Every CVE Search/ Get API key

CVE-2024-50115

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

8.4 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3.

In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages.

Per the APM:

The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0.

And the SDM's much more explicit:

4:0 Ignored

Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.24%Up 0.2 points since Nov 6, 2024
90%50%10%1%

What each source reports

CVE List Score used 8.4

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

In the Linux kernel, the following vulnerability has been resolved:

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3.

In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages.

Per the APM:

The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0.

And the SDM's much more explicit:

4:0 Ignored

Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.

Record
CVE-2024-50115
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2024-44603 8.4

In the Linux kernel, the following vulnerability has been resolved:

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3.

In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages.

Per the APM:

The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0.

And the SDM's much more explicit:

4:0 Ignored

Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.

Record
EUVD-2024-44603
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-mjgv-4grg-pfrr 7.1

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR3[4:0]...

In the Linux kernel, the following vulnerability has been resolved:

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3.

In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages.

Per the APM:

The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0.

And the SDM's much more explicit:

4:0 Ignored

Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.

Record
GHSA-mjgv-4grg-pfrr
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 8.4

In the Linux kernel, the following vulnerability has been resolved:

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3.

In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages.

Per the APM:

The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0.

And the SDM's much more explicit:

4:0 Ignored

Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.

Record
CVE-2024-50115
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVAZL-52464 7.1

CVE-2024-50115 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved:

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3.

In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages.

Per the APM:

The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0.

And the SDM's much more explicit:

4:0 Ignored

Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.

Record
AZL-52464
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVAZL-52529 7.1

CVE-2024-50115 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved:

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3.

In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages.

Per the APM:

The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0.

And the SDM's much more explicit:

4:0 Ignored

Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.

Record
AZL-52529
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
Show 46 moreShow less
OSVBELL-CVE-2024-50115 7.1
Record
BELL-CVE-2024-50115
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSV 8.4

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

In the Linux kernel, the following vulnerability has been resolved:

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3.

In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages.

Per the APM:

The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0.

And the SDM's much more explicit:

4:0 Ignored

Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.

Record
CVE-2024-50115
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-50115 7.1

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3. In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages. Per the APM: The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0. And the SDM's much more explicit: 4:0 Ignored Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.

Record
DEBIAN-CVE-2024-50115
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-2445 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_qca: Fix driver shutdown on closed serdev

The driver shutdown callback (which sends EDL_SOC_RESET to the device over serdev) should not be invoked when HCI device is not open (e.g. if hci_dev_open_sync() failed), because the serdev and its TTY are not open either. Also skip this step if device is powered off (qca_power_shutdown()).

The shutdown callback causes use-after-free during system reboot with Qualcomm Atheros Bluetooth:

Unable to handle kernel paging request at virtual address 0072662f67726fd7 ... CPU: 6 PID: 1 Comm: systemd-shutdow Tainted: G W 6.1.0-rt5-00325-g8a5f56bcfcca #8 Hardware name: Qualcomm Technologies, Inc. Robotics RB5 (DT) Call trace: tty_driver_flush_buffer+0x4/0x30 serdev_device_write_flush+0x24/0x34 qca_serdev_shutdown+0x80/0x130 [hci_uart] device_shutdown+0x15c/0x260 kernel_restart+0x48/0xac

KASAN report:

BUG: KASAN: use-after-free in tty_driver_flush_buffer+0x1c/0x50 Read of size 8 at addr ffff16270c2e0018 by task systemd-shutdow/1

CPU: 7 PID: 1 Comm: systemd-shutdow Not tainted 6.1.0-next-20221220-00014-gb85aaf97fb01-dirty #28 Hardware name: Qualcomm Technologies, Inc. Robotics RB5 (DT) Call trace: dump_backtrace.part.0+0xdc/0xf0 show_stack+0x18/0x30 dump_stack_lvl+0x68/0x84 print_report+0x188/0x488 kasan_report+0xa4/0xf0 __asan_load8+0x80/0xac tty_driver_flush_buffer+0x1c/0x50 ttyport_write_flush+0x34/0x44 serdev_device_write_flush+0x48/0x60 qca_serdev_shutdown+0x124/0x274 device_shutdown+0x1e8/0x350 kernel_restart+0x48/0xb0 __do_sys_reboot+0x244/0x2d0 __arm64_sys_reboot+0x54/0x70 invoke_syscall+0x60/0x190 el0_svc_common.constprop.0+0x7c/0x160 do_el0_svc+0x44/0xf0 el0_svc+0x2c/0x6c el0t_64_sync_handler+0xbc/0x140 el0t_64_sync+0x190/0x194(CVE-2022-48878)

In the Linux kernel, the following vulnerability has been resolved: rtc: cmos: Fix event handler registration ordering issue Because acpi_install_fixed_event_handler() enables the event automatically on success, it is incorrect to call it before the handler routine passed to it is ready to handle events. Unfortunately, the rtc-cmos driver does exactly the incorrect thing by calling cmos_wake_setup(), which passes rtc_handler() to acpi_install_fixed_event_handler(), before cmos_do_probe(), because rtc_handler() uses dev_get_drvdata() to get to the cmos object pointer and the driver data pointer is only populated in cmos_do_probe(). This leads to a NULL pointer dereference in rtc_handler() on boot if the RTC fixed event happens to be active at the init time. To address this issue, change the initialization ordering of the driver so that cmos_wake_setup() is always called after a successful cmos_do_probe() call. While at it, change cmos_pnp_probe() to call cmos_do_probe() after the initial if () statement used for computing the IRQ argument to be passed to cmos_do_probe() which is cleaner than calling it in each branch of that if () (local variable "irq" can be of type int, because it is passed to that function as an argument of type int). Note that commit 6492fed7d8c9 ("rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0") caused this issue to affect a larger number of systems, because previously it only affected systems with ACPI_FADT_LOW_POWER_S0 set, but it is present regardless of that commit.(CVE-2022-48953)

In the Linux kernel, the following vulnerability has been resolved: e100: Fix possible use after free in e100_xmit_prepare In e100_xmit_prepare(), if we can't map the skb, then return -ENOMEM, so e100_xmit_frame() will return NETDEV_TX_BUSY and the upper layer will resend the skb. But the skb is already freed, which will cause UAF bug when the upper layer resends the skb. Remove the harmful free.(CVE-2022-49026)

In…

Record
OESA-2024-2445
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2446 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: fix use-after-free in do_zone_finish()

Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070.

BTRFS info (device nullb1): scrub: finished on devid 1 with status: 0

BUG: KASAN: slab-use-after-free in do_zone_finish+0x91a/0xb90 [btrfs] Read of size 8 at addr ffff8881543c8060 by task btrfs-cleaner/3494007

CPU: 0 PID: 3494007 Comm: btrfs-cleaner Tainted: G W 6.8.0-rc5-kts #1 Hardware name: Supermicro Super Server/X11SPi-TF, BIOS 3.3 02/21/2020 Call Trace: <TASK> dump_stack_lvl+0x5b/0x90 print_report+0xcf/0x670 ? __virt_addr_valid+0x200/0x3e0 kasan_report+0xd8/0x110 ? do_zone_finish+0x91a/0xb90 [btrfs] ? do_zone_finish+0x91a/0xb90 [btrfs] do_zone_finish+0x91a/0xb90 [btrfs] btrfs_delete_unused_bgs+0x5e1/0x1750 [btrfs] ? __pfx_btrfs_delete_unused_bgs+0x10/0x10 [btrfs] ? btrfs_put_root+0x2d/0x220 [btrfs] ? btrfs_clean_one_deleted_snapshot+0x299/0x430 [btrfs] cleaner_kthread+0x21e/0x380 [btrfs] ? __pfx_cleaner_kthread+0x10/0x10 [btrfs] kthread+0x2e3/0x3c0 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x31/0x70 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK>

Allocated by task 3493983: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 __kasan_kmalloc+0xaa/0xb0 btrfs_alloc_device+0xb3/0x4e0 [btrfs] device_list_add.constprop.0+0x993/0x1630 [btrfs] btrfs_scan_one_device+0x219/0x3d0 [btrfs] btrfs_control_ioctl+0x26e/0x310 [btrfs] __x64_sys_ioctl+0x134/0x1b0 do_syscall_64+0x99/0x190 entry_SYSCALL_64_after_hwframe+0x6e/0x76

