory covering 210 CVEs	before 20240909-1.mga9.nonfree	20240909-1.mga9.nonfree
`radeon-firmware` Mageia:9 From an advisory covering 210 CVEs	before 20240909-1.mga9.nonfree	20240909-1.mga9.nonfree
`kernel` openEuler:22.03-LTS-SP4 From an advisory covering 62 CVEs	before 5.10.0-234.0.0.133.oe2203sp4	5.10.0-234.0.0.133.oe2203sp4
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 62 CVEs	before 5.10.0-234.0.0.136.oe2203sp3	5.10.0-234.0.0.136.oe2203sp3
`kernel` openEuler:20.03-LTS-SP4 From an advisory covering 23 CVEs	before 4.19.90-2411.1.0.0301.oe2003sp4	4.19.90-2411.1.0.0301.oe2003sp4
`kernel` openEuler:22.03-LTS-SP1 From an advisory covering 74 CVEs	before 5.10.0-136.99.0.180.oe2203sp1	5.10.0-136.99.0.180.oe2203sp1
`kernel` openEuler:24.03-LTS From an advisory covering 62 CVEs	before 6.6.0-48.0.0.53.oe2403	6.6.0-48.0.0.53.oe2403
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`python3-perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 406 CVEs	before 0:5.14.0-570.12.1.el9_6	0:5.14.0-570.12.1.el9_6
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 204 CVEs	before 5.14.21-150500.33.72.1	5.14.21-150500.33.72.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 204 CVEs	before 5.14.21-150500.33.72.1	5.14.21-150500.33.72.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 204 CVEs	before 5.14.21-150500.33.72.1	5.14.21-150500.33.72.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 204 CVEs	before 5.14.21-150500.33.72.1	5.14.21-150500.33.72.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 204 CVEs	before 5.14.21-150500.33.72.1	5.14.21-150500.33.72.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 204 CVEs	before 5.14.21-150500.33.72.1	5.14.21-150500.33.72.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 282 CVEs	before 6.4.0-150600.8.17.2	6.4.0-150600.8.17.2
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 282 CVEs	before 6.4.0-150600.8.17.1	6.4.0-150600.8.17.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 282 CVEs	before 6.4.0-150600.8.17.1	6.4.0-150600.8.17.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 282 CVEs	before 6.4.0-150600.8.17.2	6.4.0-150600.8.17.2
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 282 CVEs	before 6.4.0-150600.8.17.1	6.4.0-150600.8.17.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 282 CVEs	before 6.4.0-150600.8.17.1	6.4.0-150600.8.17.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 211 CVEs	before 5.14.21-150500.13.76.1	5.14.21-150500.13.76.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 211 CVEs	before 5.14.21-150500.13.76.1	5.14.21-150500.13.76.1
`kernel-livepatch-SLE15-SP5-RT_Update_22` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 211 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 211 CVEs	before 5.14.21-150500.13.76.1	5.14.21-150500.13.76.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 211 CVEs	before 5.14.21-150500.13.76.1	5.14.21-150500.13.76.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 211 CVEs	before 5.14.21-150500.13.76.1	5.14.21-150500.13.76.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 211 CVEs	before 5.14.21-150500.13.76.1	5.14.21-150500.13.76.1
`kernel-rt` openSUSE:Leap Micro 5.5 From an advisory covering 211 CVEs	before 5.14.21-150500.13.76.1	5.14.21-150500.13.76.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 211 CVEs	before 5.14.21-150500.13.76.1	5.14.21-150500.13.76.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 211 CVEs	before 5.14.21-150500.13.76.1	5.14.21-150500.13.76.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 211 CVEs	before 5.14.21-150500.13.76.1	5.14.21-150500.13.76.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 211 CVEs	before 5.14.21-150500.13.76.1	5.14.21-150500.13.76.1
`kernel-livepatch-SLE15-SP6-RT_Update_5` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 268 CVEs	before 1-150600.1.3.1	1-150600.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 268 CVEs	before 6.4.0-150600.10.17.1	6.4.0-150600.10.17.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 268 CVEs	before 6.4.0-150600.10.17.1	6.4.0-150600.10.17.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 268 CVEs	before 6.4.0-150600.10.17.1	6.4.0-150600.10.17.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 268 CVEs	before 6.4.0-150600.10.17.1	6.4.0-150600.10.17.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 268 CVEs	before 6.4.0-150600.10.17.1	6.4.0-150600.10.17.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 268 CVEs	before 6.4.0-150600.10.17.1	6.4.0-150600.10.17.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 268 CVEs	before 6.4.0-150600.10.17.1	6.4.0-150600.10.17.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 268 CVEs	before 6.4.0-150600.10.17.1	6.4.0-150600.10.17.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 120 CVEs	before 4.12.14-122.234.1	4.12.14-122.234.1
`kgraft-patch-SLE12-SP5_Update_62` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 120 CVEs	before 1-8.3.1	1-8.3.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1.150600.12.12.6	6.4.0-150600.23.30.1.150600.12.12.6
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-livepatch-SLE15-SP6_Update_6` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 506 CVEs	before 1-150600.13.3.5	1-150600.13.3.5
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1.150600.12.12.6	6.4.0-150600.23.30.1.150600.12.12.6