Freed by task 3494056: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3f/0x60 poison_slab_object+0x102/0x170 __kasan_slab_free+0x32/0x70 kfree+0x11b/0x320 btrfs_rm_dev_replace_free_srcdev+0xca/0x280 [btrfs] btrfs_dev_replace_finishing+0xd7e/0x14f0 [btrfs] btrfs_dev_replace_by_ioctl+0x1286/0x25a0 [btrfs] btrfs_ioctl+0xb27/0x57d0 [btrfs] __x64_sys_ioctl+0x134/0x1b0 do_syscall_64+0x99/0x190 entry_SYSCALL_64_after_hwframe+0x6e/0x76

The buggy address belongs to the object at ffff8881543c8000 which belongs to the cache kmalloc-1k of size 1024 The buggy address is located 96 bytes inside of freed 1024-byte region [ffff8881543c8000, ffff8881543c8400)

The buggy address belongs to the physical page: page:00000000fe2c1285 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1543c8 head:00000000fe2c1285 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 flags: 0x17ffffc0000840(slab|head|node=0|zone=2|lastcpupid=0x1fffff) page_type: 0xffffffff() raw: 0017ffffc0000840 ffff888100042dc0 ffffea0019e8f200 dead000000000002 raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected

Memory state around the buggy address: ffff8881543c7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff8881543c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff8881543c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ^ ffff8881543c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb ffff8881543c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

This UAF happens because we're accessing stale zone information of a already removed btrfs_device in do_zone_finish().

The sequence of events is as follows:

btrfs_dev_replace_start btrfs_scrub_dev btrfs_dev_replace_finishing btrfs_dev_replace_update_device_in_mapping_tree <-- devices replaced btrfs_rm_dev_replace_free_srcdev btrfs_free_device <-- device freed

cleaner_kthread btrfs_delete_unused_bgs …

Record
OESA-2024-2446
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2447 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction (jump) history to record instructions that performed register spill/fill to/from stack, regardless if this was done through read-only r10 register, or any other register after copying r10 into it and potentially adjusting offset. To make this work reliably, we push extra per-instruction flags into instruction history, encoding stack slot index (spi) and stack frame number in extra 10 bit flags we take away from prev_idx in instruction history. We don't touch idx field for maximum performance, as it's checked most frequently during backtracking. This change removes basically the last remaining practical limitation of precision backtracking logic in BPF verifier. It fixes known deficiencies, but also opens up new opportunities to reduce number of verified states, explored in the subsequent patches. There are only three differences in selftests' BPF object files according to veristat, all in the positive direction (less states). File Program Insns (A) Insns (B) Insns (DIFF) States (A) States (B) States (DIFF) -------------------------------------- ------------- --------- --------- ------------- ---------- ---------- ------------- test_cls_redirect_dynptr.bpf.linked3.o cls_redirect 2987 2864 -123 (-4.12%) 240 231 -9 (-3.75%) xdp_synproxy_kern.bpf.linked3.o syncookie_tc 82848 82661 -187 (-0.23%) 5107 5073 -34 (-0.67%) xdp_synproxy_kern.bpf.linked3.o syncookie_xdp 85116 84964 -152 (-0.18%) 5162 5130 -32 (-0.62%) Note, I avoided renaming jmp_history to more generic insn_hist to minimize number of lines changed and potential merge conflicts between bpf and bpf-next trees. Notice also cur_hist_entry pointer reset to NULL at the beginning of instruction verification loop. This pointer avoids the problem of relying on last jump history entry's insn_idx to determine whether we already have entry for current instruction or not. It can happen that we added jump history entry because current instruction is_jmp_point(), but also we need to add instruction flags for stack access. In this case, we don't want to entries, so we need to reuse last added entry, if it is present. Relying on insn_idx comparison has the same ambiguity problem as the one that was fixed recently in [0], so we avoid that. [0] https://patchwork.kernel.org/project/netdevbpf/patch/[email protected]/(CVE-2023-52920)

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix NULL dereference at band check in starting tx ba session

In MLD connection, link_data/link_conf are dynamically allocated. They don't point to vif->bss_conf. So, there will be no chanreq assigned to vif->bss_conf and then the chan will be NULL. Tweak the code to check ht_supported/vht_supported/has_he/has_eht on sta deflink.

Crash log (with rtw89 version under MLO development): [ 9890.526087] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 9890.526102] #PF: supervisor read access in kernel mode [ 9890.526105] #PF: error_code(0x0000) - not-present page [ 9890.526109] PGD 0 P4D 0 [ 9890.526114] Oops: 0000 [#1] PREEMPT SMP PTI [ 9890.526119] CPU: 2 PID: 6367 Comm: kworker/u16:2 Kdump: loaded Tainted: G OE 6.9.0 #1 [ 9890.526123] Hardware name: LENOVO 2356AD1/2356AD1, BIOS G7ETB3WW (2.73 ) 11/28/2018 [ 9890.526126] Workqueue: phy2 rtw89_core_ba_work [rtw89_core] [ 9890.526203] RIP: 0010:ieee80211_start_tx_ba_session (net/mac80211/agg-tx.c:618 (discriminator 1)) mac80211 [ 9890.526279] Code: f7 e8 d5 93 3e ea 48 83 c4 28 89 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 49…

Record
OESA-2024-2447
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2448 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction (jump) history to record instructions that performed register spill/fill to/from stack, regardless if this was done through read-only r10 register, or any other register after copying r10 into it and potentially adjusting offset. To make this work reliably, we push extra per-instruction flags into instruction history, encoding stack slot index (spi) and stack frame number in extra 10 bit flags we take away from prev_idx in instruction history. We don't touch idx field for maximum performance, as it's checked most frequently during backtracking. This change removes basically the last remaining practical limitation of precision backtracking logic in BPF verifier. It fixes known deficiencies, but also opens up new opportunities to reduce number of verified states, explored in the subsequent patches. There are only three differences in selftests' BPF object files according to veristat, all in the positive direction (less states). File Program Insns (A) Insns (B) Insns (DIFF) States (A) States (B) States (DIFF) -------------------------------------- ------------- --------- --------- ------------- ---------- ---------- ------------- test_cls_redirect_dynptr.bpf.linked3.o cls_redirect 2987 2864 -123 (-4.12%) 240 231 -9 (-3.75%) xdp_synproxy_kern.bpf.linked3.o syncookie_tc 82848 82661 -187 (-0.23%) 5107 5073 -34 (-0.67%) xdp_synproxy_kern.bpf.linked3.o syncookie_xdp 85116 84964 -152 (-0.18%) 5162 5130 -32 (-0.62%) Note, I avoided renaming jmp_history to more generic insn_hist to minimize number of lines changed and potential merge conflicts between bpf and bpf-next trees. Notice also cur_hist_entry pointer reset to NULL at the beginning of instruction verification loop. This pointer avoids the problem of relying on last jump history entry's insn_idx to determine whether we already have entry for current instruction or not. It can happen that we added jump history entry because current instruction is_jmp_point(), but also we need to add instruction flags for stack access. In this case, we don't want to entries, so we need to reuse last added entry, if it is present. Relying on insn_idx comparison has the same ambiguity problem as the one that was fixed recently in [0], so we avoid that. [0] https://patchwork.kernel.org/project/netdevbpf/patch/[email protected]/(CVE-2023-52920)

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA

This dma_alloc_coherent() is undone neither in the remove function, nor in the error handling path of fsl_qdma_probe().

Switch to the managed version to fix both issues.(CVE-2024-35833)

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix NULL dereference at band check in starting tx ba session

In MLD connection, link_data/link_conf are dynamically allocated. They don't point to vif->bss_conf. So, there will be no chanreq assigned to vif->bss_conf and then the chan will be NULL. Tweak the code to check ht_supported/vht_supported/has_he/has_eht on sta deflink.

Crash log (with rtw89 version under MLO development): [ 9890.526087] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 9890.526102] #PF: supervisor read access in kernel mode [ 9890.526105] #PF: error_code(0x0000) - not-present page [ 9890.526109] PGD 0 P4D 0 [ 9890.526114] Oops: 0000 [#1] PREEMPT SMP PTI [ 9890.526119] CPU: 2 PID: 6367 Comm: kworker/u16:2 Kdump: loaded Tainted: G OE 6.9.0 #1 [ 9890.526123] Hardware…

Record
OESA-2024-2448
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2449 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: mm: call the security_mmap_file() LSM hook in remap_file_pages() The remap_file_pages syscall handler calls do_mmap() directly, which doesn't contain the LSM security check. And if the process has called personality(READ_IMPLIES_EXEC) before and remap_file_pages() is called for RW pages, this will actually result in remapping the pages to RWX, bypassing a W^X policy enforced by SELinux. So we should check prot by security_mmap_file LSM hook in the remap_file_pages syscall handler before do_mmap() is called. Otherwise, it potentially permits an attacker to bypass a W^X policy enforced by SELinux. The bypass is similar to CVE-2016-10044, which bypass the same thing via AIO and can be found in [1]. The PoC: $ cat > test.c int main(void) { size_t pagesz = sysconf(_SC_PAGE_SIZE); int mfd = syscall(SYS_memfd_create, "test", 0); const char *buf = mmap(NULL, 4 * pagesz, PROT_READ | PROT_WRITE, MAP_SHARED, mfd, 0); unsigned int old = syscall(SYS_personality, 0xffffffff); syscall(SYS_personality, READ_IMPLIES_EXEC | old); syscall(SYS_remap_file_pages, buf, pagesz, 0, 2, 0); syscall(SYS_personality, old); // show the RWX page exists even if W^X policy is enforced int fd = open("/proc/self/maps", O_RDONLY); unsigned char buf2[1024]; while (1) { int ret = read(fd, buf2, 1024); if (ret <= 0) break; write(1, buf2, ret); } close(fd); } $ gcc test.c -o test $ ./test | grep rwx 7f1836c34000-7f1836c35000 rwxs 00002000 00:01 2050 /memfd:test (deleted) PM: subject line tweaks

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3. In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages. Per the APM: The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0. And the SDM's much more explicit: 4:0 Ignored Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.(CVE-2024-50115)

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Guard against bad data for ATIF ACPI method If a BIOS provides bad data in response to an ATIF method call this causes a NULL pointer dereference in the caller. ? show_regs (arch/x86/kernel/dumpstack.c:478 (discriminator 1)) ? __die (arch/x86/kernel/dumpstack.c:423 arch/x86/kernel/dumpstack.c:434) ? page_fault_oops (arch/x86/mm/fault.c:544 (discriminator 2) arch/x86/mm/fault.c:705 (discriminator 2)) ? do_user_addr_fault (arch/x86/mm/fault.c:440 (discriminator 1) arch/x86/mm/fault.c:1232 (discriminator 1)) ? acpi_ut_update_object_reference (drivers/acpi/acpica/utdelete.c:642) ? exc_page_fault (arch/x86/mm/fault.c:1542) ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623) ? amdgpu_atif_query_backlight_caps.constprop.0 (drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c:387 (discriminator 2)) amdgpu ? amdgpu_atif_query_backlight_caps.constprop.0 (drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c:386 (discriminator 1)) amdgpu It has been encountered on at least one system, so guard for it. (cherry picked from commit c9b7c809b89f24e9372a4e7f02d64c950b07fdee)(CVE-2024-50117)

In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 check in pc_clock_settime() As Andrew pointed out, it will make sense that the PTP core checked timespec64 struct's…

Record
OESA-2024-2449
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:11486 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2024:11486
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-50115 4.6

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of nCR3. In the absolute worst case scenario, failure to ignore bits 4:0 can result in an out-of-bounds read, e.g. if the target page is at the end of a memslot, and the VMM isn't using guard pages. Per the APM: The CR3 register points to the base address of the page-directory-pointer table. The page-directory-pointer table is aligned on a 32-byte boundary, with the low 5 address bits 4:0 assumed to be 0. And the SDM's much more explicit: 4:0 Ignored Note, KVM gets this right when loading PDPTRs, it's only the nSVM flow that is broken.

Record
UBUNTU-CVE-2024-50115
CVSS 4.0
4.6 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
Updated
2026-11-06
OSVALSA-2024:11486 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399)
  • kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564)
  • kernel: bpf: Fix a kernel verifier crash in stacksafe() (CVE-2024-45020)
  • kernel: nfsd: ensure that nfsd4_fattr_args.context is zeroed out (CVE-2024-46697)
  • kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CVE-2024-47675)
  • kernel: bpf: Fix a sdiv overflow issue (CVE-2024-49888)
  • kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099)
  • kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110)
  • kernel: Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125)
  • kernel: Bluetooth: ISO: Fix UAF on iso_sock_timeout (CVE-2024-50124)
  • kernel: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (CVE-2024-50115)
  • kernel: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (CVE-2024-50142)
  • kernel: Bluetooth: bnep: fix wild-memory-access in proto_unregister (CVE-2024-50148)
  • kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192)
  • kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CVE-2024-50255)
  • kernel: sched/numa: Fix the potential null pointer dereference in task_numa_work() (CVE-2024-50223)
  • kernel: bpf: Fix out-of-bounds write in trie_get_next_key() (CVE-2024-50262)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:11486
Updated
2026-11-02
OSVCLSA-2025-1736469006 No score

Fix of 35 CVEs

Record
CLSA-2025-1736469006
Updated
2026-11-02
OSVCLSA-2025-1736469452 No score

Fix of 35 CVEs

Record
CLSA-2025-1736469452
Updated
2026-11-02
OSVCLSA-2025-1736470237 No score

Fix of 32 CVEs

Record
CLSA-2025-1736470237
Updated
2026-11-02
OSVCLSA-2025-1736470534 No score

Fix of 32 CVEs

Record
CLSA-2025-1736470534
Updated
2026-11-02
OSVCLSA-2025-1736778412 No score

kernel: Fix of 17 CVEs

  • tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
  • ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() {CVE-2022-48951}
  • ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884}
  • ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed {CVE-2024-49884}
  • media: edia: dvbdev: fix a use-after-free {CVE-2024-27043}
  • media: dvbdev: remove double-unlock {CVE-2024-27043}
  • mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858}
  • Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475}
  • x86/alternatives: Disable KASAN in apply_alternatives() {CVE-2023-52504}
  • ieee802154: ca8210: Fix a potential UAF in ca8210_probe {CVE-2023-52510}
  • wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531}
  • vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans {CVE-2024-50264}
  • net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057}
  • bpf: Fix out-of-bounds write in trie_get_next_key() {CVE-2024-50262}
  • KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115}
  • KVM: nSVM: Don't strip host's C-bit from guest's CR3 when reading PDPTRs {CVE-2024-50115}
  • Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950}
  • drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894}
  • drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969}
  • drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895}
Record
CLSA-2025-1736778412
Updated
2026-11-02
OSVCLSA-2025-1736778632 No score

kernel: Fix of 17 CVEs

  • tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
  • ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() {CVE-2022-48951}
  • ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884}
  • ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed {CVE-2024-49884}
  • media: edia: dvbdev: fix a use-after-free {CVE-2024-27043}
  • media: dvbdev: remove double-unlock {CVE-2024-27043}
  • mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858}
  • Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475}
  • x86/alternatives: Disable KASAN in apply_alternatives() {CVE-2023-52504}
  • ieee802154: ca8210: Fix a potential UAF in ca8210_probe {CVE-2023-52510}
  • wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531}
  • vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans {CVE-2024-50264}
  • net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057}
  • bpf: Fix out-of-bounds write in trie_get_next_key() {CVE-2024-50262}
  • KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115}
  • Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950}
  • drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894}
  • drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969}
  • drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895}
Record
CLSA-2025-1736778632
Updated
2026-11-02
OSVCLSA-2025-1736783731 No score

kernel: Fix of 10 CVEs

  • media: edia: dvbdev: fix a use-after-free {CVE-2024-27043}
  • vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans {CVE-2024-50264}
  • net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057}
  • bpf: Fix out-of-bounds write in trie_get_next_key() {CVE-2024-50262}
  • KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115}
  • smb: client: fix UAF in async decryption {CVE-2024-50047}
  • cifs: Adjust key sizes and key generation routines for AES256 encryption {CVE-2024-50047}
  • smb3: rename encryption/decryption TFMs {CVE-2024-50047}
  • uprobe: avoid out-of-bounds memory access of fetching args {CVE-2024-50067}
  • net: do not delay dst_entries_add() in dst_release() {CVE-2024-50036}
  • mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858}
  • firmware_loader: Block path traversal {CVE-2024-47742}
Record
CLSA-2025-1736783731
Updated
2026-11-02
OSVCLSA-2025-1737468474 No score