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 506 CVEs	before 6.4.0-150600.23.30.1	6.4.0-150600.23.30.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1.150500.6.39.4	5.14.21-150500.55.88.1.150500.6.39.4
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1.150500.6.39.4	5.14.21-150500.55.88.1.150500.6.39.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-livepatch-SLE15-SP5_Update_21` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 439 CVEs	before 1-150500.11.5.1	1-150500.11.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5 From an advisory covering 439 CVEs	before 5.14.21-150500.55.88.1	5.14.21-150500.55.88.1
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 490 CVEs	before 6.4.0-15061.9.coco15sp6.1	6.4.0-15061.9.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 490 CVEs	before 6.4.0-15061.9.coco15sp6.1	6.4.0-15061.9.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 490 CVEs	before 6.4.0-15061.9.coco15sp6.1	6.4.0-15061.9.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 490 CVEs	before 6.4.0-15061.9.coco15sp6.1	6.4.0-15061.9.coco15sp6.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 120 CVEs	before 4.12.14-122.234.1	4.12.14-122.234.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 120 CVEs	before 4.12.14-122.234.1	4.12.14-122.234.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 120 CVEs	before 4.12.14-122.234.1	4.12.14-122.234.1
`kernel-default` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 120 CVEs	before 4.12.14-122.234.1	4.12.14-122.234.1
`kernel-source` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 120 CVEs	before 4.12.14-122.234.1	4.12.14-122.234.1
`kernel-syms` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 120 CVEs	before 4.12.14-122.234.1	4.12.14-122.234.1
`kernel-livepatch-MICRO-6-0-RT_Update_4` SUSE:Linux Micro 6.0 From an advisory covering 507 CVEs	before 1-1.1	1-1.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 507 CVEs	before 6.4.0-22.1	6.4.0-22.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 507 CVEs	before 6.4.0-22.1	6.4.0-22.1
`linux-aws` Ubuntu:Pro:14.04:LTS	before 4.4.0-1147.153, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	4.4.0-1147.153
`linux-azure` Ubuntu:Pro:14.04:LTS	before 4.15.0-1192.207~14.04.1, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	4.15.0-1192.207~14.04.1
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	before 4.4.0-272.306~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	4.4.0-272.306~14.04.1
`linux` Ubuntu:Pro:16.04:LTS	before 4.4.0-272.306, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	4.4.0-272.306
`linux-aws` Ubuntu:Pro:16.04:LTS	before 4.4.0-1185.200, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	4.4.0-1185.200
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-1184.197~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	4.15.0-1184.197~16.04.1
`linux-azure` Ubuntu:Pro:16.04:LTS	before 4.15.0-1192.207~16.04.1, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	4.15.0-1192.207~16.04.1
`linux-gcp` Ubuntu:Pro:16.04:LTS	before 4.15.0-1177.194~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	4.15.0-1177.194~16.04.1
`linux-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-241.253~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	4.15.0-241.253~16.04.1
`linux-kvm` Ubuntu:Pro:16.04:LTS	before 4.4.0-1148.159, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	4.4.0-1148.159
`linux-oracle` Ubuntu:Pro:16.04:LTS	before 4.15.0-1148.159~16.04.1, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	4.15.0-1148.159~16.04.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	before 4.4.0-1117.124, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	4.4.0-1117.124
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	before 4.15.0-241.253, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	4.15.0-241.253
`linux-aws` Ubuntu:Pro:18.04:LTS	before 4.15.0-1184.197, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	4.15.0-1184.197
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1142.152~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1142.152~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1192.207, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	4.15.0-1192.207
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1145.152~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1145.152~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1177.194, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	4.15.0-1177.194
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`kernel-source` openSUSE:Tumbleweed From an advisory covering 486 CVEs	before 6.11.8-1.1	6.11.8-1.1
`kernel-source-longterm` openSUSE:Tumbleweed From an advisory covering 504 CVEs	before 6.12.11-1.1	6.12.11-1.1

History

History
Recorded	Changed	Sources
Nov 11, 2026	affected	OSV
Nov 6, 2026	affected
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-47685 is a critical vulnerability (CVSS 9.1) in Debian Linux, published October 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.36%, the 72nd percentile. Fixed in kernel 5.15.173.1-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 477 package rows, 2,551 versions, 4,955 references and the rest of 32 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 28 source records.