kernel: Fix of 4 CVEs

  • media: edia: dvbdev: fix a use-after-free {CVE-2024-27043}
  • btrfs: dev-replace: properly validate device names {CVE-2024-26791}
  • KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115}
  • net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057}
  • ipc/sem.c: bugfix for semctl(,,GETZCNT)
  • Increase KEXEC_AUTO_RESERVED_SIZE to 256M
  • x86/apic/x2apic: set affinity of a single interrupt to one cpu
  • bonding:avoid repeated display of same link status change
  • xen/netfront: stop tx queues during live migration
  • xen/balloon: Support xend-based toolstack
  • md/raid5: fix oops during stripe resizing
  • block: fix null pointer dereference in blk_mq_rq_timed_out()
  • block: init flush rq ref count to 1
  • blk-mq: Remove generation seqeunce
  • Revert "driver core: bus: Fix double free in driver API bus_register()"
Record
CLSA-2025-1737468474
Updated
2026-11-02
OSVCLSA-2025-1738671431 No score

kernel: Fix of 43 CVEs

  • smb: client: fix use-after-free of signing key {CVE-2024-53179}
  • smb: client: stop flooding dmesg in smb2_calc_signature() {CVE-2024-53179}
  • smb3: fix oops in calculating shash_setkey {CVE-2024-53179}
  • cifs: return correct error in ->calc_signature() {CVE-2024-53179}
  • cifs: secmech: use shash_desc directly, remove sdesc {CVE-2024-53179}
  • cifs: replace kfree() with kfree_sensitive() for sensitive data {CVE-2024-53179}
  • xsk: fix OOB map writes when deleting elements {CVE-2024-56614}
  • hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103}
  • scsi: sg: Fix slab-use-after-free read in sg_release() {CVE-2024-56631}
  • EDAC/igen6: Avoid segmentation fault on module unload {CVE-2024-56708}
  • acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl {CVE-2024-56662}
  • net: inet: do not leave a dangling sk pointer in inet_create() {CVE-2024-56601}
  • initramfs: avoid filename buffer overrun {CVE-2024-53142}
  • ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
  • Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604}
  • wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156}
  • Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605}
  • Bluetooth: msft: fix slab-use-after-free in msft_do_close() {CVE-2024-36012}
  • Bluetooth: Fix support for Read Local Supported Codecs V2 {CVE-2024-36012}
  • Bluetooth: hci_codec: Fix leaking content of local_codecs {CVE-2024-36012}
  • blk-cgroup: Fix UAF in blkcg_unpin_online() {CVE-2024-56672}
  • net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() {CVE-2024-56602}
  • net: inet6: do not leave a dangling sk pointer in inet6_create() {CVE-2024-56600}
  • NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173}
  • net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603}
  • drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 {CVE-2023-52818}
  • bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}
  • ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689}
  • drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' {CVE-2024-56608}
  • netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141}
  • HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit {CVE-2023-52519}
  • tipc: Fix use-after-free of kernel socket in cleanup_bearer(). {CVE-2024-56642}
  • cifs: Fix buffer overflow when parsing NFS reparse points {CVE-2024-49996}
  • Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475}
  • PM / devfreq: Fix buffer overflow in trans_stat_show {CVE-2023-52614}
  • PM / devfreq: Rework freq_table to be local to devfreq struct {CVE-2023-52614}
  • cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() {CVE-2024-41057}
  • cachefiles: fix slab-use-after-free in fscache_withdraw_volume() {CVE-2024-41058}
  • [ELSCVE-37480] netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() {CVE-2024-41058}
  • memcg: fix possible use-after-free in memcg_write_event_control() {CVE-2022-48988}
  • Bluetooth: ISO: Fix UAF on iso_sock_timeout {CVE-2024-50124}
  • Bluetooth: SCO: Fix UAF on sco_sock_timeout {CVE-2024-50125}
  • Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout {CVE-2024-50125}
  • Bluetooth: Consolidate code around sk_alloc into a helper function {CVE-2024-50125}
  • smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() {CVE-2024-35861}
  • gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() {CVE-2024-26754}
  • smb: client: fix potential UAF in cifs_stats_proc_write() {CVE-2024-35868}
  • smb: client: fix potential UAF in cifs_debug_files_proc_show() {CVE-2024-35868}
  • vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans {CVE-2024-50264}
  • net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057}
  • wifi:…
Record
CLSA-2025-1738671431
Updated
2026-11-02
OSVCLSA-2026-1775655705 No score

kernel-uek: Fix of 34 CVEs

  • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
  • KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115}
  • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
  • NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349}
  • Revert "IB/core: Implement clear counters"
  • Revert "IB/mlx5: Implement clear counters"
  • Revert "ib/core: add SET_DEVICE_OP call for clear_hw_stats()"
  • Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
  • Revert "xfrm: destroy xfrm_state synchronously on net exit path"
  • bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}
  • can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731}
  • drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724}
  • drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991}
  • ext4/jbd2: skip sb flush when EIO happened
  • ext4: save the error code which triggered an
  • fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940}
  • fs: proc: inode: delay put_pid() by RCU
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • genirq/cpuhotplug: Notify about affinity changes breaking the affinity mask
  • io_uring: fix filename leak in __io_openat_prep() {CVE-2025-68814}
  • jbd2: store more accurate errno in superblock
  • libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285}
  • libceph: make free_choose_arg_map() resilient to partial allocation {CVE-2026-22991}
  • macvlan: Add nodst option to macvlan type source
  • macvlan: Use 'hash' iterators to simplify code
  • macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
  • macvlan: fix possible UAF in macvlan_forward_source() {CVE-2026-23001}
  • macvlan: observe an RCU grace period in macvlan_common_newlink() error path {CVE-2026-23273}
  • media: xc2028: avoid use-after-free in load_firmware_cb() {CVE-2024-43900}
  • mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745}
  • net/sched: sch_qfq: do not free existing class in qfq_change_class() {CVE-2026-22999}
  • net: sock: fix hardened usercopy panic in sock_recv_errqueue {CVE-2026-22977}
  • net: usb: rtl8150: fix memory leak on usb_submit_urb() failure {CVE-2025-71154}
  • rds: Add state field to RDS trace logs.
  • rds: Drop rds conn in connect worker if not in down state.
  • scsi: mpi3mr: Sanitise num_phys {CVE-2024-42159}
  • scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193}
  • tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083}
  • wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  • xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added {CVE-2025-40256}
  • xfrm: delete x->tunnel as we delete x {CVE-2025-40215}
  • xfrm: flush all states in xfrm_state_fini
Record
CLSA-2026-1775655705
Updated
2026-11-02
OSVCLSA-2026-1783791022 No score

Fix of 64 CVEs

  • CVE-2026-31607
    • usbip: validate number_of_packets in usbip_pack_ret_submit() {CVE-2026-31607}
  • CVE-2026-31527
    • driver core: platform: use generic driver_override infrastructure {CVE-2026-31527}
  • CVE-2026-43493
    • crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493}
  • CVE-2026-43038
    • ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() {CVE-2026-43038}
  • CVE-2026-43037
    • ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037}
  • CVE-2026-23083
    • fou: Don't allow 0 for FOU_ATTR_IPPROTO. {CVE-2026-23083}
  • CVE-2024-57982
    • xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982}
  • CVE-2024-50115
    • KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115}
  • CVE-2026-53166
    • futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166}
  • CVE-2026-43499
    • rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499}
  • CVE-2023-6546
    • tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux {CVE-2023-6546}
  • CVE-2023-53510
    • scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
  • CVE-2023-53286
    • RDMA/mlx5: Return the firmware result upon destroying QP/RQ {CVE-2023-53286}
  • CVE-2023-53259
    • VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259}
  • CVE-2026-31500
    • Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
  • CVE-2023-52916
    • media: aspeed: Fix memory overwrite if timing is 1600x900 {CVE-2023-52916}
  • CVE-2022-50021
    • ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021}
  • CVE-2022-49799
    • tracing: Fix wild-memory-access in register_synth_event() {CVE-2022-49799}
  • CVE-2022-49234
    • net: dsa: Avoid cross-chip syncing of VLAN filtering {CVE-2022-49234}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2026-23164
    • rocker: fix memory leak in rocker_world_port_post_fini() {CVE-2026-23164}
  • CVE-2026-23150
    • nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). {CVE-2026-23150}
  • CVE-2026-23133
    • wifi: ath10k: fix dma_free_coherent() pointer {CVE-2026-23133}
  • CVE-2026-23121
    • mISDN: annotate data-race around dev->work {CVE-2026-23121}
  • CVE-2026-23108
    • can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak {CVE-2026-23108}
  • CVE-2026-23103
    • ipvlan: Make the addrs_lock be per port {CVE-2026-23103}
  • CVE-2026-23101
    • leds: led-class: Only Add LED to leds_list when it is fully ready {CVE-2026-23101}
  • CVE-2026-23095
    • gue: Fix skb memleak with inner IP protocol 0. {CVE-2026-23095}
  • CVE-2026-23084
    • be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list {CVE-2026-23084}
  • CVE-2026-23080
    • can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23080}
  • CVE-2026-23071
    • regmap: Fix race condition in hwspinlock irqsave routine {CVE-2026-23071}
  • CVE-2026-23058
    • can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23058}
  • CVE-2026-23038
    • pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038}
  • CVE-2026-23011
    • ipv4: ip_gre: make ipgre_header() robust {CVE-2026-23011}
  • CVE-2026-23003
    • ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() {CVE-2026-23003}
  • CVE-2025-71194
    • btrfs: fix deadlock in wait_current_trans() due to ignored transaction type {CVE-2025-71194}
  • CVE-2026-31417
    • net/x25: Fix overflow when accumulating packets {CVE-2026-31417}
  • CVE-2026-31396
    • net: macb: fix use-after-free access to PTP clock…
Record
CLSA-2026-1783791022
Updated
2026-11-02
OSVCLSA-2026-1787304608 No score

kernel-uek: Fix of 34 CVEs

  • Rebased onto Oracle UEK base 5.4.17-2136.357.2.el7uek
  • sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564}
  • ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison {CVE-2026-53309}
  • ocfs2/dlm: validate qr_numregions in dlm_match_regions() {CVE-2026-53043}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
  • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
  • scsi: isci: Fix use-after-free in device removal path {CVE-2026-64103}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY {CVE-2026-31597}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • xfrm_user: fix info leak in build_mapping() {CVE-2026-43089}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
  • e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093}
  • ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318}
  • nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
  • Squashfs: check metadata block offset is within range {CVE-2026-23388}
  • net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381}
  • wifi: mac80211: fix NULL deref in mesh_matches_local() {CVE-2026-23396}
  • icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398}
  • HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382}
  • net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
  • wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367}
  • drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() {CVE-2026-23356}
  • batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
  • drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206}
  • net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040}
  • ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
  • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • sysctl: Fix data races in proc_douintvec(). {CVE-2022-49641}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}
  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083}
  • mm:…
Record
CLSA-2026-1787304608
Updated
2026-11-02
OSVMGASA-2024-0368 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.61 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2024-0368
Updated
2026-11-02
OSVMGASA-2024-0369 No score

Updated kernel, kmod-xtables-addons, kmod-virtualbox & bluez packages fix security vulnerabilities

Upstream kernel version 6.6.61 fixes bugs and vulnerabilities. The bluez, kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record
MGASA-2024-0369
Updated
2026-11-02
OSVopenSUSE-SU-2024:14500-1 No score

kernel-devel-6.11.8-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.11.8-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14500-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14705-1 No score

kernel-devel-longterm-6.12.11-1.1 on GA media

These are all security issues fixed in the kernel-devel-longterm-6.12.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14705-1
Updated
2026-11-02
OSVSUSE-SU-2024:4313-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927).
  • CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
  • CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
  • CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
  • CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).
  • CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070)
  • CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (bsc#1233293).
  • CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233117).
  • CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453).
  • CVE-2024-50267: USB: serial: io_edgeport: fix use after free in debug printk (bsc#1233456).
  • CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
  • CVE-2024-50290: media: cx24116: prevent overflows on SNR calculus (bsc#1233479).
  • CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233490).
  • CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233491).
  • CVE-2024-53061: media: s5p-jpeg: prevent buffer overflows (bsc#1233555).
  • CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (bsc#1233557).

The following non-security bugs were fixed:

  • Update config files (bsc#1218644).
  • e1000e: Correct NVM checksum verification flow (jsc#SLE-8100).
  • e1000e: Correct NVM checksum verification flow (jsc#SLE-8100).
  • e1000e: Do not take care about recovery NVM checksum (jsc#SLE-8100).
  • e1000e: Do not take care about recovery NVM checksum (jsc#SLE-8100).
  • ena: Remove rcu_read_lock() around XDP program invocation (bsc#1198778).
  • ethernet: amazon: ena: A typo fix in the file ena_com.h (bsc#1198778).
  • initramfs: avoid filename buffer overrun (bsc#1232436).
  • kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644).
  • net: ena: Add capabilities field with support for ENI stats capability (bsc#1198778).
  • net: ena: Add debug prints for invalid req_id resets (bsc#1198778).
  • net: ena: Change ENI stats support check to use capabilities field (bsc#1198778).
  • net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1198778).
  • net: ena: Change the name of bad_csum variable (bsc#1198778).
  • net: ena: Extract recurring driver reset code into a function (bsc#1198778).
  • net: ena: Flush XDP packets on error (bsc#1198778).
  • net: ena: Improve error logging in driver (bsc#1198778).
  • net: ena: Move reset completion print to the reset function (bsc#1198778).
  • net: ena: Remove ena_calc_queue_size_ctx struct (bsc#1198778).
  • net: ena: Remove module param and change message severity (bsc#1198778).
  • net: ena: Remove redundant return code check (bsc#1198778).
  • net: ena: Remove unused code (bsc#1198778).
  • net: ena: Set tx_info->xdpf value to NULL (bsc#1198778).
  • net: ena: Update XDP verdict upon failure (bsc#1198778).
  • net: ena: Use bitmask to indicate packet redirection (bsc#1198778).
  • net: ena: Use dev_alloc() in RX buffer allocation (bsc#1198778).
  • net: ena: add device distinct log prefix to files (bsc#1198778).
  • net: ena: add jiffies of last napi call to stats (bsc#1198778).
  • net: ena: aggregate doorbell common operations into a function (bsc#1198778).
  • net: ena: aggregate stats increase into a function (bsc#1198778).
  • net: ena: fix DMA mapping function issues in XDP (bsc#1198778).
  • net: ena: fix coding style nits (bsc#1198778).
  • net: ena: fix inaccurate print type (bsc#1198778).
  • net: ena: introduce XDP redirect…
Record
SUSE-SU-2024:4313-1
Updated
2026-11-02
OSVSUSE-SU-2024:4314-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
  • CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
  • CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
  • CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
  • CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
  • CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).
  • CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819).
  • CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
  • CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).
  • CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).
  • CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354).
  • CVE-2024-49895: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352).
  • CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).
  • CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).
  • CVE-2024-49901: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (bsc#1232305).
  • CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func (bsc#1232337).
  • CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).
  • CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).
  • CVE-2024-49913: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307).
  • CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
  • CVE-2024-49922:…
Record
SUSE-SU-2024:4314-1
Updated
2026-11-02
OSVSUSE-SU-2024:4315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
  • CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
  • CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
  • CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
  • CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
  • CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135).
  • CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
  • CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
  • CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
  • CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
  • CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
  • CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
  • CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
  • CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).
  • CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).
  • CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
  • CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).
  • CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
  • CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).
  • CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
  • CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
  • CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
  • CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
  • CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
  • CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
  • CVE-2024-50127: net: sched: fix…
Record
SUSE-SU-2024:4315-1
Updated
2026-11-02
OSVSUSE-SU-2024:4316-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
  • CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
  • CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
  • CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
  • CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
  • CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).
  • CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
  • CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).
  • CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).
  • CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).
  • CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).
  • CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
  • CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374).
  • CVE-2024-49923: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (bsc#1232361).
  • CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
  • CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368).
  • CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
  • CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
  • CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
  • CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
  • CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).
  • CVE-2024-49983:…
Record
SUSE-SU-2024:4316-1
Updated
2026-11-02
OSVSUSE-SU-2024:4317-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52524: net: nfc: llcp: Add lock when modifying device list (bsc#1220927).
  • CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224).
  • CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
  • CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
  • CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).
  • CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).
  • CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (bsc#1233293).
  • CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233117).
  • CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453).
  • CVE-2024-50267: usb: serial: io_edgeport: fix use after free in debug printk (bsc#1233456).
  • CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
  • CVE-2024-50290: media: cx24116: prevent overflows on SNR calculus (bsc#1233479).
  • CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233490).
  • CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233491).
  • CVE-2024-53061: media: s5p-jpeg: prevent buffer overflows (bsc#1233555).
  • CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (bsc#1233557).

The following non-security bugs were fixed:

  • e1000e: Correct NVM checksum verification flow (jsc#SLE-8100).
  • e1000e: Do not take care about recovery NVM checksum (jsc#SLE-8100).
  • ena: Remove rcu_read_lock() around XDP program invocation (bsc#1198778).
  • ethernet: amazon: ena: A typo fix in the file ena_com.h (bsc#1198778).
  • initramfs: avoid filename buffer overrun (bsc#1232436).
  • kernel-binary: Enable livepatch package only when livepatch is enabled (bsc#1218644).
  • net: ena: Add capabilities field with support for ENI stats capability (bsc#1198778).
  • net: ena: Add debug prints for invalid req_id resets (bsc#1198778).
  • net: ena: Change ENI stats support check to use capabilities field (bsc#1198778).
  • net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1198778).
  • net: ena: Change the name of bad_csum variable (bsc#1198778).
  • net: ena: Extract recurring driver reset code into a function (bsc#1198778).
  • net: ena: Flush XDP packets on error (bsc#1198778).
  • net: ena: Improve error logging in driver (bsc#1198778).
  • net: ena: Move reset completion print to the reset function (bsc#1198778).
  • net: ena: Remove ena_calc_queue_size_ctx struct (bsc#1198778).
  • net: ena: Remove module param and change message severity (bsc#1198778).
  • net: ena: Remove redundant return code check (bsc#1198778).
  • net: ena: Remove unused code (bsc#1198778).
  • net: ena: Set tx_info->xdpf value to NULL (bsc#1198778).
  • net: ena: Update XDP verdict upon failure (bsc#1198778).
  • net: ena: Use bitmask to indicate packet redirection (bsc#1198778).
  • net: ena: Use dev_alloc() in RX buffer allocation (bsc#1198778).
  • net: ena: add device distinct log prefix to files (bsc#1198778).
  • net: ena: add jiffies of last napi call to stats (bsc#1198778).
  • net: ena: aggregate doorbell common operations into a function (bsc#1198778).
  • net: ena: aggregate stats increase into a function (bsc#1198778).
  • net: ena: fix DMA mapping function issues in XDP (bsc#1198778).
  • net: ena: fix coding style nits (bsc#1198778).
  • net: ena: fix inaccurate print type (bsc#1198778).
  • net: ena: introduce XDP redirect implementation (bsc#1198778).
  • net: ena: introduce ndo_xdp_xmit() function for XDP_REDIRECT (bsc#1198778).
  • net: ena: make symbol 'ena_alloc_map_page' static (bsc#1198778).
  • net: ena: re-organize code to improve…
Record
SUSE-SU-2024:4317-1
Updated
2026-11-02
OSVSUSE-SU-2024:4318-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
  • CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
  • CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
  • CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).
  • CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
  • CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
  • CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
  • CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).
  • CVE-2024-46831: net: microchip: vcap: Fix use-after-free…
Record
SUSE-SU-2024:4318-1
Updated
2026-11-02
OSVSUSE-SU-2024:4345-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345)
  • CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
  • CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
  • CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
  • CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
  • CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
  • CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
  • CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
  • CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).
  • CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).
  • CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (bsc#1233293).
  • CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233117).
  • CVE-2024-50259: netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (bsc#1233214).
  • CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453).
  • CVE-2024-50267: usb: serial: io_edgeport: fix use after free in debug printk (bsc#1233456).
  • CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463).
  • CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
  • CVE-2024-50290: media: cx24116: prevent overflows on SNR calculus (bsc#1233479).
  • CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233490).
  • CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233491).
  • CVE-2024-53061: media: s5p-jpeg: prevent buffer overflows (bsc#1233555).
  • CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (bsc#1233557).
  • CVE-2024-53068: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (bsc#1233561).

The following non-security bugs were fixed:

  • Update config files (bsc#1218644).
  • Update config files. Enabled IDPF for ARM64 (bsc#1221309)
  • initramfs: avoid filename buffer overrun (bsc#1232436).
  • kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644).
  • mm/memory: add non-anonymous page check in the copy_present_page() (bsc#1231646).
  • rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644)
  • x86/kexec: Add EFI config table identity mapping for kexec kernel (bsc#1220382).
  • x86/mm/ident_map: Use gbpages only where full GB page should be mapped (bsc#1220382).
Record
SUSE-SU-2024:4345-1
Updated
2026-11-02
OSVSUSE-SU-2024:4346-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
  • CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
  • CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
  • CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
  • CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
  • CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).
  • CVE-2024-50154: tcp: Fix use-after-free of nreq in reqsk_timer_handler() (bsc#1233070).
  • CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (bsc#1233293).
  • CVE-2024-50259: netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (bsc#1233214).
  • CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453).
  • CVE-2024-50267: USB: serial: io_edgeport: fix use after free in debug printk (bsc#1233456).
  • CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463).
  • CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
  • CVE-2024-50290: media: cx24116: prevent overflows on SNR calculus (bsc#1233479).
  • CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233490).
  • CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233491).
  • CVE-2024-53061: media: s5p-jpeg: prevent buffer overflows (bsc#1233555).
  • CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (bsc#1233557).
  • CVE-2024-53068: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (bsc#1233561).

The following non-security bugs were fixed:

  • Update config files (bsc#1218644).
  • Update config files. Enabled IDPF for ARM64 (bsc#1221309)
  • kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644).
  • mm/memory: add non-anonymous page check in the copy_present_page() (bsc#1231646).
  • rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644)
Record
SUSE-SU-2024:4346-1
Updated
2026-11-02
OSVSUSE-SU-2024:4364-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
  • CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556).
  • CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893).
  • CVE-2022-48957: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() (bsc#1231973).
  • CVE-2022-48958: ethernet: aeroflex: fix potential skb leak in greth_init_rings() (bsc#1231889).
  • CVE-2022-48959: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() (bsc#1231976).
  • CVE-2022-48960: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (bsc#1231979).
  • CVE-2022-48962: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (bsc#1232286).
  • CVE-2022-48966: net: mvneta: Fix an out of bounds check (bsc#1232191).
  • CVE-2022-48980: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() (bsc#1232233).
  • CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
  • CVE-2022-48991: mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (bsc#1232070).
  • CVE-2022-49015: net: hsr: Fix potential use-after-free (bsc#1231938).
  • CVE-2022-49017: tipc: re-fetch skb cb after tipc_msg_validate (bsc#1232004).
  • CVE-2022-49020: net/9p: Fix a potential socket leak in p9_socket_open (bsc#1232175).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
  • CVE-2024-39476: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (bsc#1227437).
  • CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
  • CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-42226: Prevent potential failure in handle_tx_event() for Transfer events without TRB (bsc#1228709).
  • CVE-2024-42253: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (bsc#1229005).
  • CVE-2024-44931: gpio: prevent potential speculation leaks in gpio_device_get_desc() (bsc#1229837).
  • CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46716: dmaengine: altera-msgdma:…
Record
SUSE-SU-2024:4364-1
Updated
2026-11-02
OSVSUSE-SU-2024:4367-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-48853: swiotlb: fix info leak with DMA_FROM_DEVICE (bsc#1228015).
  • CVE-2024-26801: Bluetooth: Avoid potential use-after-free in hci_error_reset (bsc#1222413).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
  • CVE-2024-26886: Bluetooth: af_bluetooth: Fix deadlock (bsc#1223044).
  • CVE-2024-27051: cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (bsc#1223769).
  • CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779).
  • CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-46771: can: bcm: Remove proc entry when dev is unregistered (bsc#1230766).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).
  • CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
  • CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
  • CVE-2024-49858: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (bsc#1232251).
  • CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
  • CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
  • CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
  • CVE-2024-49938: wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (bsc#1232552).
  • CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
  • CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
  • CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
  • CVE-2024-50044: Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (bsc#1231904).
  • CVE-2024-50055: driver core: bus: Fix double free in driver API bus_register() (bsc#1232329).
  • CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
  • CVE-2024-50074: parport: Proper fix for array out-of-bounds access (bsc#1232507).
  • CVE-2024-50095: RDMA/mad: Improve handling of timed out WRs of mad agent (bsc#1232873).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
  • CVE-2024-50117: drm/amd: Guard against bad data for ATIF ACPI method (bsc#1232897).
  • CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
  • CVE-2024-50135: nvme-pci: fix race condition between reset and nvme_dev_disable() (bsc#1232888).
  • CVE-2024-50148: Bluetooth: bnep: fix wild-memory-access in proto_unregister (bsc#1233063).
  • CVE-2024-50150: usb: typec: altmode should keep reference to parent (bsc#1233051).
  • CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).
  • CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).
  • CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057).
  • CVE-2024-50183: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1233130).
  • CVE-2024-50187: drm/vc4: Stop the active perfmon before being destroyed (bsc#1233108).
  • CVE-2024-50195: posix-clock: Fix missing timespec64 check in pc_clock_settime() (bsc#1233103).
  • CVE-2024-50218: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow…
Record
SUSE-SU-2024:4367-1
Updated
2026-11-02
OSVSUSE-SU-2024:4376-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560).
  • CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592).
  • CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808).
  • CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
  • CVE-2024-47701: ext4: explicitly exit when ext4_find_inline_entry returns an error (bsc#1231920).
  • CVE-2024-47745: mm: split critical region in remap_file_pages() and invoke LSMs in between (bsc#1232135).
  • CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187).
  • CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
  • CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
  • CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
  • CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).
  • CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
  • CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
  • CVE-2024-49968: ext4: fix error message when rejecting the default hash (bsc#1232264).
  • CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).
  • CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
  • CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).
  • CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
  • CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).
  • CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
  • CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877).
  • CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
  • CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884).
  • CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
  • CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
  • CVE-2024-50127: net: sched: fix…
Record
SUSE-SU-2024:4376-1
Updated
2026-11-02
OSVSUSE-SU-2024:4387-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
  • CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
  • CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).
  • CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
  • CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
  • CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
  • CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).
  • CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518).
  • CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
  • CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
  • CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
  • CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).
  • CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).
  • CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).
  • CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).
  • CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).
  • CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
  • CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
  • CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
  • CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).
  • CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).
  • CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
  • CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
  • CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
  • CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).
  • CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).
  • CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).
  • CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
  • CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).
  • CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).
  • CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).
  • CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
  • CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
  • CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
  • CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).
  • CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added…
Record
SUSE-SU-2024:4387-1
Updated
2026-11-02
OSVSUSE-SU-2024:4388-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927).
  • CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
  • CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
  • CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
  • CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).
  • CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).
  • CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (bsc#1233293).
  • CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233117).
  • CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453).
  • CVE-2024-50267: usb: serial: io_edgeport: fix use after free in debug printk (bsc#1233456).
  • CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
  • CVE-2024-50290: media: cx24116: prevent overflows on SNR calculus (bsc#1233479).
  • CVE-2024-50301: security/keys: fix slab-out-of-bounds in key_task_permission (bsc#1233490).
  • CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233491).
  • CVE-2024-53061: media: s5p-jpeg: prevent buffer overflows (bsc#1233555).
  • CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (bsc#1233557).

The following non-security bugs were fixed:

  • Update config files (bsc#1218644).
  • initramfs: avoid filename buffer overrun (bsc#1232436).
  • kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644).
  • rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644)
Record
SUSE-SU-2024:4388-1
Updated
2026-11-02
OSVSUSE-SU-2025:0035-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-48853: swiotlb: fix info leak with DMA_FROM_DEVICE (bsc#1228015).
  • CVE-2024-26801: Bluetooth: Avoid potential use-after-free in hci_error_reset (bsc#1222413).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
  • CVE-2024-26886: Bluetooth: af_bluetooth: Fix deadlock (bsc#1223044).
  • CVE-2024-27051: cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (bsc#1223769).
  • CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526).
  • CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).
  • CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779).
  • CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708).
  • CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
  • CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
  • CVE-2024-46771: can: bcm: Remove proc entry when dev is unregistered (bsc#1230766).
  • CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).
  • CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930).
  • CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
  • CVE-2024-49858: efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (bsc#1232251).
  • CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
  • CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
  • CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
  • CVE-2024-49938: wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (bsc#1232552).
  • CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
  • CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
  • CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
  • CVE-2024-50044: Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (bsc#1231904).
  • CVE-2024-50055: driver core: bus: Fix double free in driver API bus_register() (bsc#1232329).
  • CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520).
  • CVE-2024-50074: parport: Proper fix for array out-of-bounds access (bsc#1232507).
  • CVE-2024-50095: RDMA/mad: Improve handling of timed out WRs of mad agent (bsc#1232873).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
  • CVE-2024-50117: drm/amd: Guard against bad data for ATIF ACPI method (bsc#1232897).
  • CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).
  • CVE-2024-50135: nvme-pci: fix race condition between reset and nvme_dev_disable() (bsc#1232888).
  • CVE-2024-50148: Bluetooth: bnep: fix wild-memory-access in proto_unregister (bsc#1233063).
  • CVE-2024-50150: usb: typec: altmode should keep reference to parent (bsc#1233051).
  • CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).
  • CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).
  • CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057).
  • CVE-2024-50183: scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1233130).
  • CVE-2024-50187: drm/vc4: Stop the active perfmon before being destroyed (bsc#1233108).
  • CVE-2024-50195: posix-clock: Fix missing timespec64 check in pc_clock_settime() (bsc#1233103).
  • CVE-2024-50218: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow…
Record
SUSE-SU-2025:0035-1
Updated
2026-11-02
OSVSUSE-SU-2025:01590-1 No score

Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122_216 fixes several issues.

The following security issues were fixed:

  • CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage (bsc#1229504).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1233019).
Record
SUSE-SU-2025:01590-1
Updated
2026-11-02
OSVSUSE-SU-2025:01593-1 No score

Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122_228 fixes several issues.

The following security issues were fixed:

  • CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1233019).
Record
SUSE-SU-2025:01593-1
Updated
2026-11-02
OSVSUSE-SU-2025:01601-1 No score

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_8 fixes several issues.

The following security issues were fixed:

  • CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678).
  • CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage (bsc#1229504).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1233019).
Record
SUSE-SU-2025:01601-1
Updated
2026-11-02
OSVSUSE-SU-2025:01603-1 No score

Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_10_11 fixes several issues.

The following security issues were fixed:

  • CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678).
  • CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1233019).
Record
SUSE-SU-2025:01603-1
Updated
2026-11-02
OSVSUSE-SU-2025:01610-1 No score

Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues.

The following security issues were fixed:

  • CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage (bsc#1229504).
  • CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1233019).
Record
SUSE-SU-2025:01610-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:9
From an advisory covering 17 CVEs
 before 7.4.0-503.19.1.el9_5
7.4.0-503.19.1.el9_5
kernel
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-debug
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-devel
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-modules
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-cross-headers
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-debug
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-debug-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-debug-devel
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-debug-modules
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-devel
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-devel-matched
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-doc
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-headers
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-modules
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-modules-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-modules-extra
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt-debug
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt-devel
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt-modules
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt-modules-core
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-rt-modules-extra
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel-tools
AlmaLinux:9
From an advisory covering 17 CVEs
 before 5.14.0-503.19.1.el9_5
5.14.0-503.19.1.el9_5
kernel
Azure Linux:2
 before 5.15.173.1-1
5.15.173.1-1
kernel
Azure Linux:3
 before 6.6.64.2-1
6.6.64.2-1
linux-lts
Alpaquita:23
 6.1.114-r1 up to 6.1.115-r0
6.1.115-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.6.100-r0 up to 6.12.41-r0
6.12.41-r0
linux-buildinfo-4.15.0-242-tuxcare.els30-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-buildinfo-4.15.0-242-tuxcare.els30-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-cloud-tools-4.15.0-242-tuxcare.els30
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-cloud-tools-4.15.0-242-tuxcare.els30-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-cloud-tools-4.15.0-242-tuxcare.els30-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-cloud-tools-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-crashdump
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-headers-4.15.0-242-tuxcare.els30
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-headers-4.15.0-242-tuxcare.els30-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-headers-4.15.0-242-tuxcare.els30-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-headers-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-headers-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-image-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-image-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-image-unsigned-4.15.0-242-tuxcare.els30-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-image-unsigned-4.15.0-242-tuxcare.els30-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-modules-4.15.0-242-tuxcare.els30-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-modules-4.15.0-242-tuxcare.els30-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-modules-extra-4.15.0-242-tuxcare.els30-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-source
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-tools-4.15.0-242-tuxcare.els30
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-tools-4.15.0-242-tuxcare.els30-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-tools-4.15.0-242-tuxcare.els30-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-tools-generic
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-tools-host
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0-242.253
4.15.0-242.253
linux-tools-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 35 CVEs
 before 4.15.0.242.253
4.15.0.242.253
linux-buildinfo-4.4.0-269-tuxcare.els40-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-buildinfo-4.4.0-269-tuxcare.els40-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-cloud-tools-4.4.0-269-tuxcare.els40
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-cloud-tools-4.4.0-269-tuxcare.els40-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-cloud-tools-4.4.0-269-tuxcare.els40-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-cloud-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-cloud-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-crashdump
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-doc
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0.269.303
4.4.0.269.303
linux-headers-4.4.0-269-tuxcare.els40
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
linux-headers-4.4.0-269-tuxcare.els40-generic
TuxCare:Ubuntu:16.04
From an advisory covering 32 CVEs
 before 4.4.0-269.303
4.4.0-269.303
Kernel
Linux
 3.2.0 up to 5.10.229, 5.11.0 up to 5.15.170, 5.16.0 up to 6.1.115, 6.2.0 up to 6.6.59, 6.7.0 up to 6.11.6
5.10.2295.15.1706.1.1156.6.596.11.6
linux
Debian:12
 before 6.1.115-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.27-1
Show 25 moreShow less
6.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.115-1
linux
Debian:13
 before 6.11.6-1
6.11.6-1
linux
Debian:14
 before 6.11.6-1
6.11.6-1
linux-6.1
Debian:11
From an advisory covering 838 CVEs
 before 6.1.119-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u1
6.1.119-1~deb11u1
linux
Debian:11
From an advisory covering 387 CVEs
 before 5.10.234-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 39 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.234-1
kernel-linus
Mageia:9
From an advisory covering 92 CVEs
 before 6.6.61-1.mga9
6.6.61-1.mga9
kernel
Mageia:9
From an advisory covering 92 CVEs
 before 6.6.61-1.mga9
6.6.61-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 92 CVEs
 before 7.0.20-58.mga9
7.0.20-58.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 92 CVEs
 before 3.24-66.mga9
3.24-66.mga9
bluez
Mageia:9
From an advisory covering 92 CVEs
 before 5.79-1.mga9
5.79-1.mga9
kernel
openEuler:22.03-LTS-SP1
From an advisory covering 25 CVEs
 before 5.10.0-136.102.0.183.oe2203sp1
5.10.0-136.102.0.183.oe2203sp1
kernel
openEuler:24.03-LTS
From an advisory covering 37 CVEs
 before 6.6.0-55.0.0.58.oe2403
6.6.0-55.0.0.58.oe2403
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 21 CVEs
 before 5.10.0-237.0.0.136.oe2203sp4
5.10.0-237.0.0.136.oe2203sp4
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 22 CVEs
 before 5.10.0-237.0.0.139.oe2203sp3
5.10.0-237.0.0.139.oe2203sp3
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 5 CVEs
 before 4.19.90-2411.4.0.0304.oe2003sp4
4.19.90-2411.4.0.0304.oe2003sp4
bpftool-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:7.4.0-503.19.1.el9_5
0:7.4.0-503.19.1.el9_5
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
bpftool
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:7.4.0-503.19.1.el9_5
0:7.4.0-503.19.1.el9_5
bpftool-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:7.4.0-503.19.1.el9_5
0:7.4.0-503.19.1.el9_5
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 17 CVEs
 before 0:5.14.0-503.19.1.el9_5
0:5.14.0-503.19.1.el9_5
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-livepatch-SLE15-SP3_Update_51
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 27 CVEs
 before 1-150300.7.3.1
1-150300.7.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1.150300.18.109.1
5.3.18-150300.59.185.1.150300.18.109.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-default
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1.150300.18.109.1
5.3.18-150300.59.185.1.150300.18.109.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-preempt
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-source
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1.150300.18.109.1
5.3.18-150300.59.185.1.150300.18.109.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-default
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1.150300.18.109.1
5.3.18-150300.59.185.1.150300.18.109.1
kernel-default
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1.150300.18.109.1
5.3.18-150300.59.185.1.150300.18.109.1
kernel-64kb
SUSE:Enterprise Storage 7.1
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-default
SUSE:Enterprise Storage 7.1
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-default-base
SUSE:Enterprise Storage 7.1
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1.150300.18.109.1
5.3.18-150300.59.185.1.150300.18.109.1
kernel-docs
SUSE:Enterprise Storage 7.1
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-obs-build
SUSE:Enterprise Storage 7.1
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-preempt
SUSE:Enterprise Storage 7.1
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-source
SUSE:Enterprise Storage 7.1
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-syms
SUSE:Enterprise Storage 7.1
From an advisory covering 27 CVEs
 before 5.3.18-150300.59.185.1
5.3.18-150300.59.185.1
kernel-livepatch-SLE15-SP6-RT_Update_6
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 241 CVEs
 before 1-150600.1.3.1
1-150600.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 241 CVEs
 before 6.4.0-150600.10.20.1
6.4.0-150600.10.20.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 241 CVEs
 before 6.4.0-150600.10.20.1
6.4.0-150600.10.20.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 241 CVEs
 before 6.4.0-150600.10.20.1
6.4.0-150600.10.20.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 241 CVEs
 before 6.4.0-150600.10.20.1
6.4.0-150600.10.20.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 241 CVEs
 before 6.4.0-150600.10.20.1
6.4.0-150600.10.20.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 241 CVEs
 before 6.4.0-150600.10.20.1
6.4.0-150600.10.20.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 241 CVEs
 before 6.4.0-150600.10.20.1
6.4.0-150600.10.20.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 241 CVEs
 before 6.4.0-150600.10.20.1
6.4.0-150600.10.20.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-rt
openSUSE:Leap Micro 5.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-rt
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-rt_debug
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-source-rt
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-syms-rt
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.13.79.1
5.14.21-150500.13.79.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 228 CVEs
 before 6.4.0-150600.8.20.1
6.4.0-150600.8.20.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 228 CVEs
 before 6.4.0-150600.8.20.1
6.4.0-150600.8.20.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 228 CVEs
 before 6.4.0-150600.8.20.1
6.4.0-150600.8.20.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1.150600.12.12.6
6.4.0-150600.23.30.1.150600.12.12.6
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 506 CVEs
 before 6.4.0-150600.23.30.1
6.4.0-150600.23.30.1
kernel-azure
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.33.75.1
5.14.21-150500.33.75.1
kernel-source-azure
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.33.75.1
5.14.21-150500.33.75.1
kernel-syms-azure
openSUSE:Leap 15.5
From an advisory covering 230 CVEs
 before 5.14.21-150500.33.75.1
5.14.21-150500.33.75.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 83 CVEs
 before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 83 CVEs
 before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 83 CVEs
 before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2.150600.12.18.4
6.4.0-150600.23.42.2.150600.12.18.4
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
 before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
 before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
 before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
 before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known

History

History
RecordedChangedSources
affectedOSV
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-50115 is a high vulnerability (CVSS 8.4) in Linux, published November 5, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in kernel 5.15.173.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 849 package rows, 2,220 versions, 3,856 references and the rest of 23 source descriptions. The JSON record has them. Also not on the record: 14 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 63 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open